4},C
d dl Z d dlZd dlZd dlZd dlZd dlmZmZ d dlm Z d dl
m Z m Z m
Z
mZmZmZ d dlmZ d dlmZ d dlmZmZmZ d dlmZmZm Z m Z m Z m Z m Z d d l!m"Z" d
d l#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z) d
d l*m+Z+ d
Z,dZ- G d de Z.e G d d Z/ G d de Z0e G d d Z1de1fdZ2e.j3 fde4de/de d e.de
e5e1f f
d Z6de/de de
e5e1f fd Z7de4de5fd Z8dAde e4 de5fd!Z9de4de:fd"Z;dBd#e5d$ee. fd%ZdBd#e5de=fd'Z?de=fd(Z@de=fd)ZAd* ZBdBde/fd+ZC dAd,e/de/fd-ZD dBde4d.e4d/ee
e/f d0e5fd1ZEd.e4de e4e4e4f fd2ZFde4d3ee. fd4ZGde4de:fd5ZHde4de:fd6ZIde4d7ee. fd8ZJde4fd9ZKde4fd:ZLd;e5d7ee. de=fd<ZMd;e5de=fd=ZNdAd;e5de=fd>ZOd? ZPd@ ZQdS )C N) dataclassfield)Enum)OptionalTupleDictUnionIterableAny)_remount_cagefs)cpusers)CLWPOS_VAR_DIRCLWPOS_UIDS_PATHALLOWED_MODULES_JSON) uid_by_name acquire_lockget_server_wide_optionsServerWideOptionsExtendedJSONEncoder name_by_uidis_user_owned_by_reseller)Feature )
ALL_SUITESAWPSuite PremiumSuiteCDNSuite CDNSuiteProOLD_NEW_SUITE_NAME_PAIRS)get_cached_visible_any_user zsuites_allowed.jsonc e Zd ZdZdZdZdZdS )FeatureStatusEnumdefaultdisabledvisibleallowedN)__name__
__module__ __qualname__DEFAULTDISABLEDVISIBLEALLOWED *py/clwpos/feature_suites/configurations.pyr# r# 3 s( G H GGGGr0 r# c e Zd ZU eed< eeef ed< eeef ed< e e ed< eee
j f ed< e e
Ze eeef ed< d Zed Zd
S ) AdminSuitesConfigversionsuites
attributes unique_idpurchase_dates)default_factory whmcs_suitesc t | j t t D ] }| j | dS )z}
Remove unknown suites from resulting structure.
Actual for downgrade cases, see AWP-272 for details
N)setr5
differencer pop)selfsuites r1
__post_init__z AdminSuitesConfig.__post_init__K sR
%%00Z AA # #E KOOE " " " " # #r0 c t t t | j t | j z }|S N)sortedr< listr5 keysr: )r?
all_suitess r1 suites_listz AdminSuitesConfig.suites_listS sO CT[%5%5%7%7 8 84@Q@V@V@X@X;Y;Y Y Z Z[[
r0 N)r( r) r* int__annotations__r strr# r r datetimedater dictr: rA propertyrH r/ r0 r1 r3 r3 A s
LLL '' ((((S#X } hm+,,,,;@5QU;V;V;VL(4%6 678VVV# # # X r0 r3 c e Zd ZdZdZdZdS ) StatusSourcer$ manualbillingN)r( r) r* r+ COMMAND_LINEBILLING_OVERRIDEr/ r0 r1 rQ rQ Y s GL r0 rQ c e Zd ZU eed< dS )
FeatureStatusstatusN)r( r) r* r# rJ r/ r0 r1 rW rW _ s r0 rW returnc d | D }t j t j t j gt |fd d S )z
Choose final feature status according to priority
CDN is included to multiple suites, so need to decide is it allowed/visible/etc
e.g if at least one suite with cdn feature is allowed -> feature is allowed
c $ g | ]
}|r |j |S rC rX ).0feature_statuss r1
z*_choose_feature_status..j s6 H H H. H%3%:%F %F%F%Fr0 c 8 | j S rC )indexrX )itemstatus_prioritys r1 z(_choose_feature_status..m s O,A,A$+,N,N r0 )keyr )r# r. r- r, rD )target_statusessort_byrc s @r1 _choose_feature_statusrh c s_ H HO H H HG(02C2KM^MghO ' N N N N O O OPQ RRr0 uid admin_configserver_wide_options
allowed_statec 0 dt dt fd dt dt dt dt f fd }i }|j D ]}t | j j v}|t j k s|t j k r|rd}nd}|j
| } |j
| }
t t | | D ]B} t |
| || || | || || |
g || < C|S ) ar
Construct feature allowance dict based on given suites.
We require both primary_features and feature_set
iterables. Consider the following corner cases:
feature_set iterable:
1. All suites are disallowed
2. We want to allow only accelerate_wp_cdn suite
3. We aim to allow both cdn and site_optimization features,
thus we need feature_set iterable
primary_features iterable:
1. All suites are allowed
2. We want to disallow only accelerate_wp_cdn suite
3. We aim to disallow only cdn feature, not site_optimization,
thus the need for a primary_features iterable
ri featurec h t | j sdS t t | S )zk
All free features are available for users
Addon ownership check for paid features
T)r IS_BILLABLEr r )ri rn s r1 _feature_supported_for_userz5extract_features.._feature_supported_for_user s5
w + 4,[-=-=>>>>r0 r@ status_for_userc |j vrt t j S | | st t j S |t j k r`|j v rt t j S |j v rt t j S t t j S t | S Nr\ ) supported_featuresrW r# r, r+ allowed_featuresr. visible_featuresr- )ri r@ rn rr rq rk s r1 _feature_statez(extract_features.._feature_state s -@ @ @ (9(BCCC C**388 D (9(BCCC C / 7 7 7->>>$,=,EFFFF->>>$,=,EFFFF$,=,FGGGG 888 8r0 primary_features feature_set)rI rK r# rH r ry rw r, r+ r5 getr: getattrrh )
ri rj rk rl rx features_stater@ is_disallowed_by_defaultiterable
manual_statuswhmcs_suite_statusrn rq s
` @r1 extract_featuresr o sv .? ?s ? ? ? ?9C 9 9c 9L] 9 9 9 9 9 9 9" N ) u .6I6Z Z ! - 6 6 6 - 5 5 5:R 5)HH$H$+//66
) 6 : :5 A A z% 0(;; G&< ""7++ sE7MBB sE74FGG> ' 'N7 # # r0 c dt dt ffd }i }| j D ]`}| j | }| j | }t
||| ||| g }|||< a|S )z6
Construct feature dict based on given suites
r@ rr c |t j k r`| j v rt t j S | j v rt t j S t t j S t | S rt )r# r+ allowed_suites_listrW r. visible_suites_listr- r, )r@ rr rk s r1 _suite_statez$extract_suites.._suite_state s / 7 7 7+???$,=,EFFFF+???$,=,EFFFF$,=,FGGGG 888 8r0 )rK r# rH r: r{ r5 rh )rj rk r suites_stater@ r r final_states ` r1 extract_suitesr s 9C 92C 9 9 9 9 9 9 L ) * * ) 6 : :5 A A$+//66
, L
. . L 2 3 3.
* U r0 c j t j t t | }|S )z
Get directory path in which admin's config files are stored.
Hides logic of detecting current OS edition environment.
:param uid: uid
:return: admin's config directory path
)ospathjoinr rK )ri admin_config_dirs r1 get_admin_config_directoryr s' w||$4c#hh?? r0 Fc t | }|s&t j |t }n%t j |t
}|S )z
Get suites_allowed file path for user.
:param uid: uid
:param old: if "old" allowed modules config needed
:return: suites_allowed file path
)r r r r ALLOWED_SUITES_JSONr )ri oldr suites_allowed_paths r1 get_suites_allowed_pathr sT 2#66 S gll+;=P Q Q gll+;=Q R R r0 c t }t t | | }d | D S )z
Reads configuration file (which is manipulated by admin)
and returns only that suites which are allowed
to be enabled by endusers.
:param uid: uid (used only for CL Shared, not used on solo)
@return: list of module unique ids
c B g | ] \ }}|j t j k | S r/ )rX r# r. )r] r@ suite_statuss r1 r_ z&get_allowed_suites.. s; A A A)e\"&7&???
???r0 )r r get_admin_suites_configitems)ri server_defaultssuites_statusess r1 get_allowed_suitesr sY .//O$% is in one of the passed states for any server user.
TNri )r r r r r{ rX rE r
)r@ r usernamer ri userss r1 _is_suite_in_states_for_any_userr s .//O n(## 5c : :OLLPPQVWW^bhhhWYY H h''C
5c : :OLLPPQVWW^bhhhtt i 5$ ? ? ? QQUUV[\\cgmmmr0 c 8 t | t j f S )z>
Checks whether enabled for at least one user
)r r# r. )r@ s r1 is_suite_allowed_for_userr s ,E4E4M3P Q QQr0 c P t | t j t j f| S )z>
Checks whether visible for at least one user
)r r# r. r- )r@ r s r1 is_suite_visible_for_userr s*
,E->-FHYHa,b,4 6 6 6r0 c > t d t D S )@
Check if there are any feature suite allowed on server
c 3 4 K | ]}t | V d S rC )r r] r@ s r1 z.any_suite_allowed_on_server..$ + HHE(//HHHHHHr0 anyr r/ r0 r1 any_suite_allowed_on_serverr ! HHZHHH H HHr0 c > t d t D S )r c 3 4 K | ]}t | V d S rC )r r s r1 r z.any_suite_visible_on_server..+ r r0 r r/ r0 r1 any_suite_visible_on_serverr ' r r0 c @ d t j D } | S )Nc X i | ]'}|j |j r t j n t j (S r/ )nameis_allowed_by_defaultr# r. r+ r s r1
z-get_default_suites_states... sF
*
+ % %"* r0 )r values)r5 s r1 get_default_suites_statesr - s2 &((
F Mr0 c R t t t i i i d }t | }t | d }t j | rt || S t j | rt ||d S |S )zb
Reads suites statuses from .json.
In case if config does not exist returns defaults.
Nr4 r5 r: r8 r6 r7 Tr )
old_config)r3 ALLOWED_SUITES_CONFIG_VERSIONr r r r exists read_json_with_allowed_suites)ri defaultssuites_json_pathold_suited_json_paths r1 r r 8 s
!-(**
H /s3323DAAA w~~&'' ,X7GHHH , - - ,X7KX\]]]]r0 r c 0 |sdnd} t |d 5 }t j | }ddd n # 1 swxY w Y |r1t d || D i i dd}nt |d dk st |d d k r1t d
|| D i i dd}n;i }t
j D ]\ }} | d i |i }
i } | j D ]B} |
| j }
|
r|
|
n| j | | j < C| r| ||< t d || D d
| di D d | di D || d d}| j D ]!\ }}|d
|| "n;# t j t f$ r"}t! j d|| | cY d}~S d}~ww xY wt% di |S )a,
Reads json with suites statuses
for new awp version:
{
"version": "3",
"suites": {
"accelerate_wp": "allowed",
"accelerate_wp_premium": "visible"
}
}
for older awp version:
{
"version": "2",
"suites": {
"accelerate_wp": true,
"accelerate_wp_premium": true
}
}
for oldest awp version:
{
"version": "1",
"modules": {
"object_cache": true,
"site_optimization": true
}
}
r5 modulesrNc ` i | ]+\ }}t | |r t j n t j ,S r/ )r r# r. r, r] kvs r1 r z1read_json_with_allowed_suites..x sE 1 -Q/a1o1B1J1JUfUo r0 )r4 r5 r8 r6 r7 r4 r c J i | ] \ }}||r t j n t j !S r/ )r# r. r, r s r1 r z1read_json_with_allowed_suites.. s@ 1 AU(00;L;U r0 r6 c 4 i | ]\ }}|t | S r/ r# r s r1 r z1read_json_with_allowed_suites.. s7 1 (++ r0 c 4 i | ]\ }}|t | S r/ r r s r1 r z1read_json_with_allowed_suites.. s7 ! ! ! 1 (++! ! !r0 r: c z i | ]8\ }}|t j |d 9S )z%Y-%m-%d)rL strptimerM )r] r@ rM s r1 r z1read_json_with_allowed_suites.. sM # # ##t 8,55dJGGLLNN# # #r0 r8 r7 r z9Config %s is malformed, using defaults instead, error: %sr/ )openjsonloadr r rI r r{ allowed_attrubitesr typer$ r5
setdefaultJSONDecodeErrorKeyErrorloggingwarningr3 )r r r
suites_keyfsuites_from_filer5 r6 r@ suite_config suite_attrssuite_valid_attrs attribute
attr_valuerX es r1 r r O s~ > ",:J?
"C
(
( ,A #y|| , , , , , , , , , , , , , , , 3 8 0 < B B D D #% ! FF !),
-
-
2
2c:J9:U6V6VZ[6[6[8 0 < B B D D #% ! FF J'1'7'9'9
:
:#| . 2 2< D D H HPR S S $&!!-!@ = =I!, !@!@J%9= z8R8R8R+4+< &in55$ :(9Ju% 9 0 < B B D D ! ! 0 4 4^R H H N N P P! ! !# #'7';'; > F& &_ 2 2 4 4 7 7ME6 8 ' 'v 6 6 6 6 7
( + SUeghiii & &v & &&s; I 9 I =I =HI J 'J>J J giddata_dict_to_writecustom_allowed_pathc . |pt | }t j |dt } t j t j | dd t t j
| j n# t $ r Y nw xY wt |d 5 }| | ddd n # 1 swxY w Y t | \ }}} t j ||| t j || dS )z
Writes modules_allowed file for user
:param uid: User uid
:param gid: User gid
:param data_dict_to_write: Data to write
:param custom_allowed_path: custom path of allowed config
)indentclsi F)exist_okwN)r r dumpsr r makedirsr dirnamer pwdgetpwuidpw_nameOSErrorr write get_admin_config_permissionschownchmod)
ri r r r modules_allowed_path json_datar ownergroupmodes
r1 write_suites_allowedr sX /N2I#2N2N
-a=PQQQI 3
BGOO$89955QQQQ S))12222
"C ( ( A 6c::E5$H
!5%000H
!4(((((s# 4B
BB*C CCc : t j | d}}}|||fS )z
Return owner, group and permission which files inside
admin's config directory should have.
User should have rights to read (not write) config,
so we set owner root, group depends on CL edition (see comment above)
i )r getuid)r r r r s r1 r r s$ c5$5E % r0 statuesc t }t | }fdt | || D S )z
Reads configuration file (which is manipulated by admin)
and returns only that modules which are in any of given status
:param uid: uid (used only for CL Shared, not used on solo)
@return: list of module unique ids
c , g | ]\ }}|j v |S r/ r\ )r] rn r^ r s r1 r_ z*_get_modules_by_status.. s9 #G^ G + + , + +r0 )r r r r )ri r default_configsuites_admin_configs ` r1 _get_modules_by_statusr sd -..N1#66 '7 (1 (116 r0 c 8 t | t j f S )z
Reads configuration file (which is manipulated by admin)
and returns only that modules which are allowed
to be enabled by endusers.
:param uid: uid (used only for CL Shared, not used on solo)
@return: list of module unique ids
)r r# r. r s r1 get_allowed_modulesr
s "#(9(A'D E EEr0 c N t | t j t j f S )z
Reads configuration file (which is manipulated by admin)
and returns only that modules which are visible by endusers.
:param uid: uid (used only for CL Shared, not used on solo)
@return: list of module unique ids
)r r# r. r- r s r1 get_visible_modulesr s! "#(9(ACTC\'] ^ ^^r0 statusesc n t | | }t | }g g g }}}|D ]}|t j v s|t j v r| | n#|t j v r| | |t j v r#t j |v r| | |||dS )zD
Dict with features per feature-set which are in
)
accelerate_wpaccelerate_wp_premiumaccelerate_wp_cdn_pro)
r r r rz r appendr r ry r )ri r
rv allowed_suitesfreepremiumcdn_prorn s r1 _get_features_dict_in_statusesr s .c8<<',,N R7'D# $ $ h* * *g9M.M.M KK
0
0
0 NN7 # # # k2 2 2{7G>7Y7Y NN7 # # # !(!( r0 c 8 t | t j f S )z4
Dict with allowed features per feature-set
)r r# r. r s r1 get_allowed_features_dictr # s *#0A0I/L M MMr0 c N t | t j t j f S )z4
Dict with visible features per feature-set
)r r# r. r- r s r1 get_visible_features_dictr * s! *#0A0IK\Kd/e f ffr0 modulec t }t t }|D ]P}t | }|st |t | | | j |v r dS QdS )zO
Checks whether is in any of for at least one user
)rk TF)r rE r
r r r r{ rX )r r
server_configr r ri s r1 _is_module_in_state_for_userr 1 s ,--M OOE (## C!8!=!=0= ? ? ??Bs6{{6U] ^ ^44 ^ 5r0 c 8 t | t j f S z?
Checks whether enabled for at least one user
)r r# r. )r s r1 is_module_allowed_for_userr" A s (1B1J0M N NNr0 c z |rt }|r| |v S t | t j t j f S r! )r r r# r. r- )r use_cachecached_statusess r1 is_module_visible_for_userr& H sG -577 -_, , '1B1JL]Le0f g ggr0 c t j | j }t j | j }t | }t
j | sdS t | j }t |d }d|d t j k |d t j k dd}t | 5 t |||| ddd dS # 1 swxY w Y dS )
z8
Syncing allowed configs (needed for downgrade)
NTr r r r ) object_cachesite_optimization)r4 r )r )r getpwnampw_uidpw_gidr r r r r r5 r# r. r r )r ri r r r config_to_syncmodules_statess r1 _sync_allowed_configsr/ S sT ,x
'C
,x
'C.s33 7>>* + + 1#66=,Sd;;;N /0G HL]Le e!4_!EIZIb!b
N
n % % [ [ S#~>ZZZZ[ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [s C((C,/C,c t t } | D ]7} t | # t $ r t j d| Y 4w xY wd S )Nz3Error while syncing the allowed configs for user %s)rE r
r/ Exceptionr exception)r users r1 sync_allowed_configsr4 m su OOE !$ ' ' ' ' SUY Z Z Z H s 1 AA)FrC )RrL r r r r dataclassesr r enumr typingr r r r r
r clcommon.clcagefsr clcommon.cpapir
clwpos.constantsr r r clwpos.utilsr r r r r r r clwpos.optimization_featuresr r5 r r r r r r cacher r r r# r3 rQ rW rh r+ rI rK r r r r rE r r boolr r r r r r r r r r r
r r r r r r" r& r/ r4 r/ r0 r1 r? s
( ( ( ( ( ( ( ( > > > > > > > > > > > > > > > > - - - - - - " " " " " "
1 0 0 0 0 0 / . . . . . ! + .! ! ! ! !4 ! ! !
S}
S
S
S
S ,=+D E E
E'E /E ) E
c= ! E E E EP' .37]8J3K : C C # c AC AD A A A A n nC nBS9T n n n n&RS RT R R R R6 6S 6D 6 6 6 6IT I I I IIT I I I I ): 4 c' c'#c' /c' c' c' c'P 59 ) )c ) )-249J3J-K ).1 ) ) ) )@ c eCcM.B h7H.I &FS FT F F F F_S _T _ _ _ _ x@Q7R .N3 N N N Ng3 g g g g
AR8S
X\
Os Ot O O O Oh hs h h h h h[ [ [4 r0