Metacat

//  private String publicAcc;

// /* Get the text value of READ, WRITE or ALL. */

//  public static String txtValue ( int permission )

//  {

//    StringBuffer txtPerm = new StringBuffer();

//    if (permission == READ) {

//      txtPerm.append("READ");

//    } 

//    if (permission == WRITE) {

//      txtPerm.append("WRITE");

//    }

//    if (permission == ALL) {

//      txtPerm.append("ALL");

//    }

//

//    return txtPerm.toString();

//  }

  /**

    * Get Access Control List information for document from db connetion.

    * User or Group should have permissions for reading

    * access control information for a document specified by @docid.

    * @param docid document identifier which acl info to get

    * @param user name of user connected to Metacat system

    * @param groups names of user's groups to which user belongs

    */

  public String getACL(String docid, String user, String[] groups) 

          throws SQLException, Exception

  {

    StringBuffer output = new StringBuffer();

    StringBuffer outTemp = new StringBuffer();

    String accDoctype = PropertyService.getProperty("xml.accessdoctype");

    String server = PropertyService.getProperty("server.name");

    String docurl = "metacat://" + server + "/?docid=" + docid;

    String systemID;

    boolean isOwned = false;

    boolean hasPermission = false;

    String publicAcc;

    String acfid = "";

    String acfid_prev = "";

    String principal;

    Vector principalArr = new Vector();

    int permission;

    int perm_prev = -1;

    String permType;

    String permOrder = "";

    String permOrder_prev = "";

    String beginTime = "";

    String begin_prev = "";

    String endTime = "";

    String end_prev = "";

    int ticketCount = -1;

    int ticket_prev = -1;

    DBConnection conn = null;

    int serialNumber = -1;

    PreparedStatement pstmt = null;

    try {

      //check out DBConnection

      conn=DBConnectionPool.getDBConnection("AccessControlList.getACL");

      serialNumber=conn.getCheckOutSerialNumber();

      isOwned = isOwned(docid, user);

      systemID = getSystemID((String)MetacatUtil.

                                      getOptionList(accDoctype).elementAt(0));

      publicAcc = getPublicAccess(docid);

      output.append("<?xml version=\"1.0\"?>\n");

      output.append("<!DOCTYPE acl PUBLIC \"" + accDoctype + "\" \"" +

                    systemID + "\">\n");

      output.append("<acl authSystem=\"\">\n");

      pstmt = conn.prepareStatement(

              "SELECT distinct accessfileid, principal_name, permission, " +

              "perm_type, perm_order, to_char(begin_time,'mm/dd/yyyy'), " +

              "to_char(end_time,'mm/dd/yyyy'), ticket_count " +

              "FROM xml_access WHERE docid = ? " +

              "ORDER BY accessfileid, perm_order, perm_type, permission");

      // Bind the values to the query

      pstmt.setString(1, docid);

      logMetacat.debug("running sql: " + pstmt.toString());

      pstmt.execute();

      ResultSet rs = pstmt.getResultSet();

      boolean hasRows = rs.next();

      while (hasRows) {

        acfid = rs.getString(1);

        principal = rs.getString(2);

        permission = rs.getInt(3);

        permType = rs.getString(4);

        permOrder = rs.getString(5);

        beginTime = rs.getString(6);

        endTime = rs.getString(7);

        ticketCount = rs.getInt(8);

        // if @docid is not owned by @user, only ACL info from that

        // access files to which @user/@groups has "read" permission

        // is extracted

        if ( !isOwned ) {

          if ( !acfid.equals(acfid_prev) ) {

            acfid_prev = acfid;

            //hasPermission = this.hasPermission("READ",user,groups,acfid);

             PermissionController controller = new PermissionController(acfid);

             hasPermission = controller.hasPermission(user,groups,

                                            AccessControlInterface.READSTRING);

          }

          if ( !hasPermission ) {

            rs.next();

            continue;

          }

        }

        // open <resource> tag

        if ( !permOrder.equals(permOrder_prev) ) {

          // close </resource> tag if any was opened 

          output.append(outTemp.toString());

          outTemp = new StringBuffer();

          if ( !permOrder_prev.equals("") ) {

            output.append("  </resource>\n");

          }

          output.append("  <resource order=\"" + permOrder + "\" public=\"" +

                        publicAcc + "\">\n");

          output.append("    <resourceIdentifier>" + docurl + 

                        "</resourceIdentifier>\n");

          permOrder_prev = permOrder;

        }

        // close </allow> or </deny> tag then open new one

        if ( permission != perm_prev ||

             (endTime == null) && (end_prev != null) ||

             (beginTime == null) && (begin_prev != null) ||

             endTime != null && !endTime.equals(end_prev)  ||

             beginTime != null && !beginTime.equals(begin_prev) ||

             ticketCount != ticket_prev )  {

          output.append(outTemp.toString());

          outTemp = new StringBuffer();

          principalArr.removeAllElements();

          output.append("    <" + permType + ">\n");

        }

        // put all principals here for the same 

        // permission, duration and ticket_count

        if ( !principalArr.contains(principal) ) {

          principalArr.addElement(principal);

          output.append("      <principal>" + principal + "</principal>\n");

        } 

        // prepare <permission> tags, <duration> and <ticketCount>

        // if any to put within <allow> (<deny>) by next cicle

        if ( permission != perm_prev || 

             (endTime == null) && (end_prev != null) ||

             (beginTime == null) && (begin_prev != null) ||

             endTime != null && !endTime.equals(end_prev)  ||

             beginTime != null && !beginTime.equals(begin_prev) ||

             ticketCount != ticket_prev )  {

          if ( (permission & READ) == READ ) {

            outTemp.append("      <permission>read</permission>\n");

          }

          if ( (permission & WRITE) == WRITE ) {

            outTemp.append("      <permission>write</permission>\n");

          }

          if ( (permission & ALL) == ALL ) {

            outTemp.append("      <permission>all</permission>\n");

          }

          if ( (permission & CHMOD) == CHMOD ) {

              outTemp.append("      <permission>chmod</permission>\n");

          }

          if ( (beginTime != null) || (endTime != null) ) {

            outTemp.append("      <duration>" + beginTime + " " + endTime +

                          "</duration>\n");

          }

          if ( ticketCount > 0 ) {

            outTemp.append("      <ticketCount>" + ticketCount + 

                          "</ticketCount>\n");

          }

          outTemp.append("    </" + permType + ">\n");

          perm_prev = permission;

          ticket_prev = ticketCount;

          begin_prev = beginTime;

          end_prev = endTime;

        }

        hasRows = rs.next();

      }

      // close <allow> or <deny> if anything left in outTemp var

      output.append(outTemp.toString());

      // If there are no any acl info for @docid accessible by @user/@group,

      // extract only the following information

      if ( permOrder.equals("") ) {

        output.append("  <resource public=\"" + publicAcc + "\">\n");

        output.append("    <resourceIdentifier>" + docurl + 

                      "</resourceIdentifier>\n");

      }

      // always close them

      output.append("  </resource>\n");

      output.append("</acl>\n");

      pstmt.close();

      return output.toString();

    } catch (SQLException e) {

      throw new 

      SQLException("AccessControlList.getACL(). " + e.getMessage());

    }

    finally

    {

      try

      {

        pstmt.close();

      }

      finally

      {

        DBConnectionPool.returnDBConnection(conn, serialNumber);

      }

    }

  }

  /* Check if @user is owner of @docid from db conn. */

  private boolean isOwned(String docid, String user) throws SQLException {

    PreparedStatement pstmt = null;

    DBConnection conn = null;

    int serialNumber = -1;

    try

    {

      //check out DBConnection

      conn=DBConnectionPool.getDBConnection("AccessControlList.isOwned");

      serialNumber=conn.getCheckOutSerialNumber();

      pstmt = conn.prepareStatement("SELECT 'x' FROM xml_documents " +

                                  "WHERE docid = ? " + 

                                  "AND user_owner = ?");

      pstmt.setString(1, docid);

      pstmt.setString(2, user);

      pstmt.execute();

      ResultSet rs = pstmt.getResultSet();

      boolean hasRow = rs.next();

      return hasRow;

    }

    finally

    {

      try

      {

        pstmt.close();

      }

      finally

      {

        DBConnectionPool.returnDBConnection(conn, serialNumber);

      }

    }

  }