Synnefo

        sql = '''create table if not exists permissions (

                    name text, read text, write text, primary key (name))'''

        self.con.execute(sql)

    def get_object_permissions(self, user, account, container, name):

        """Return a dictionary with the object permissions."""

        logger.debug("get_object_permissions: %s %s %s", account, container, name)

        path = self._get_objectinfo(account, container, name)[0]

        return self._get_permissions(path)

    def update_object_permissions(self, user, account, container, name, permissions):

        """Update the permissions associated with the object."""

        logger.debug("update_object_permissions: %s %s %s %s", account, container, name, permissions)

        path = self._get_objectinfo(account, container, name)[0]

        r, w = self._check_permissions(path, permissions)

        self._put_permissions(path, r, w)

    def update_object_hashmap(self, user, account, container, name, size, hashmap, meta={}, replace_meta=False, permissions={}):

        if permissions:

            r, w = self._check_permissions(path, permissions)

        if permissions:

            sql = 'insert or replace into permissions (name, read, write) values (?, ?, ?)'

            self.con.execute(sql, (path, r, w))

    def copy_object(self, user, account, src_container, src_name, dest_container, dest_name, dest_meta={}, replace_meta=False, permissions={}, src_version=None):

        logger.debug("copy_object: %s %s %s %s %s %s %s %s %s", account, src_container, src_name, dest_container, dest_name, dest_meta, replace_meta, permissions, src_version)

        if permissions:

            r, w = self._check_permissions(dest_path, permissions)

        if permissions:

            sql = 'insert or replace into permissions (name, read, write) values (?, ?, ?)'

            self.con.execute(sql, (dest_path, r, w))

    def move_object(self, user, account, src_container, src_name, dest_container, dest_name, dest_meta={}, replace_meta=False, permissions={}):

        logger.debug("move_object: %s %s %s %s %s %s %s %s", account, src_container, src_name, dest_container, dest_name, dest_meta, replace_meta, permissions)

        self.copy_object(user, account, src_container, src_name, dest_container, dest_name, dest_meta, replace_meta, permissions, None)

        sql = 'delete from permissions where name = ?'

        self.con.execute(sql, (path,))

        self.con.commit()

    def _can_read(self, user, path):

        return True

    def _can_write(self, user, path):

        return True

    def _check_permissions(self, path, permissions):

        # Check for existing permissions.

        sql = '''select name from permissions

                    where name != ? and (name like ? or ? like name || ?)'''

        c = self.con.execute(sql, (path, path + '%', path, '%'))

        if c.fetchall() is not None:

            raise AttributeError('Permissions already set')

        # Format given permissions set.

        r = permissions.get('read', [])

        w = permissions.get('write', [])

        if True in [False or '*' in x or ',' in x for x in r]:

            raise ValueError('Bad characters in read permissions')

        if True in [False or '*' in x or ',' in x for x in w]:

            raise ValueError('Bad characters in write permissions')

        r = ','.join(r)

        w = ','.join(w)

        if 'public' in permissions:

            r = '*'

        if 'private' in permissions:

            r = ''

            w = ''

        return r, w

    def _get_permissions(self, path):

        sql = 'select read, write from permissions where name = ?'

        c = self.con.execute(sql, (path,))

        row = c.fetchone()

        if not row:

            return {}

        r, w = row

        if r == '' and w == '':

            return {'private': True}

        ret = {}

        if w != '':

            ret['write'] = w.split(',')

        if r != '':

            if r == '*':

                ret['public'] = True

            else:

                ret['read'] = r.split(',')        

        return ret

    def _put_permissions(self, path, r, w):

        sql = 'insert or replace into permissions (name, read, write) values (?, ?, ?)'

        self.con.execute(sql, (path, r, w))

        self.con.commit()

        sql = '''delete from permissions where name like ?'''

        self.con.execute(sql, (path + '%',)) # Redundant.