/ - Diff - Metacat - Ecoinformatics Redmine

     				<div class="col permissions_col">Permission</div>
     			</div>
     			<xsl:choose>
     			<xsl:when test="acl/resource/@order = 'allowFirst'">
     				<xsl:for-each select="acl/resource/*/principal">
     			<xsl:when test="/access/@order = 'denyFirst'">
     				<xsl:for-each select="/access/allow | /acc:access/deny">
     					<div>
     						<xsl:attribute name="class">
     							<xsl:choose>
-...
     								<xsl:when test="position() mod 2 = 0">row row-even</xsl:when>
     							</xsl:choose>
     						</xsl:attribute>
     						<div class="col access_order_col">allowFirst</div>
     						<div class="col access_order_col">
     							<xsl:value-of select="../@order" />
     						</div>
     						<div class="col access_type_col">
     							<xsl:value-of select="local-name(../)" />
     						</div>
     						<div class="col principal_col">
     							<xsl:value-of select="."/>
     							<xsl:value-of select="./principal"/>
     						</div>
     						<div class="col permissions_col">
     							<xsl:for-each select="../permission">
     							<xsl:for-each select="./permission">
     								<div class="permission_element">
     									<xsl:if test=". != 'all'">
     										<xsl:value-of select="."/>
-...
     				</xsl:for-each>
     			</xsl:when>
     			<xsl:when test="acl/resource/@order = 'denyFirst'">
     			<xsl:when test="acl/resource/@order = 'allowFirst'">
     				<xsl:for-each select="acl/resource/*/principal">
     					<div>
     						<xsl:attribute name="class">

     .access_order_col {
     	width: 95px;
     //	margin-left: 10px;
     //	display: inline;
     //	float: left;
     	font-size: 14px;
+    }
     .access_type_col {
     	width: 85px;
     //	margin-left: 10px;
     //	display: inline;
     //	float: left;
     	font-size: 14px;
+    }
     .principal_col {
     	width: 400px;
     //	margin-left: 10px;
     //	display: inline;
     //	float: left;
     	font-size: 14px;
+    }
     .permissions_col {
     	width: 234px;
     //	margin-left: 10px;
     //	display: inline;
+    }
     .permission_element {

     	 * @param docId
     	 *            document id
     	 */
     	private void deleteXMLAccessForDoc(String docId) throws AccessException {
     	public void deleteXMLAccessForDoc(String docId) throws AccessException {
     		if (docId == null) {
     			throw new AccessException("XMLAccessAccess.deleteXMLAccessForPrincipal - docid is required when " +
     					"deleting XML access record");

+    	}
     	public void setPermission(Long permission) {
     		if (_permission == null) {
     			_permission = new Long(0);
+    		}
     		_permission = permission;
+    	}
     	public void addPermission(Long permission) {
     		if (_permission != null) {
     			_permission &= permission;
     		} else {
     			_permission = permission;
+    		}
+    	}
     	public String getPermType() {
     		return _permType;
+    	}

     import org.xml.sax.helpers.XMLReaderFactory;
     import edu.ucsb.nceas.metacat.DocInfoHandler;
     import edu.ucsb.nceas.metacat.DocumentImpl;
     import edu.ucsb.nceas.metacat.McdbException;
     import edu.ucsb.nceas.metacat.PermissionController;
     import edu.ucsb.nceas.metacat.database.DBConnection;
-...
     public class AccessControlForSingleFile implements AccessControlInterface
+    {
       private String docId;
       private String _docId;
       private Logger logMetacat = Logger.getLogger(AccessControlForSingleFile.class);
-...
       public AccessControlForSingleFile(String accessionNumber) throws AccessControlException
+      {
           //Get rid of dev if myaccessNumber has one;
           docId = DocumentUtil.getDocIdFromString(accessionNumber);
           if (docId == null || docId.equals(""))
     	  _docId = DocumentUtil.getDocIdFromString(accessionNumber);
           if (_docId == null || _docId.equals(""))
+          {
             throw new AccessControlException("AccessControlForSingleFile() - Accession number " +
             		"can't be null in constructor");
+          }
           logMetacat.debug("AccessControlForSingleFile() - docid: " + docId);
           logMetacat.debug("AccessControlForSingleFile() - docid: " + _docId);
+      }
-...
     			// It will bitwise OR to permissions if the principal already has a record for this
     			// doc id.
     			XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     			xmlAccessAccess.addXMLAccess(docId, principalName, new Long(permission), permType, permOrder);
     			xmlAccessAccess.addXMLAccess(_docId, principalName, new Long(permission), permType, permOrder);
     		} catch (AccessException ae) {
     			throw new AccessControlException("AccessControlForSingleFile.insertPermissions - "
     					+ "DB access error when inserting permissions: " + ae.getMessage());
-...
     	public void insertPermissions(String accessBlock) throws AccessControlException {
     		try {
     			XMLReader parser = null;
     			DocInfoHandler docInfoHandler = new DocInfoHandler();
     			DocInfoHandler docInfoHandler = new DocInfoHandler(_docId);
     			ContentHandler chandler = docInfoHandler;
     			// Get an instance of the parser
-...
     			parser.parse(new InputSource(new StringReader(accessBlock)));
     			XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     			xmlAccessAccess.deleteXMLAccessForDoc(_docId);
     	        Vector<XMLAccessDAO> accessControlList = docInfoHandler.getAccessControlList();
     	        if (accessControlList != null) {
     	        	for (XMLAccessDAO xmlAccessDAO : accessControlList) {
             			insertPermissions(xmlAccessDAO);
     					logMetacat.debug("AccessControlForSingleFile.insertPermissions - document " + docId
     					logMetacat.debug("AccessControlForSingleFile.insertPermissions - document " + _docId
     							+ " permissions added to DB");
+    	            }
+    	        }
     		} catch (PropertyNotFoundException pnfe) {
     			throw new AccessControlException("AccessControlForSingleFile.insertPermissions - "
     					+ "property error when inserting permissions: " + pnfe.getMessage());
     					+ "property error when replacing permissions: " + pnfe.getMessage());
     		} catch (AccessException ae) {
     			throw new AccessControlException("AccessControlForSingleFile.insertPermissions - "
     					+ "DB access error when replacing permissions: " + ae.getMessage());
     		} catch (SAXException se) {
     			throw new AccessControlException("AccessControlForSingleFile.insertPermissions - "
     					+ "SAX error when inserting permissions: " + se.getMessage());
     					+ "SAX error when replacing permissions: " + se.getMessage());
     		} catch(IOException ioe) {
     			throw new AccessControlException("AccessControlForSingleFile.insertPermissions - "
     					+ "I/O error when inserting permissions: " + ioe.getMessage());
     					+ "I/O error when replacing permissions: " + ioe.getMessage());
+    		}
+    	}
-...
     				"AND perm_order =? ");
     			// Bind the values to the query
     			pstmt.setString(1, docId);
     			pstmt.setString(1, _docId);
     			pstmt.setString(2, xmlAccessDAO.getPrincipalName());
     			pstmt.setLong(3, xmlAccessDAO.getPermission());
     			pstmt.setString(4, xmlAccessDAO.getPermType());
-...
     	 * @param groups
     	 *            names of user's groups to which user belongs
     	 */
     	public String getACL(String user, String[] groups, boolean emlCompliant)
     	public String getACL(String user, String[] groups)
     			throws AccessControlException {
     		StringBuffer output = new StringBuffer();
     		boolean hasPermission = false;
     		try {
     			// Get a list of all access dao objects for this docid
     			XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     			Vector<XMLAccessDAO> xmlAccessDAOList = xmlAccessAccess.getXMLAccessForDoc(docId);
     			hasPermission = isOwned(docId, user);
     		try {
     			hasPermission = isOwned(_docId, user);
     			if (!hasPermission) {
     				PermissionController controller = new PermissionController(docId);
     				PermissionController controller = new PermissionController(_docId);
     				hasPermission =
     					controller.hasPermission(user, groups, READSTRING);
+    			}
     			if (hasPermission) {
     				output.append(getAccessString(xmlAccessDAOList, emlCompliant));
     				// Get a list of all access dao objects for this docid
     				XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     				Vector<XMLAccessDAO> xmlAccessDAOList = xmlAccessAccess.getXMLAccessForDoc(_docId);
     				output.append(getAccessString(xmlAccessDAOList));
     			} else {
     				output.append(getAccessString(new Vector<XMLAccessDAO>()));
+    			}
     			return output.toString();
-...
     		try {
     			// Get a list of all access dao objects for this docid
     			XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     			xmlAccessDAOList = xmlAccessAccess.getXMLAccessForDoc(docId);
     			xmlAccessDAOList = xmlAccessAccess.getXMLAccessForDoc(_docId);
     		} catch (AccessException ae) {
     				throw new AccessControlException("AccessControlForSingleFile.getAccessString() - DB access error when " +
     						"getting access string: " + ae.getMessage());
+    		}
     		return getAccessString(xmlAccessDAOList, false);
     		return getAccessString(xmlAccessDAOList);
+    	}
     	public String getAccessString(Vector<XMLAccessDAO> xmlAccessDAOList, boolean emlCompliant) throws AccessControlException {
     	public String getAccessString(Vector<XMLAccessDAO> xmlAccessDAOList) throws AccessControlException {
     		StringBuffer output = new StringBuffer();
     		StringBuffer tmpOutput = new StringBuffer();
-...
     		if (xmlAccessDAOList.size() > 0) {
     			permOrder = xmlAccessDAOList.get(0).getPermOrder();
+    		}
     		if (emlCompliant) {
     			output.append("<?xml version=\"1.0\"?>\n<acc:access");
     		} else {
     			output.append("<access ");
+    		}
     		output.append(" authSystem=\"knb\" order=\"" + permOrder + "\" id=\"" + docId + "\" scope=\"document\"");
     		if (emlCompliant) {
     			output.append(" xmlns:acc=\"" + DocumentImpl.EML2_1_0NAMESPACE + "\"");
+    		}
     		output.append("<access authSystem=\"knb\" order=\"" + permOrder + "\" id=\"" + _docId + "\" scope=\"document\"");
     		output.append(">\n");
-...
     			output.append(allowOutput);
+    		}
     		if (emlCompliant) {
     			output.append("</acc:access>");
     		} else {
     			output.append("</access>");
+    		}
     		output.append("</access>");
     		return output.toString();
+    	}

             try {
             	AccessControlForSingleFile acfsf = new AccessControlForSingleFile(docid);
                 String acltext = acfsf.getACL(username, groupnames, true);
                 String acltext = acfsf.getACL(username, groupnames);
                 if (qformat.equals("xml")) {
                     response.setContentType("text/xml");
                 	out.println(acltext);
-...
             if(accessBlock != null) {
             	if (docList == null) {
             		errorList.addElement("MetaCatServlet.handleSetAccessAction - Please check your parameter list, it should look like: "
             		errorList.addElement("MetaCatServlet.handleSetAccessAction - Doc id missing.  Please check your parameter list, it should look like: "
                         + "?action=setaccess&docid=<doc_id>&accessBlock=<access_section>");
                     outputResponse(successList, errorList, out);
                     return;
-...
     	            AccessControlForSingleFile accessControl =
     	            	new AccessControlForSingleFile(docList[0]);
     	            accessControl.insertPermissions(accessBlock[0]);
     	            successList.addElement("MetaCatServlet.handleSetAccessAction - successfully replaced access block for doc id: " + docList[0]);
             	} catch(AccessControlException ace) {
             		errorList.addElement("MetaCatServlet.handleSetAccessAction - access control error when setting " +
             			"access block: " + ace.getMessage());

             pStmt.close();
             throw new
             SQLException("PermissionControl.hasPermission(). " +
             SQLException("PermissionControl.hasPermission - " +
                          "Error checking ownership for " + principals[0] +
                          " on document #" + docId + ". " + e.getMessage());
         }//catch
-...
         //if reach here, means there is no permssion record for given names and
         //docid. So throw a exception.
         throw new Exception("There is no permission record for user"+principals[0]+
                             "at document "+docId);
         throw new Exception("PermissionController.isAllowFirst - There is no permission record for user "+ principals[0] +
                             " at document " + docId);
       }//isAllowFirst

     import org.xml.sax.SAXException;
     import org.xml.sax.helpers.DefaultHandler;
     import edu.ucsb.nceas.metacat.accesscontrol.AccessControlInterface;
     import edu.ucsb.nceas.metacat.accesscontrol.AccessControlList;
     import edu.ucsb.nceas.metacat.accesscontrol.XMLAccessDAO;
     /**
      * A Class implementing callback bethods for the SAX parser to
      * A Class implementing callback methods for the SAX parser to
      * call when processing the XML messages from the replication handler
      */
     public class DocInfoHandler extends DefaultHandler
+    {
       private Hashtable<String,String> docinfo = new Hashtable<String,String>();
       private String currentTag = null;
     public class DocInfoHandler extends DefaultHandler {
     	private Hashtable<String, String> _docinfo = new Hashtable<String, String>();
     	private String _currentTag = null;
     	private XMLAccessDAO _currentAccessDAO = null;
     	private String _accessPermOrder;
     	private String _docId;
       private Vector<XMLAccessDAO> xmlAccessDAOList = new Vector<XMLAccessDAO>();
     	private Vector<XMLAccessDAO> xmlAccessDAOList = new Vector<XMLAccessDAO>();
       public DocInfoHandler()
+      {
+      }
     	public DocInfoHandler() {
+    	}
     	public DocInfoHandler(String docId) {
     		_docId = docId;
+    	}
       /**
        *  capture the name of the tag.
        */
       public void startElement(String uri, String localName, String qName,
                                Attributes attributes) throws SAXException
+      {
         currentTag = localName;
+      }
        /**
     	 * capture the name of the tag.
     	 */
     	public void startElement(String uri, String localName, String qName,
     			Attributes attributes) throws SAXException {
     		_currentTag = localName;
     		if (_currentTag.equals("access")) {
     			if (_accessPermOrder == null) {
     				_accessPermOrder = attributes.getValue("order");
+    			}
     			_currentAccessDAO = new XMLAccessDAO();
     			_currentAccessDAO.setDocId(_docId);
     			_currentAccessDAO.setPermOrder(_accessPermOrder);
+    		}
+    	}
       public void endElement (String uri, String localName, String qName)
     	throws SAXException
+      {
     	  if (localName.equals("access")) {
     		  //harvest the latest values from the Map
     		  String docid = (String) docinfo.get("docid");
     		  String principal = (String) docinfo.get("principal");
               String permission = (String) docinfo.get("permission");
               String permType = (String) docinfo.get("permType");
               String permOrder = (String) docinfo.get("permOrder");
               XMLAccessDAO xmlAccessDAO = null;
     		try {
     			xmlAccessDAO = new XMLAccessDAO();
     			xmlAccessDAO.setDocId(docid);
     			xmlAccessDAO.setPrincipalName(principal);
     			xmlAccessDAO.setPermission(new Long(AccessControlList.intValue(permission)));
     			xmlAccessDAO.setPermType(permType);
     			xmlAccessDAO.setPermOrder(permOrder);
     		} catch (Exception e) {
     			// TODO Auto-generated catch block
     			e.printStackTrace();
+    		}
     		xmlAccessDAOList.add(xmlAccessDAO);
+    	  }
+      }
     	public void endElement(String uri, String localName, String qName)
     			throws SAXException {
     		if (localName.equals("access")) {
     			if (_currentAccessDAO != null) {
     				xmlAccessDAOList.add(_currentAccessDAO);
+    			}
     			_currentAccessDAO = null;
     		} else if (qName.equals(AccessControlInterface.ALLOW)) {
     			if (_currentAccessDAO != null) {
     				_currentAccessDAO.setPermType(AccessControlInterface.ALLOW);
+    			}
     		} else if (qName.equals(AccessControlInterface.DENY)) {
     			if (_currentAccessDAO != null) {
     				_currentAccessDAO.setPermType(AccessControlInterface.DENY);
+    			}
+    		}
+    	}
       /**
        * put the content and the name of the tag into the hashtable.  the name of
        * the tag is the key.
        */
     	 * put the content and the name of the tag into the hashtable. the name of
     	 * the tag is the key.
     	 */
       public void characters(char[] ch, int start, int length) throws SAXException
+      {
         docinfo.put(currentTag, new String(ch, start, length));
         _docinfo.put(_currentTag, new String(ch, start, length));
         if (_currentTag.equals(AccessControlInterface.PRINCIPAL)) {
     		if (_currentAccessDAO != null) {
     			_currentAccessDAO.setPrincipalName(new String(ch, start, length));
+    		}
     	} else if (_currentTag.equals(AccessControlInterface.PERMISSION)) {
     		if (_currentAccessDAO != null) {
     			String permString = new String(ch, start, length);
     			Long permLong = Long.valueOf(AccessControlList.intValue(permString));
     			_currentAccessDAO.addPermission(permLong);
+    		}
+    	}
+      }
       public Hashtable<String,String> getDocInfo()
+      {
         return docinfo;
         return _docinfo;
+      }
       public Vector<XMLAccessDAO> getAccessControlList() {

Project

General

Profile

Metacat

Revision 5099

Added by daigle about 15 years ago