Metacat

    dontOccur($doc, "//dataset/access/deny", "dataset/access/deny");

    $results = $doc->findnodes('//dataset/access/allow');

        foreach $node ($results->get_nodelist) {

            my @children = $node->childNodes;

	    my $principal = "";

	    my $permission = "";

            for (my $i = 0; $i < scalar(@children); $i++) {

                my $child = $children[$i];

                if ($child->nodeName eq 'principal') {

                    $principal = $child->textContent();

                } elsif ($child->nodeName eq 'permission') {

                    $permission = $child->textContent();

                }

	    if ($principal eq 'public' && $permission ne 'read') { $accessError = 1; }

	    if ($principal eq $username && $permission ne 'all') { $accessError = 2; }

	    if ($principal ne 'public' && $principal ne $username && $principal ne $moderators && $permission ne 'all') { $accessError = 3; }

            if ($accessError == 3){

                my $session = CGI::Session->load();

                if ( !$session->is_empty ) {

                        my $username = $session->param("username");

                        my $password = $session->param("password");

                        if($principal eq $username){

                                $accessError = 0;

                        }

	}

	if ($accessError != 0) {

	    my $error ="The ACL for this document has been changed outside the registry. Please use Morpho to edit this document";

            push(@errorMessages, $error."\n");

	}     

    # change the access rules	

   	$accessblock .= "<allow>\n";

   	$accessblock .= "<principal>".$_."</principal>\n";

   	$accessblock .= "<permission>all</permission>\n";

   	$accessblock .= "</allow>\n";