/ - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 1540

Added by Jing Tao over 21 years ago

Add code to handle update access subtree.

        private boolean startCriticalSubTree = false;
        private boolean firstElementForCriticalSubTree = false;
        private String firstElementNameForCriticalSubTree;
        private boolean needCheckingAccessModule = false;
        private Vector unChangableAccessSubTreeVector;
        private AccessSection topAccessSection;
        // Constant
-...
        public  static final String INLINE = "inline";
        private static final String PERMISSIONERROR ="User try to update a subtree"+
                                    " which it doesn't have write permission!";
        private static final String TOPLEVEL = "top";
        private static final String SUBTREELEVEL ="subtree";
         /** Construct an instance of the handler class
         * In this constructor, user can specify the version need to upadate
-...
+         {
            PermissionController control = new PermissionController(docid);
            //unChangableSubTreeHash = getUnchangableSubTree(control, user, groups);
            //If the action is update and user doesn't have "ALL" permission
            // we need to check if user update access subtree
            if (action.equals("UPDATE") &&
              control.hasPermission(user, groups, AccessControlInterface.ALLSTRING))
+           {
              needCheckingAccessModule = true;
              unChangableAccessSubTreeVector = getAccessSubTreeListFromDB();
+           }
+         }
          catch (Exception e)
+         {
-...
           return result;
+       }
        /*
         * Get the subtree node info from xml_accesssubtree table
         */
        private Vector getAccessSubTreeListFromDB() throws Exception
+       {
           Vector result = new Vector();
           PreparedStatement pstmt = null;
           ResultSet rs = null;
           String sql = "SELECT controllevel, subtreeid, startnodeid, endnodeid) " +
                        "FROM xml_accesssubtree WHERE docid like ? " +
                        "ORDER BY startnodeid ASC";
           try
+          {
             pstmt = connection.prepareStatement(sql);
             // Increase DBConnection usage count
             connection.increaseUsageCount(1);
             // Bind the values to the query
             pstmt.setString(1, docid);
             pstmt.execute();
             // Get result set
             rs = pstmt.getResultSet();
             while (rs.next())
+            {
               String level = rs.getString(1);
               String sectionId = rs.getString(2);
               long startNodeId = rs.getLong(3);
               long endNodeId = rs.getLong(4);
               // create a new access section
               AccessSection accessObj = new AccessSection();
               accessObj.setControlLevel(level);
               accessObj.setDocId(docid);
               accessObj.setSubTreeId(sectionId);
               accessObj.setStartNodeId(startNodeId);
               accessObj.setEndNodeId(endNodeId);
               Stack nodeStack = accessObj.getSubTreeNodeList();
               accessObj.setSubTreeNodeStack(nodeStack);
               // add this access obj into vector
               result.add(accessObj);
               // Get the top level access subtree control
               if ( level != null && level.equals(TOPLEVEL))
+              {
                 topAccessSection = accessObj;
+              }
+            }
             pstmt.close();
           }//try
           catch (SQLException e)
+          {
             throw new
             SAXException("EMLSAXHandler.getAccessSubTreeListFromDB(): " +
                           e.getMessage());
           }//catch
           finally
+          {
             try
+            {
               pstmt.close();
+            }
             catch(SQLException ee)
+            {
               throw new
               SAXException("EMLSAXHandler.getAccessSubTreeListFromDB(): " +
               ee.getMessage());
+            }
           }//finally
           return result;
+       }
        /** SAX Handler that is called at the start of each XML element */
        public void startElement(String uri, String localName,
                                 String qName, Attributes atts)
-...
            accessObject.setPermissionOrder(permOrder);
            // set access id
            String accessId = currentNode.getAttribute(ID);
            accessObject.setAccessSectionId(accessId);
            accessObject.setAccessSectionStartNodeId(startNodeId);
            accessObject.setSubTreeId(accessId);
            accessObject.setStartNodeId(startNodeId);
+         }
          // Set up a access rule for allow
-...
          else if (currentTag.equals(ACCESS))
+         {
            // finish parse a access setction and assign it to new one
            accessObject.setAccessSectionEndNodeId(endNodeId);
            accessObject.setEndNodeId(endNodeId);
            AccessSection newAccessObject = accessObject;
            if (newAccessObject != null)
+           {
-...
         if ( accessSection != null )
+        {
            AccessSection accessSectionObj = (AccessSection)accessSection;
            // write the top level access module into xml_accesssubtree to store info
            // and then when update to check if the user can update it or not
            deleteAccessSubTreeRecord(docid);
            writeAccessSubTreeIntoDB(accessSectionObj,TOPLEVEL);
            // if accessSection is not null and is not reference
            if ( accessSectionObj.getReferences() == null)
+           {
-...
             for (int i=0; i<accessObjectList.size(); i++)
+            {
               AccessSection accessObj = (AccessSection)accessObjectList.elementAt(i);
               String accessObjId = accessObj.getAccessSectionId();
               String accessObjId = accessObj.getSubTreeId();
               if (referenceId != null && accessObj != null &&
                   referenceId.equals(accessObjId))
+              {
                 writeGivenAccessRuleIntoDB(accessObj, top, subSectionId);
                 // write the reference access into xml_accesssubtree too
                 writeAccessSubTreeIntoDB(accessObj, SUBTREELEVEL);
                 findAccessObject = true;
+              }
             }//for
-...
+                  {
                     AccessSection accessObj =
                                     (AccessSection)accessObjectList.elementAt(i);
                     String accessObjId = accessObj.getAccessSectionId();
                     String accessObjId = accessObj.getSubTreeId();
                     MetaCatUtil.debugMessage("access obj id in the list(go through): "
                                             + accessObjId, 35);
                     if (referenceId != null && accessObj != null &&
-...
+        }
       }//deletePermissionsInAccessTable
       /* In order to make sure only usr has "all" permission can update access
        * subtree in eml document we need to keep access subtree info in
        * xml_accesssubtree table, such as docid, version, startnodeid, endnodeid
        */
       private void writeAccessSubTreeIntoDB(AccessSection accessSection,
                                              String level)
                                              throws SAXException
+      {
          if (accessSection == null)
+         {
            throw new SAXException("The access object is null");
+         }
           String sql = null;
           PreparedStatement pstmt = null;
           sql = "INSERT INTO xml_accesssubtree (docid, rev, controllevel, "+
                      "subtreeid, startnodeid, endnodeid) VALUES " +
                      " (?, ?, ?, ?, ?, ?)";
           try
+          {
             pstmt = connection.prepareStatement(sql);
             // Increase DBConnection usage count
             connection.increaseUsageCount(1);
             long startNodeId = accessSection.getStartNodeId();
             long endNodeId = accessSection.getEndNodeId();
             String sectionId = accessSection.getSubTreeId();
             // Bind the values to the query
             pstmt.setString(1, docid);
             MetaCatUtil.debugMessage("Docid in access-subtreetable: "+ docid, 35);
             pstmt.setString(2, revision );
             MetaCatUtil.debugMessage("rev in accesssubtreetable: "+ revision, 35);
             pstmt.setString(3, level);
             MetaCatUtil.debugMessage("contorl level in access-subtree table: "+
                                       level, 35);
             pstmt.setString(4, sectionId);
             MetaCatUtil.debugMessage("Subtree id in access-subtree table: "+
                                       sectionId, 35);
             pstmt.setLong(5, startNodeId);
             MetaCatUtil.debugMessage("Start node id is: " + startNodeId, 35);
             pstmt.setLong(6, endNodeId);
             MetaCatUtil.debugMessage("End node id is: " + endNodeId, 35);
             pstmt.execute();
             pstmt.close();
           }//try
           catch (SQLException e)
+          {
             throw new
             SAXException("EMLSAXHandler.writeAccessSubTreeIntoDB(): " +
                           e.getMessage());
           }//catch
           finally
+          {
             try
+            {
               pstmt.close();
+            }
             catch(SQLException ee)
+            {
               throw new
               SAXException("EMLSAXHandler.writeAccessSubTreeIntoDB(): " +
               ee.getMessage());
+            }
           }//finally
       }//writeAccessSubtreeIntoDB
        /* Delete every access subtree record from xml_accesssubtree.*/
       private void deleteAccessSubTreeRecord(String docId) throws SAXException
+      {
         Statement stmt = null;
         try
+        {
           // delete all acl records for resources related to @aclid if any
           stmt = connection.createStatement();
           // Increase DBConnection usage count
           connection.increaseUsageCount(1);
           stmt.execute("DELETE FROM xml_accesssubtree WHERE docid = '" + docId + "'");
+        }
         catch (SQLException e)
+        {
           throw new SAXException(e.getMessage());
+        }
         finally
+        {
           try
+          {
             stmt.close();
+          }
           catch (SQLException ee)
+          {
             throw new SAXException(ee.getMessage());
+          }
+        }
       }//deleteAccessSubTreeRecord
       // write inline data into file system and return file name(without path)
       private StringBuffer writeInlineDataIntoFile(StringBuffer data)
                                                    throws SAXException

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 1540

Added by Jing Tao over 21 years ago