Metacat

import java.util.Vector;

  private static final String PROLOG = "<?xml version=\"1.0\"?>";

  private static final String SUCCESS = "<success>";

  private static final String SUCCESSCLOSE = "</success>";

  private static final String ERROR = "<error>";

  private static final String ERRORCLOSE = "</error>";

      } else if (action.equals("setaccess")) {

         PrintWriter out = response.getWriter();

         handleSetAccessAction(out, params, username);

        out.close();

  /*

   * A method to handle set access action

   */

  private void handleSetAccessAction(PrintWriter out,

                                   Hashtable params,

                                   String username)

  {

    String [] docList        = null;

    String [] principalList  = null;

    String [] permissionList = null;

    String [] permTypeList   = null;

    String [] permOrderList  = null;

    String permission = null;

    String permType   = null;

    String permOrder  = null;

    Vector errorList  = new Vector();

    String error      = null;

    Vector successList = new Vector();

    String success    = null;

    // Get parameters

    if (params.containsKey("docid")) 

    {

      docList = (String[])params.get("docid");

    }

    if (params.containsKey("principal"))

    {

      principalList = (String[])params.get("principal"); 

    }

    if (params.containsKey("permission"))

    {

      permissionList = (String[])params.get("permission");

    }

    if (params.containsKey("permType"))

    {

      permTypeList = (String[])params.get("permType");

    }

    if (params.containsKey("permOrder"))

    {

      permOrderList = (String[])params.get("permOrder");

    }

    // Make sure the parameter is not null

    if (docList == null || principalList == null || permTypeList == null ||

        permissionList == null)

    {

      error = "Please check your parameter list, it should look like: "+

              "?action=setaccess&docid=pipeline.1.1&principal=public" +

              "&permission=read&permType=allow&permOrder=allowFirst";

      errorList.addElement(error);

      outputResponse(successList, errorList, out);

      return;

    }

    // Only select first element for permission, type and order

    permission = permissionList[0];

    permType = permTypeList[0];

    if (permOrderList != null)

    {

       permOrder = permOrderList[0];

    }

    // Get package doctype set

    Vector packageSet =MetaCatUtil.getOptionList(

                                    MetaCatUtil.getOption("packagedoctypeset"));

    //debug

    if (packageSet != null)

    {

      for (int i = 0; i<packageSet.size(); i++)

      {

        MetaCatUtil.debugMessage("doctype in package set: " + 

                              (String)packageSet.elementAt(i), 34);

      }

    }//if

    // handle every accessionNumber

    for (int i=0; i <docList.length; i++)

    {

      String accessionNumber = docList[i];

      String owner = null;

      String publicId = null;

      // Get document owner and public id

      try

      {

        owner = getFieldValueForDoc(accessionNumber, "user_owner");

        publicId = getFieldValueForDoc(accessionNumber, "doctype");

      }//try

      catch (Exception e)

      {

        MetaCatUtil.debugMessage("Error in handleSetAccessAction: " +

                                  e.getMessage(), 30);

        error = "Error in set access control for document - " + accessionNumber+

                 e.getMessage();

        errorList.addElement(error);

        continue;

      }

      //check if user is the owner. Only owner can do owner                            

      if (username == null || owner == null || !username.equals(owner))

      {

        error = "User - " + username + " does not have permission to set " +

                "access control for docid - " + accessionNumber;

        errorList.addElement(error);

        continue;

      }

      // If docid publicid is BIN data file or other beta4, 6 package document

      // we could not do set access control. Because we don't want inconsistent

      // to its access docuemnt

      if (publicId!=null && packageSet!=null && packageSet.contains(publicId))

      {

        error = "Could not set access control to document "+ accessionNumber +

                "because it is in a pakcage and it has a access file for it";

        errorList.addElement(error);

        continue;

      }

      // for every principle

      for (int j = 0; j<principalList.length; j++)

      {

        String principal = principalList[j];

        try

        {

          //insert permission

          AccessControlForSingleFile accessControl = new 

                           AccessControlForSingleFile(accessionNumber,

                                    principal, permission, permType, permOrder);

          accessControl.insertPermissions();

          success = "Set access control to document "+ accessionNumber +

                    " successfully";

          successList.addElement(success);

        }

        catch (Exception ee)

        {

          MetaCatUtil.debugMessage("Erorr in handleSetAccessAction2: " +

                                   ee.getMessage(), 30);

          error = "Faild to set access control for document " + 

                  accessionNumber + " because " + ee.getMessage();

          errorList.addElement(error);

          continue;

        }

      }//for every principle

    }//for every document 

    outputResponse(successList, errorList, out);

  }//handleSetAccessAction

  /*

   * A method try to determin a docid's public id, if couldn't find null

   * will be returned.

   */

  private String getFieldValueForDoc(String accessionNumber, String fieldName) 

                                      throws Exception

  {

    if (accessionNumber==null || accessionNumber.equals("") ||fieldName == null

        || fieldName.equals(""))

    {

      throw new Exception("Docid or field name was not specified");

    }

    PreparedStatement pstmt = null;

    ResultSet rs = null;

    String fieldValue = null;

    String docId = null;

    DBConnection conn = null;

    int serialNumber = -1;

    // get rid of revision if access number has

    docId = MetaCatUtil.getDocIdFromString(accessionNumber);

    try

    {

      //check out DBConnection

      conn=DBConnectionPool.getDBConnection("MetaCatServlet.getPublicIdForDoc");

      serialNumber=conn.getCheckOutSerialNumber();

      pstmt = conn.prepareStatement(

            "SELECT " + fieldName + " FROM xml_documents " +

            "WHERE docid = ? ");

      pstmt.setString(1, docId);

      pstmt.execute();

      rs = pstmt.getResultSet();

      boolean hasRow = rs.next();

      int perm = 0;

      if ( hasRow ) 

      {

        fieldValue = rs.getString(1);

      }

      else

      {

        throw new Exception("Could not find document: "+accessionNumber);

      }

    }//try

    catch (Exception e)

    {

      MetaCatUtil.debugMessage("Exception in MetacatServlet.getPublicIdForDoc: "

                               + e.getMessage(), 30);

      throw e;

    }

    finally

    {

      try

      {

        rs.close();

        pstmt.close();

      }

      finally

      {

        DBConnectionPool.returnDBConnection(conn, serialNumber);

      }

    }

    return fieldValue;

  }//getFieldValueForDoc

  /*

   * A method to output setAccess action result

   */

  private void outputResponse(Vector successList, 

                              Vector errorList,

                              PrintWriter out)

  {

    boolean error = false;

    boolean success = false;

    // Output prolog

    out.println(PROLOG);

    // output success message

    if ( successList != null)

    {

      for (int i = 0; i<successList.size(); i++)

      {

        out.println(SUCCESS);

        out.println((String)successList.elementAt(i));

        out.println(SUCCESSCLOSE);

        success = true;

      }//for

    }//if

    // output error message

    if (errorList != null)

    {

      for (int i = 0; i<errorList.size(); i++)

      {

        out.println(ERROR);

        out.println((String)errorList.elementAt(i));

        out.println(ERRORCLOSE);

        error = true;

      }//for

    }//if

    // if no error and no success info, send a error that nothing happened

    if( !error && !success)

    {

      out.println(ERROR);

      out.println("Nothing happend for setaccess action");

      out.println(ERRORCLOSE);

    }

  }//outputResponse