X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=sfa%2Fmethods%2Fget_self_credential.py;h=e0ac56927411b92ef32188b555baf60cacef22d6;hb=fd14e60f36944dc5c6cd938806d7590d846d5cd2;hp=49bad017c72ffe39a162c2ea3da6094e0397dedd;hpb=3d7237fa0b5f2b4a60cb97c7fb3b6aecfd94558a;p=sfa.git diff --git a/sfa/methods/get_self_credential.py b/sfa/methods/get_self_credential.py index 49bad017..e0ac5692 100644 --- a/sfa/methods/get_self_credential.py +++ b/sfa/methods/get_self_credential.py @@ -4,6 +4,7 @@ from sfa.trust.credential import * from sfa.trust.rights import * from sfa.util.faults import * +from sfa.util.namespace import * from sfa.util.method import Method from sfa.util.parameter import Parameter, Mixed from sfa.util.record import SfaRecord @@ -14,7 +15,7 @@ class get_self_credential(Method): Retrive a credential for an object @param cert certificate string @param type type of object (user | slice | sa | ma | node) - @param hrn human readable name of object + @param hrn human readable name of object (hrn or urn) @return the string representation of a credential object """ @@ -23,14 +24,14 @@ class get_self_credential(Method): accepts = [ Parameter(str, "certificate"), - Parameter(str, "Human readable name (hrn)"), + Parameter(str, "Human readable name (hrn or urn)"), Mixed(Parameter(str, "Request hash"), Parameter(None, "Request hash not specified")) ] returns = Parameter(str, "String representation of a credential object") - def call(self, cert, type, hrn, request_hash=None): + def call(self, cert, type, xrn, origin_hrn=None): """ get_self_credential a degenerate version of get_credential used by a client to get his initial credential when de doesnt have one. This is the same as @@ -46,7 +47,16 @@ class get_self_credential(Method): @param hrn human readable name of authority to list @return string representation of a credential object """ + if type: + hrn = urn_to_hrn(xrn)[0] + else: + hrn, type = urn_to_hrn(xrn) self.api.auth.verify_object_belongs_to_me(hrn) + + #log the call + if not origin_hrn: + origin_hrn = hrn + self.api.logger.info("interface: %s\tcaller-hrn: %s\ttarget-hrn: %s\tmethod-name: %s"%(self.api.interface, origin_hrn, hrn, self.name)) # send the call to the right manager manager_base = 'sfa.managers' @@ -55,16 +65,16 @@ class get_self_credential(Method): manager = __import__(manager_module, fromlist=[manager_base]) # authenticate the gid - records = manager.resolve(self.api, hrn, type) + records = manager.resolve(self.api, xrn, type) if not records: raise RecordNotFound(hrn) record = SfaRecord(dict=records[0]) gid = record.get_gid_object() gid_str = gid.save_to_string(save_parents=True) - self.api.auth.authenticateGid(gid_str, [cert, type, hrn], request_hash) + self.api.auth.authenticateGid(gid_str, [cert, type, hrn]) # authenticate the certificate against the gid in the db certificate = Certificate(string=cert) if not certificate.is_pubkey(gid.get_pubkey()): raise ConnectionKeyGIDMismatch(gid.get_subject()) - return manager.get_credential(self.api, hrn, type, is_self=True) + return manager.get_credential(self.api, xrn, type, is_self=True)