Metacat

   private long TOPLEVELSTARTNODEID = 0; //if start node is 0, means it is top

/**

    * Check if the permission order for user at that documents is allowFirst

    * @param principals, list of names of principals to check for

    * @param docid, document identifier to check for

    */

  public Vector<AccessControlForSingleFile> getAccessControl()

                  throws SQLException, Exception

  {

	Vector<AccessControlForSingleFile> accessControl = new Vector<AccessControlForSingleFile>();

    boolean hasRow;

    PreparedStatement pStmt = null;

    DBConnection conn = null;

    int serialNumber = -1;

    String sql = null;

    boolean topLever =false;

    sql = "SELECT principal_name, permission, perm_type, perm_order FROM xml_access ";

    //TODO, need this?

    long startId = 0;

    if (startId == TOPLEVELSTARTNODEID)

    {

      //top level

      topLever = true;

      sql += "WHERE docid = ? AND startnodeid is NULL";

    }

    else

    {

      //sub tree level

      sql += "WHERE docid = ? AND startnodeid = ?";

    }

    try

    {

      //check out DBConnection

      conn=DBConnectionPool.getDBConnection("AccessControlList.getPermissions");

      serialNumber=conn.getCheckOutSerialNumber();

      //select permission order from database

      pStmt = conn.prepareStatement(sql);

        //bind value

        pStmt.setString(1, docId);//docid

        // if subtree, we need set subtree id

        if (!topLever)

        {

          pStmt.setLong(2, startId);

        }

        pStmt.execute();

        ResultSet rs = pStmt.getResultSet();

        while (rs.next())

        {

          //get the permission order from data base

          String principalName=rs.getString(1);

          String permission=rs.getString(2);

          String permType=rs.getString(3);

          String permOrder=rs.getString(4);

          //translate to string version

          String myPermission = AccessControlList.txtValue(Integer.parseInt(permission));

          //make it into an object

          AccessControlForSingleFile acfsf = 

        	  new AccessControlForSingleFile(docId, principalName, myPermission, permType, permOrder);

          accessControl.add(acfsf);

        }

        pStmt.close();

    }//try

    catch (SQLException e)

    {

      throw e;

    }

    finally

    {

      try

      {

        pStmt.close();

      }

      finally

      {

        DBConnectionPool.returnDBConnection(conn, serialNumber);

      }

    }

    return accessControl;

  }//getPermissions