Metacat

/**

 *  '$RCSfile$'

 *    Purpose: A Class that loads eml-access.xml file containing ACL

 *             for a metadata document into relational DB

 *  Copyright: 2000 Regents of the University of California and the

 *             National Center for Ecological Analysis and Synthesis

 *    Authors: Jivka Bojilova

 *    Release: @release@

 *

 *   '$Author$'

 *     '$Date$'

 * '$Revision$'

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

package edu.ucsb.nceas.metacat;

import java.io.*;

import java.sql.*;

import java.util.Stack;

import java.util.Vector;

import java.net.URL;

import java.net.MalformedURLException;

import org.xml.sax.Attributes;

import org.xml.sax.InputSource;

import org.xml.sax.EntityResolver;

import org.xml.sax.ErrorHandler;

import org.xml.sax.SAXParseException;

import org.xml.sax.XMLReader;

import org.xml.sax.helpers.XMLReaderFactory;

import org.xml.sax.helpers.DefaultHandler;

/**

 * A Class that loads eml-access.xml file containing ACL for a metadata

 * document into relational DB. It extends DefaultHandler class to handle

 * SAX parsing events when processing the XML stream.

 */

public class AccessControlList extends DefaultHandler {

  private static final int READ = 4;

  private static final String DENYFIRST="denyFirst";

  private static final String ALLOW="allow";

  private static final String DENY="deny";

  private static final String PUBLIC="public";

  private static String isnull = MetaCatUtil.dbAdapter.getIsNULLFunction();

  private Stack elementStack;

  private String 	doctype;

  private String 	systemid;

  private Vector resourceURL;

  private Vector resourceID;

  private String permType;

  private String permOrder;

  private String endTime;

  private int    ticketCount;

  private Vector aclObjects = new Vector();

  private String tagName = "";

   * Construct an instance of the AccessControlList class.

   * and from "getaccesscontrol" action

   * Construct an instance of the AccessControlList class.

   *

   * @param conn the JDBC connection where acl data are loaded

   *        resides.

    this.server = MetaCatUtil.getOption("server");

    this.sep = MetaCatUtil.getOption("accNumSeparator");

    this.resourceID = new Vector();

    this.ticketCount = 0;

    this.rev = acldoc.getRev();

    // Initialize the parse

    parser.parse(new InputSource(new StringReader(acl)));

//  /**

//   * Construct an instance of the AccessControlList class.

//   * It parses eml-access file and loads acl data into db connection.

//   * It is used from command line execution.

//   *

//   * @param conn the JDBC connection where acl data are loaded

//   * @param docid the Accession# of the document with the acl data

//   * @param aclfilename the name of acl file containing acl data

//   * @param user the user connected to MetaCat servlet and owns the document

//   * @param groups the groups to which user belongs

//   */

//  public AccessControlList( Connection conn, String aclid, String aclfilename,

//                           String user, String[] groups )

//                  throws SAXException, IOException, McdbException

//  {

//    this(conn, aclid, new FileReader(new File(aclfilename).toString()),

//         user, groups, 1);

//  }

  {

    XMLReader parser = null;

    // Get an instance of the parser

    parser = XMLReaderFactory.createXMLReader(parserName);

    // Set Handlers in the parser

    // Set the EntityReslover to DBEntityResolver instance

  /**

  public void startDocument() throws SAXException

  {

    //delete all previously submitted permissions @ relations

    //this happens only on UPDATE of the access file

    try {

        deletePermissionsForRelatedResources(aclid);

      }

    } catch (SQLException sqle) {

      throw new SAXException(sqle);

    }

  }

  /**

   * the acl information in class variables.

   */

  public void startElement (String uri, String localName,

                            String qName, Attributes atts)

         throws SAXException

  {

    if(localName.equals("allow"))

    {

      tagName = "allow";

    }

    else if(localName.equals("deny"))

    {

      tagName = "deny";

    }

    if (atts != null) {

      int len = atts.getLength();

      for (int i = 0; i < len; i++) {

        currentNode.setAttribute(atts.getLocalName(i), atts.getValue(i));

      }

    }

  }

  /**

   * the acl information in class variables.

         throws SAXException

  {

    {

      return;

    }

    String currentTag = currentNode.getTagName();

          permission = permission | READ;

        } else if ( inputString.trim().toUpperCase().equals("WRITE") ) {

          permission = permission | WRITE;

        {

          permission = permission | ALL;

        beginTime = inputString.trim();

        endTime = inputString.trim();

        try {

          ticketCount = (new Integer(inputString.trim())).intValue();

        } catch (NumberFormatException nfe) {

          throw new SAXException("Wrong integer format for:" + inputString);

        }

  }

  /**

   * the acl information in class variables.

   */

  public void endElement (String uri, String localName, String qName)

         throws SAXException

  {

    String leavingTagName = leaving.getTagName();

         leavingTagName.equals("deny")    ) {

      if ( permission > 0 ) {

        try {

          for (int i=0; i < aclObjects.size(); i++) {

            // docid of the current object

            String docid = (String)aclObjects.elementAt(i);

            DocumentIdentifier docID = new DocumentIdentifier(docid);

            docid = docID.getIdentifier();

            insertPermissions(docid,leavingTagName);

          }

          //should insert permission for aclid itself into database

          DocumentIdentifier aclIdItself = new DocumentIdentifier(aclid);

          String aclIdString = aclIdItself.getIdentifier();

          insertPermissions(aclIdString,leavingTagName);

          throw new SAXException(sqle);

          throw new SAXException(e);

      }

      endTime = null;

      ticketCount = 0;

  }

    * SAX Handler that receives notification of DOCTYPE. Sets the DTD.

    * @param name name of the DTD

    * @param publicId Public Identifier of the DTD

    * @param systemId System Identifier of the DTD

    */

              throws SAXException {

    docname = name;

    doctype = publicId;

    systemid = systemId;

  }

  /**

   * @param name name of the entity

  public void startEntity(String name) throws SAXException {

    if (name.equals("[dtd]")) {

      processingDTD = true;

    }

  }

  /**

   * @param name name of the entity

  public void endEntity(String name) throws SAXException {

    if (name.equals("[dtd]")) {

      processingDTD = false;

    }

  }

  /**

  public String getDocname() {

    return docname;

  }

  /**

  public boolean processingDTD() {

    return processingDTD;

  }

  private Vector getACLObjects(String aclid)

  {

    int serialNumber = -1;

    PreparedStatement pstmt = null;

    try

    {

      //get connection from DBConnectionPool

      conn=DBConnectionPool.getDBConnection("AccessControlList.getACLObject");

      serialNumber=conn.getCheckOutSerialNumber();

      // delete all acl records for resources related to @aclid if any

      pstmt = conn.prepareStatement(

      pstmt.execute();

      ResultSet rs = pstmt.getResultSet();

      boolean hasRows = rs.next();

      while (hasRows) {

        aclObjects.addElement(rs.getString(1));

        hasRows = rs.next();

      }//whil

    {

      throw e;

    }

    finally

    {

      try

      {

        pstmt.close();

      }

      finally

      {

        //retrun DBConnection

        DBConnectionPool.returnDBConnection(conn,serialNumber);

      }

    }

    return aclObjects;

  private void deletePermissionsForRelatedResources(String aclid)

  {

    //int serialNumber = -1;

    Statement stmt = null;

    try

    {

      //check out DBConenction

      //conn=DBConnectionPool.getDBConnection("AccessControlList.deltePerm");

      //serialNumber=conn.getCheckOutSerialNumber();

      // delete all acl records for resources related to @aclid if any

      stmt = connection.createStatement();

      // Increase DBConnection usage count

      connection.increaseUsageCount(1);

      stmt.execute("DELETE FROM xml_access WHERE accessfileid = '" + aclid

                                                                      + "'");

      //increase usageCount!!!!!!

      //conn.increaseUsageCount(1);

    }

    catch (SQLException e)

    {

      throw e;

    }

    finally

    {

      stmt.close();

      //retrun DBConnection

      //DBConnectionPool.returnDBConnection(conn,serialNumber);

    }

   * The DBConnection it is use is class field. Because we want to keep rollback

   * features and it need use same connection

  */

    //DBConnection conn = null;

    //int serialNumber = -1;

      //conn=DBConnectionPool.getDBConnection("AccessControlList.insertPerm");

      //serialNumber=conn.getCheckOutSerialNumber();

      pstmt = connection.prepareStatement(

              "begin_time,end_time,ticket_count, accessfileid) VALUES " +

              "(?,?,?,?,?,to_date(?,'mm/dd/yy'),to_date(?,'mm/dd/yy'),?,?)");

      connection.increaseUsageCount(1);

      pstmt.setString(4, permType);

      pstmt.setString(5, permOrder);

      pstmt.setString(6, beginTime);

      pstmt.setString(7, endTime);

        pstmt.setString(8, "" + ticketCount);

      } else {

      //incrase usagecount for DBConnection

      //conn.increaseUsageCount(1);

        prName = (String)principal.elementAt(j);

        pstmt.setString(2, prName);

        pstmt.execute();

      /*

        // check if there are conflict with permission's order

        String permOrderOpos = permOrder;

        int perm = getPermissions(permission, prName, docid, permOrder);

        if (  perm != 0 ) {

          if ( permOrder.equals("allowFirst") ) {

            permOrderOpos = "denyFirst";

          } else if ( permOrder.equals("denyFirst") ) {

            permOrderOpos = "allowFirst";

                    " for \"" + prName + "\" on document #" + docid +

                    " has/have been used with \"" + permOrderOpos + "\"");

      throw new

      SQLException("AccessControlList.insertPermissions(): " + e.getMessage());

    {

      pstmt.close();

      //return the DBConnection

      //DBConnectionPool.returnDBConnection(conn, serialNumber);

    }

  private int getPermissions(int permission, String principal,

                             String docid, String permOrder)

          throws SQLException

  {

    DBConnection conn = null;

    int serialNumber = -1;

    try

    {

      //check out DBConnection

      conn=DBConnectionPool.getDBConnection("AccessControlList.getPermissions");

      serialNumber=conn.getCheckOutSerialNumber();

      pstmt = conn.prepareStatement(

            "AND principal_name = ? " +

            "AND perm_order NOT = ?");

      pstmt.setString(2, principal);

      pstmt.setString(3, permOrder);

      pstmt.execute();

      ResultSet rs = pstmt.getResultSet();

      boolean hasRow = rs.next();

      int perm = 0;

      while ( hasRow ) {

        perm = rs.getInt(1);

        perm = permission & perm;

        if ( perm != 0 ) {

          pstmt.close();

          return perm;

        }

        hasRow = rs.next();

      }

    }//try

    catch (SQLException e)

    {

      throw e;

    }

    finally

    {

      try

      {

      {

        DBConnectionPool.returnDBConnection(conn, serialNumber);

      }

    return 0;

  }

  /* Get the int value of READ, WRITE or ALL. */

    if ( permission.equals("READ") ) {

      return READ;

    } else if ( permission.equals("WRITE") ) {

      return WRITE;

    } else if ( permission.equals("ALL") ) {

      return ALL;

    }

    return -1;

  }

  /* Get the text value of READ, WRITE or ALL. */

  private String txtValue ( int permission )

  {

    StringBuffer txtPerm = new StringBuffer("\"");

    if ( (permission & READ) != 0 ) {

      txtPerm.append("read");

    }

    if ( (permission & WRITE) != 0 ) {

      if ( txtPerm.length() > 0 ) txtPerm.append(",");

      txtPerm.append("write");

    }

    if ( (permission & ALL) != 0 ) {

      if ( txtPerm.length() > 0 ) txtPerm.append(",");

      txtPerm.append("all");

    }

    return txtPerm.append("\"").toString();

  }

    * has "all" permission to access it.

    * @param docId, the document id need to be checked

    */

      //detele the rev number if docid contains it

      docId=MetaCatUtil.getDocIdFromString(docId);

      PreparedStatement pStmt=null;

      int serialNumber = -1;

      {

        conn=DBConnectionPool.getDBConnection("AccessControlList.isAccessDoc");

        serialNumber=conn.getCheckOutSerialNumber();

                                      "accessfileid like '" + docId +  "'");

        pStmt.execute();

        ResultSet rs = pStmt.getResultSet();

        boolean hasRow = rs.next();

        pStmt.close();

        if(hasRow)

        {

          return true;

        }

      }

      catch(SQLException e)

      {

        throw new SQLException("AccessControlList.isAccessDocument " +

                     "Error checking" +

                     " on document " + docId + ". " + e.getMessage());

      {

        try

        {

           pStmt.close();

        }

        finally

        {

          DBConnectionPool.returnDBConnection(conn, serialNumber);

        }

      }

    }//isAccessDocument

  /**

    * To create a part of query: "docid like '" +str1+ "', " +"docid like '"

    * +str2+"'" ... We need to check user, group and public together for the

    * permission. So we need the principal in an array and according the array

    * to create a part of query which will be used in other methods

    * @param principals, a string array storing the username, groups name and

    * public.

    */

   private String partQueryAboutDocId( String [] principals)

   {

     String partQuery="";

     int lengthOfArray=principals.length;

     for (int i=0;i<(lengthOfArray-1);i++)

     {

        partQuery=partQuery+"docid like '"+principals[i]+"',";

     }

     //the last one dosen't has "'"

     partQuery=partQuery+"docid like '"+principals[(lengthOfArray-1)]+"'";

     return partQuery;

   }

  /**

    * Check if a stirng array contains a given documents' owner

    * @param principals, a string array storing the username, groups name and

    * public.

    * @param docid, the id of given documents

    */

                                                              String docId)

  {

    int lengthOfArray=principals.length;

    boolean hasRow;

    PreparedStatement pStmt=null;

    int serialNumber = -1;