/ - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 1405

Added by Jing Tao almost 22 years ago

Implement to handle document level access control.

        private Vector denyRules = new Vector();
        private String documentId = null;
        private Vector subDocumentIdList = new Vector();
        private boolean processTopLeverAccess = false;
        private boolean processAdditionalAccess = false;
        private AccessSection accessObject= null;
        private AccessRule accessRule = null;
        private Hashtable topLevelAccessControlMap = new Hashtable();
        private Hashtable additionalAccessControlMap = new Hashtable();
        // Constant
        private static final String DESCRIBES = "describes";
        private static final String ADDITIONALMETADATA = "additionalMetadata";
        private static final String ORDER = "order";
        private static final String ID ="id";
         /** Construct an instance of the handler class
+        *
-...
          if (localName.equals(ACCESS))
+         {
            // if it is in addtionalmetacat
            if (currentNode.getTagName() == DESCRIBES)
            if (parentNode.getTagName() == ADDITIONALMETADATA)
+           {
              // get the value in current
               processAdditionalAccess = true;
+           }
            else
+           {
              processTopLeverAccess = true;
+           }
            // create access object
             accessObject = new AccessSection();
+         }
          // Set up accesssection object permorder and id
          if ( currentNode.getTagName().equals(ACCESS) )
+         {
            // set permission order
            String permOrder = currentNode.getAttribute(ORDER);
            accessObject.setPermissionOrder(permOrder);
            // set access id
            String accessId = currentNode.getAttribute(ID);
            accessObject.setAccessSectionId(accessId);
+         }
          // Set up a access rule
          if (parentNode.getTagName().equals(ACCESS) &&
              currentNode.getTagName().equals(ALLOW))
+         {
            accessRule = new AccessRule();
            //set permission type "allow"
            accessRule.setPermissionType(ALLOW);
+         }
          // set up an access rule
          if (parentNode.getTagName().equals(ACCESS) &&
              currentNode.getTagName().equals(DENY))
+         {
            accessRule = new AccessRule();
            //set permission type "allow"
            accessRule.setPermissionType(DENY);
+         }
          // Add the node to the stack, so that any text data can be
          // added as it is encountered
          nodeStack.push(currentNode);
-...
          nodeIndex.addElement(currentNode);
+      }
       /* The run method of xmlIndex thread. It writes XML Index for the document. */
       public void run ()
         /** SAX Handler that is called for each XML text node */
       public void characters(char[] cbuf, int start, int len) throws SAXException
+      {
         DBSAXNode currNode = null;
         DBSAXNode prevNode = null;
         DBConnection dbConn = null;
         int serialNumber = -1;
         String doctype = currentDocument.getDoctype();
         int step = 0;
         int counter = 0;
          super.characters(cbuf, start, len);
          // access stuff
          DBSAXNode currentNode = (DBSAXNode)nodeStack.peek();
          String currentTag = currentNode.getTagName();
          String data = null;
          // add principal
          if (currentTag.equals(PRINCIPAL) && accessRule != null)
+         {
             data = (new String(cbuf, start, len)).trim();
             accessRule.addPrincipal(data);
         try
+        {
           // Opening separate db connection for writing XML Index
           dbConn=DBConnectionPool.getDBConnection("DBSAXHandler.run");
           serialNumber=dbConn.getCheckOutSerialNumber();
           dbConn.setAutoCommit(false);
           //the following while loop construct checks to make sure that the docid
           //of the document that we are trying to index is already
           //in the xml_documents table.  if this is not the case, the foreign
           //key relationship between xml_documents and xml_index is temporarily
           //broken causing multiple problems.
           boolean inxmldoc = false;
           long startTime = System.currentTimeMillis();
           while(!inxmldoc)
+          {
             String xmlDocumentsCheck = "select distinct docid from xml_documents";
             PreparedStatement xmlDocCheck =
                                      dbConn.prepareStatement(xmlDocumentsCheck);
             // Increase usage count
             dbConn.increaseUsageCount(1);
             xmlDocCheck.execute();
             ResultSet doccheckRS = xmlDocCheck.getResultSet();
             boolean tableHasRows = doccheckRS.next();
             Vector docids = new Vector();
             while(tableHasRows)
+         }
          else if (currentTag.equals(PERMISSION) && accessRule != null)
+         {
             data = (new String(cbuf, start, len)).trim();
             // we conbine different a permission into one value
             int permission = accessRule.getPermission();
             // add permision
             if ( data.toUpperCase().equals("READ") )
+            {
               docids.add(doccheckRS.getString(1).trim());
               tableHasRows = doccheckRS.next();
+            }
             for(int i=0; i<docids.size(); i++)
               permission = permission | READ;
+            }
             else if ( data.toUpperCase().equals("WRITE") )
+            {
               String d = ((String)docids.elementAt(i)).trim();
               if(docid.trim().equals(d))
+              {
                 inxmldoc = true;
+              }
+            }
             doccheckRS.close();
             xmlDocCheck.close();
             // make sure the while loop will be ended in reseaonable time
             long stopTime = System.currentTimeMillis();
             if ((stopTime - startTime) > INDEXDELAY)
               permission = permission | WRITE;
+            }
             else if ( data.toUpperCase().equals("CHANGEPERMISSION"))
+            {
               throw new Exception("Couldn't find the docid for index build in" +
                                   "reseaonable time!");
               permission = permission | CHMOD;
+            }
             else if ( data.toUpperCase().equals("ALL") )
+            {
               permission = permission | ALL;
+            }
+          }
             accessRule.setPermission(permission);
+         }
        }//character
       /** SAX Handler that is called at the end of each XML element */
        public void endElement(String uri, String localName,
                               String qName) throws SAXException
+      {
          MetaCatUtil.debugMessage("End ELEMENT " + qName, 50);
           // Going through the elements of the document and writing its Index
           Enumeration nodes = nodeIndex.elements();
           while ( nodes.hasMoreElements() ) {
             currNode = (DBSAXNode)nodes.nextElement();
             currNode.updateNodeIndex(dbConn, docid, doctype);
+          }
           dbConn.commit();
          // Get the node from the stack
          DBSAXNode currentNode = (DBSAXNode)nodeStack.pop();
          // access stuff
          if ((currentNode.getTagName()).equals(ALLOW) ||
              (currentNode.getTagName()).equals(DENY))
+         {
            // finish parser a ccess rule and  clone it
            AccessRule newRule = (AccessRule)accessRule.clone();
            //add the new rule to access section object
            accessObject.addAccessRule(newRule);
            // reset access rule( if we didn't clone, after rseting, this object will
            // point to null
            accessRule = null;
+         }
          else if ((currentNode.getTagName()).equals(ACCESS))
+         {
            // finish parse a access setction and clone it
            AccessSection newAccessObject = (AccessSection)accessObject.clone();
            if (processTopLeverAccess)
+           {
              // top level access control will handle whole document -docid
              topLevelAccessControlMap.put(docid, newAccessObject);
              // reset processtopleveraccess tag
              processTopLeverAccess =false;
+           }
            else if (processAdditionalAccess)
+           {
              // for additional control
+           }
            //reset access section object
            accessObject = null;
+         }
+       }
        catch (Exception e)
        /** SAX Handler that receives notification of end of the document */
        public void endDocument() throws SAXException
+       {
           try
+          {
             dbConn.rollback();
          MetaCatUtil.debugMessage("end Document", 50);
          // write access rule to db
          writeAccessRuleToDB();
          // Starting new thread for writing XML Index.
          // It calls the run method of the thread.
          try
+         {
            xmlIndex.start();
+         }
          catch (NullPointerException e)
+         {
            xmlIndex = null;
            throw new
            SAXException("Problem with starting thread for writing XML Index. " +
                         e.getMessage());
+         }
+       }
       /* The method to write access rule into db. */
       private void writeAccessRuleToDB() throws SAXException
+      {
+          }
           catch (SQLException sqle)
           {}
           MetaCatUtil.debugMessage("Error in DBSAXHandler.run " +
                                     e.getMessage(), 30);
         // for top document level
         AccessSection accessSection = (AccessSection)
                                               topLevelAccessControlMap.get(docid);
         String permOrder = accessSection.getPermissionOrder();
         String sql = "INSERT INTO xml_access (docid, principal_name, permission, "+
                      "perm_type, perm_order, accessfileid) VALUES " +
                      " (?, ?, ?, ?, ?, ?)";
         PreparedStatement pstmt = null;
         try
+        {
           pstmt = connection.prepareStatement(sql);
           // Increase DBConnection usage count
           connection.increaseUsageCount(1);
           // Bind the values to the query
           pstmt.setString(1, docid);
           pstmt.setString(6, docid);
           pstmt.setString(5, permOrder);
+        }
           Vector accessRules = accessSection.getAccessRules();
           // go through every rule
           for (int i=0; i<accessRules.size(); i++)
+          {
             AccessRule rule = (AccessRule)accessRules.elementAt(i);
             String permType = rule.getPermissionType();
             int permission = rule.getPermission();
             pstmt.setInt(3, permission);
             pstmt.setString(4, permType);
             // go through every principle in rule
             Vector nameVector = rule.getPrincipal();
             for ( int j = 0; j < nameVector.size(); j++ )
+           {
              String prName = (String)nameVector.elementAt(j);
              pstmt.setString(2, prName);
              pstmt.execute();
            }//for
          }//for
          pstmt.close();
         }//try
         catch (SQLException e)
+        {
           throw new
           SAXException("EMLSAXHandler.writeAccessRuletoDB(): " + e.getMessage());
         }//catch
         finally
+        {
           DBConnectionPool.returnDBConnection(dbConn, serialNumber);
           try
+          {
             pstmt.close();
+          }
           catch(SQLException ee)
+          {
             throw new
             SAXException("EMLSAXHandler.writeAccessRuletoDB(): " + ee.getMessage());
+          }
         }//finally
      }//run
       }//writeAccessRuletoDB
+    }

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 1405

Added by Jing Tao almost 22 years ago