Warning

This document is for an old release of Galaxy. You can alternatively view this page in the latest release if it exists or view the top of the latest release's documentation.

tool_shed.webapp.security package

Tool Shed Security

class tool_shed.webapp.security.Action(action, description, model)

Bases: object

__init__(action, description, model)

class tool_shed.webapp.security.RBACAgent

Bases: object

Handle Galaxy Tool Shed security

permitted_actions = <galaxy.util.bunch.Bunch object>

associate_components(**kwd)

associate_user_role(user, role)

convert_permitted_action_strings(permitted_action_strings)

When getting permitted actions from an untrusted source like a form, ensure that they match our actual permitted actions.

create_user_role(user, app)

create_private_user_role(user)

get_action(name, default=None)

Get a permitted action by its dict key or action name

get_actions()

Get all permitted actions as a list of Action objects

get_item_actions(action, item)

get_private_user_role(user)

class tool_shed.webapp.security.CommunityRBACAgent(model, permitted_actions=None)

Bases: RBACAgent

__init__(model, permitted_actions=None)

property sa_session

Returns a SQLAlchemy scoped session

allow_action(roles, action, item)

Method for checking a permission for the current user ( based on roles ) to perform a specific action on an item

associate_components(**kwd)

associate_group_role(group, role)

associate_user_group(user, group)

associate_user_role(user, role)

associate_repository_category(repository, category)

create_private_user_role(user)

create_user_role(user, app)

get_item_actions(action, item)

get_private_user_role(user, auto_create=False)

set_entity_group_associations(groups=None, users=None, roles=None, delete_existing_assocs=True)

set_entity_role_associations(roles=None, users=None, groups=None, repositories=None, delete_existing_assocs=True)

set_entity_user_associations(users=None, roles=None, groups=None, delete_existing_assocs=True)

usernames_that_can_push(repository) → List[str]

can_push(app, user, repository)

user_can_administer_repository(user, repository)

Return True if the received user can administer the received repository.

user_can_import_repository_archive(user, archive_owner)

tool_shed.webapp.security.get_permitted_actions(filter=None)

Utility method to return a subset of RBACAgent’s permitted actions

tool_shed.webapp.security.get_iuc_group(session)