Current File : //usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d � Z d � Z d d d d e e
e e d � Z d d d d e e
d � Z d S( uy
Management of MySQL grants (user permissions)
=============================================
:depends: - MySQLdb Python module
:configuration: See :py:mod:`salt.modules.mysql` for setup instructions.
The mysql_grants module is used to grant and revoke MySQL permissions.
The ``name`` you pass in purely symbolic and does not have anything to do
with the grant itself.
The ``database`` parameter needs to specify a 'priv_level' in the same
specification as defined in the MySQL documentation:
* \*
* \*.\*
* db_name.\*
* db_name.tbl_name
* etc...
This state is not able to set password for the permission from the
specified host. See :py:mod:`salt.states.mysql_user` for further
instructions.
.. code-block:: yaml
frank_exampledb:
mysql_grants.present:
- grant: select,insert,update
- database: exampledb.*
- user: frank
- host: localhost
frank_otherdb:
mysql_grants.present:
- grant: all privileges
- database: otherdb.*
- user: frank
restricted_singletable:
mysql_grants.present:
- grant: select
- database: somedb.sometable
- user: joe
i ( t absolute_importt print_functiont unicode_literalsNc C@ s
d t k S( u4
Only load if the mysql module is available
u mysql.grant_exists( t __salt__( ( ( s< /usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyt __virtual__5 s c C@ s! t j t d j j j d d � S( up
Look in module context for a MySQL error. Eventually we should make a less
ugly way of doing this.
u test.pingu mysql.errorN( t syst modulesR t
__module__t __context__t popt None( ( ( s< /usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyt _get_mysql_error< s u localhostc K@ s� d }
i | d 6i d 6t d 6|
j | | | | � d 6} t d | | | | | | | � r` | St � } | d k r� | | d <t | d <| S| r�t d r�t d | | | � }
|
s� g }
n x� |
D]� } t d | � } | j d
� } | d } | d } t d
| | d k � } t d
| � } | d | k r� d j | d � j d � } t d d | d | d | d | d | d | | � q� q� Wn t d r�d | d <d j | � | d <| St d | | | | | | | | � r d | d <| d j | | | | � | d <d | d | <ne d | d <| d j | | | | � | d <t � } | d k rz| d c d j | � 7<n t | d <| S( u
Ensure that the grant is present with the specified properties
name
The name (key) of the grant to add
grant
The grant priv_type (i.e. select,insert,update OR all privileges)
database
The database priv_level (i.e. db.tbl OR db.*)
user
The user to apply the grant to
host
The network/host that the grant should apply to
grant_option
Adds the WITH GRANT OPTION to the defined grant. Default is ``False``
escape
Defines if the database value gets escaped or not. Default is ``True``
revoke_first
By default, MySQL will not do anything if you issue a command to grant
privileges that are more restrictive than what's already in place. This
effectively means that you cannot downgrade permissions without first
revoking permissions applied to a db.table/user pair first.
To have Salt forcibly revoke perms before applying a new grant, enable
the 'revoke_first options.
WARNING: This will *remove* permissions for a database before attempting
to apply new permissions. There is no guarantee that new permissions
will be applied correctly which can leave your database security in an
unknown and potentially dangerous state.
Use with caution!
Default is ``False``
ssl_option
Adds the specified ssl options for the connecting user as requirements for
this grant. Value is a list of single-element dicts corresponding to the
list of ssl options to use.
Possible key/value pairings for the dicts in the value:
.. code-block:: text
- SSL: True
- X509: True
- SUBJECT: <subject>
- ISSUER: <issuer>
- CIPHER: <cipher>
The non-boolean ssl options take a string as their values, which should
be an appropriate value as specified by the MySQL documentation for these
options.
Default is ``False`` (no ssl options will be used)
u. Grant {0} on {1} to {2}@{3} is already presentu nameu changesu resultu commentu mysql.grant_existsu testu mysql.user_grantsu mysql.tokenize_grantu .i i u mysql.quote_identifieru *u databaseu ,u grantu mysql.grant_revoket grantt databaset usert hostt grant_optiont escapeu$ MySQL grant {0} is set to be createdu mysql.grant_addu* Grant {0} on {1} to {2}@{3} has been addedu Presentu0 Failed to execute: "GRANT {0} ON {1} TO {2}@{3}"u ({0})N(
t Truet formatR R R
t Falset __opts__t
rpartitiont joint rstrip( t nameR R
R R R R t revoke_firstt
ssl_optiont connection_argst commentt rett errt user_grantst
user_grantt token_grantst db_partt my_dbt my_tablet grant_to_revoke( ( s< /usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyt presentF sd H
c
K@ sc i | d 6i d 6t d 6d d 6} t d | | | | | | | � rt d ro d | d <d j | � | d <| St d | | | | | | � r� d
j | | | | � | d <d | d | <| St � } | d k rCd j | | | | | � | d <t | d <| SnB t � } | d k rCd
j | | | | | � | d <t | d <| Sd j | | | | � | d <| S( uj
Ensure that the grant is absent
name
The name (key) of the grant to add
grant
The grant priv_type (i.e. select,insert,update OR all privileges)
database
The database priv_level (i.e. db.tbl OR db.*)
user
The user to apply the grant to
host
The network/host that the grant should apply to
u nameu changesu resultu u commentu mysql.grant_existsu testu$ MySQL grant {0} is set to be revokedu mysql.grant_revokeu- Grant {0} on {1} for {2}@{3} has been revokedu Absentu3 Unable to revoke grant {0} on {1} for {2}@{3} ({4})u@ Unable to determine if grant {0} on {1} for {2}@{3} exists ({4})uC Grant {0} on {1} to {2}@{3} is not present, so it cannot be revokedN( R R R R
R R R (
R R R
R R R R R R R ( ( s< /usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyt absent� s^
(
t __doc__t
__future__R R R R R R R
R R R' R( ( ( ( s< /usr/lib/python2.7/site-packages/salt/states/mysql_grants.pyt <module>/ s$ �
Mini Shell