Warning

This document is for an old release of Galaxy. You can alternatively view this page in the latest release if it exists or view the top of the latest release's documentation.

galaxy.webapps.tool_shed.security package

Tool Shed Security

class galaxy.webapps.tool_shed.security.Action(action, description, model)

Bases: object

__init__(action, description, model)

class galaxy.webapps.tool_shed.security.RBACAgent

Handle Galaxy Tool Shed security

permitted_actions = <galaxy.util.bunch.Bunch object>

associate_components(**kwd)

associate_user_role(user, role)

convert_permitted_action_strings(permitted_action_strings)

When getting permitted actions from an untrusted source like a form, ensure that they match our actual permitted actions.

create_private_user_role(user)

get_action(name, default=None)

Get a permitted action by its dict key or action name

get_actions()

Get all permitted actions as a list of Action objects

get_item_actions(action, item)

get_private_user_role(user)

class galaxy.webapps.tool_shed.security.CommunityRBACAgent(model, permitted_actions=None)

Bases: galaxy.webapps.tool_shed.security.RBACAgent

__init__(model, permitted_actions=None)

sa_session

Returns a SQLAlchemy session

allow_action(roles, action, item)

Method for checking a permission for the current user ( based on roles ) to perform a specific action on an item

associate_components(**kwd)

associate_group_role(group, role)

associate_user_group(user, group)

associate_user_role(user, role)

associate_repository_category(repository, category)

create_private_user_role(user)

get_item_actions(action, item)

get_private_user_role(user, auto_create=False)

get_repository_reviewer_role()

set_entity_group_associations(groups=None, users=None, roles=None, delete_existing_assocs=True)

set_entity_role_associations(roles=None, users=None, groups=None, repositories=None, delete_existing_assocs=True)

set_entity_user_associations(users=None, roles=None, groups=None, delete_existing_assocs=True)

can_push(app, user, repository)

user_can_administer_repository(user, repository)

Return True if the received user can administer the received repository.

user_can_import_repository_archive(user, archive_owner)

user_can_review_repositories(user)

user_can_browse_component_review(app, repository, component_review, user)

galaxy.webapps.tool_shed.security.get_permitted_actions(filter=None)

Utility method to return a subset of RBACAgent’s permitted actions