Metacat

    this.authClass = util.getOption("authclass");

    this.authService = (AuthInterface)createObject(authClass);

  }

  /** 

   * determine if the credentials for this session are valid by 

        {

          groups = new String[0];

        }

        String sessionId = session.getId();

        message = "Authentication successful for user: " + username;

        this.statusMessage = formatOutput("login", message, sessionId);

  }

  /** Get new HttpSession and store username & password in it */

                                 String username, String password,

                                 String[] groups)  

                      throws IllegalStateException {

    // if it is still in use invalidate and get a new one

    if ( !session.isNew() ) {

      session.invalidate();

      session = request.getSession(true);

    }

    // store the username, password, and groupname (the first only)

    if ( groups.length > 0 ) {

      session.setAttribute("groupnames", groups);

    }

    return session;

  }

   * @param myName  the user name

   */

  public void setUserName(String myName)

  }

  /**

    ownerQuery = "SELECT docid FROM xml_documents WHERE ";

    if (userName != null && !userName.equals(""))

    {

    }

    MetaCatUtil.debugMessage("OwnerQuery: "+ownerQuery, 30);

     // add allow rule for user name

     if (userName != null && !userName.equals(""))

    {

                              +"' AND perm_type = 'allow'"

                              +" AND (permission='4' OR permission='7'))";

    }

    // add allow rule for public

                              +"' AND perm_type = 'allow'"

                              +" AND (permission='4' OR permission='7'))";

        String groupUint = group[i];

        if (groupUint != null && !groupUint.equals(""))

        {

                              +"' AND perm_type = 'allow'"

                              +" AND (permission='4' OR permission='7'))";

        }//if

    // add deny rule for user name

    if (userName != null && !userName.equals(""))

    {

                              +"' AND perm_type = 'deny' "

                              +"AND perm_order ='allowFirst'"

                              +" AND (permission='4' OR permission='7'))";

    }

    // add deny rule for public

                               +"' AND perm_type = 'deny' "

                               +"AND perm_order ='allowFirst'"

                               +" AND (permission='4' OR permission='7'))";

        String groupUint = group[i];

        if (groupUint != null && !groupUint.equals(""))

        {

                                +"' AND perm_type = 'deny' "

                                +"AND perm_order ='allowFirst'"

                                +" AND (permission='4' OR permission='7'))";

      Enumeration en = ownerList.elements();

      while (en.hasMoreElements()) {

        String current = (String)en.nextElement();

        if (first) {

           first = false;

        } else {

        }

      }

      self.append(") ");

    sql.append("(");

    sql.append("startnodeid NOT IN (SELECT startnodeid from xml_access, xml_documents ");

    sql.append(" WHERE xml_access.docid = xml_documents.docid");

    sql.append(userName);

    sql.append("' AND xml_access.startnodeid IS NOT NULL)"); 

    sql.append(")");

   */

  private String getOwnerQuery(String owner)

  {

    StringBuffer self = new StringBuffer();

    self.append("SELECT docid,docname,doctype,");

    self.append("date_created, date_updated, rev ");

    self.append("FROM xml_documents WHERE docid IN (");

    self.append(") \n");

    self.append(") ");

    self.append(" AND (");

    self.append(") ");

    return self.toString();

  }

    return docId;

  }//getDocIdFromString

  /**

   * Utility method to get version number from a given string

   * @param string, the given string should be these two format:

  }//getVersionFromString

  /**

   * Method to get the name of local replication server

   */

   public static String getLocalReplicationServerName()

        HttpSession sess = request.getSession(true);

        if (sess.isNew() && !params.containsKey("sessionid")) {

          // session expired or has not been stored b/w user requests

          username = "public";

          sess.setAttribute("username", username);

        }

        else

        {

          try

          {

            if(params.containsKey("sessionid"))

            {

              sess_id = ((String[])params.get("sessionid"))[0];

              if(sessionHash.containsKey(sess_id))

              {

                sess = (HttpSession)sessionHash.get(sess_id);

              }

            }

            else

            {

              sess_id = (String)sess.getId();

            }

          }

          catch(IllegalStateException ise)

          }

          username = (String)sess.getAttribute("username");

          password = (String)sess.getAttribute("password");

          groupnames = (String[])sess.getAttribute("groupnames");

        }

      }

       // Now that we know the session is valid, we can delegate the request

      // to a particular action handler

      if(action.equals("query")) {

    AuthSession sess = null;

    String un = ((String[])params.get("username"))[0];

    String pw = ((String[])params.get("password"))[0];

    String action = ((String[])params.get("action"))[0];

    String qformat = ((String[])params.get("qformat"))[0];

      return;

    }

    boolean isValid = sess.authenticate(request, un, pw);

    // format and transform the output

    if (qformat.equals("xml")) {

      response.setContentType("text/xml");

    // close the connection

    HttpSession sess = request.getSession(false);

    // produce output

    StringBuffer output = new StringBuffer();

     // Get the unchangable subtrees (user doesn't have write permission)

     try

     {

       //unChangableSubTreeHash = getUnchangableSubTree(control, user, groups);

   public PermissionController(String myDocid) throws McdbException

   {

     // Get rid of rev number

     hasSubTreeAccessControl = checkSubTreeAccessControl();

   }

      serialNumber=conn.getCheckOutSerialNumber();

      pStmt = conn.prepareStatement(

                "SELECT 'x' FROM xml_documents " +

      //check every element in the string array too see if it conatains

      //the owner of document

      for (int i=0; i<lengthOfArray; i++)

        // Bind the values to the query

        pStmt.setString(1, docId);

        pStmt.setString(2, principals[i]);

        pStmt.execute();

        ResultSet rs = pStmt.getResultSet();

        if (hasRow) 

        {

          pStmt.close();

          return true;

        }//if    

      //top level

      topLever = true;

      sql = "SELECT perm_order FROM xml_access " +

    }

    else

    {

      //sub tree level

      sql = "SELECT perm_order FROM xml_access " +

    }

    try

     // for toplevel

     topLever = true;

     sql = "SELECT permission FROM xml_access WHERE docid = ? " +  

   }

   else

   {

     topLever =false;

     sql = "SELECT permission FROM xml_access WHERE docid = ? " +  

   }

   try

   {

   {

     topLevel = true;

     sql = "SELECT permission FROM xml_access WHERE docid = ? " + 

   }

   else

   {

     topLevel = false;

     sql = "SELECT permission FROM xml_access WHERE docid = ? " + 

   }

   try

        lengthOfPackage=(groups.length)+2;

        usersPackage=new String [lengthOfPackage];

        //the first two elements is user self and public

        usersPackage[1]=AccessControlInterface.PUBLIC;

        //put groups element from index 0 to lengthOfPackage-3 into userPackage

        //from index 2 to lengthOfPackage-1

        for (int i=2; i<lengthOfPackage; i++)

        {

        } //for

      }//if user!=public

      else//use=public

        //from index 1 to lengthOfPackage-1

        for (int i=1; i<lengthOfPackage; i++)

        {

        } //for

      }//else user=public

      {

        lengthOfPackage=2;

        usersPackage=new String [lengthOfPackage];

        usersPackage[1]=AccessControlInterface.PUBLIC;

      }//if user!=public

      else //user==public

    return dataSetId;

  }//getDataPackageId() 

}

       dbconn=DBConnectionPool.

                  getDBConnection("DocumentImpl.registerDocumentInReplication");

      serialNumber=dbconn.getCheckOutSerialNumber();

      int revInDataBase=getLatestRevisionNumber(docIdWithoutRev);

      //revIndataBase=-1, there is no record in xml_documents table

      //the data file is a new one, inert it into table

      //user specified rev should be great than 0

      {

        ac = new AccessionNumber(accnum, "insert");

        // Save the old document publicaccessentry in a backup table

        DocumentImpl.archiveDocRevision(connection, docid, user );

        DocumentImpl thisdoc = new DocumentImpl(docid, false);

        int thisrev = thisdoc.getRev();

        //if the updated vesion is not greater than current one,

        //throw it into a exception

        if (Integer.parseInt(updatedVersion)<=thisrev)

          //set the user specified revision 

          thisrev=Integer.parseInt(updatedVersion);

        }

        // Delete index for the old version of docid

        // The new index is inserting on the next calls to DBSAXNode

        pstmt = connection.prepareStatement(

                "DELETE FROM xml_index WHERE docid='" + this.docid + "'");

        // Increase dbconnection usage count

        connection.increaseUsageCount(1);

      char istreamChar;

      // check for 'write' permission for 'user' to update this document

        throw new Exception("User " + user + 

              " does not have permission to update XML Document #" + accnum);

      }        

    if ( action.equals("UPDATE") ) {

      // check for 'write' permission for 'user' to update this document

        throw new Exception("User " + user + 

              " does not have permission to update XML Document #" + accnum);

      }          

                                        String ruleBase, boolean needValidation)

                                        throws Exception

  {

    // Docid without revision

    // Revision specified by user (int)

    // Revision for this docid in current database

    int revInDataBase=getLatestRevisionNumber(docid);

    // String to store the revision

    String rev = null;

    }

    //rev is greater the last revsion number and revInDataBase isn't -1

    // it is a updated  file

    {

       // rev equals user specified

       rev=(new Integer(userSpecifyRev)).toString();

      MetaCatUtil.debugMessage("Start deleting doc "+docid+ "...", 20);

    // check for 'write' permission for 'user' to delete this document

        throw new Exception("User " + user + 

              " does not have permission to delete XML Document #" + accnum);

      }