/src/edu/ucsb/nceas/metacat/accesscontrol/AccessControlForSingleFile.java - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 5115

Added by daigle over 14 years ago

Format and add comments.

       private Logger logMetacat = Logger.getLogger(AccessControlForSingleFile.class);
       /**
        * Construct an instance of the AccessControlForSingleFile class.
        * @param myAccessNumber  the docid or docid with dev will be controlled
        */
       public AccessControlForSingleFile(String accessionNumber) throws AccessControlException
+      {
           //Get rid of dev if myaccessNumber has one;
     	  _docId = DocumentUtil.getDocIdFromString(accessionNumber);
           if (_docId == null || _docId.equals(""))
+          {
             throw new AccessControlException("AccessControlForSingleFile() - Accession number " +
             		"can't be null in constructor");
+          }
           logMetacat.debug("AccessControlForSingleFile() - docid: " + _docId);
         /**
     	 * Construct an instance of the AccessControlForSingleFile class.  This
     	 * instance will represent one file only.
+    	 *
     	 * @param myAccessNumber
     	 *            the docid or docid with dev will be controlled
     	 */
     	public AccessControlForSingleFile(String accessionNumber)
     			throws AccessControlException {
+      }
     		// Get rid of dev if myaccessNumber has one;
     		_docId = DocumentUtil.getDocIdFromString(accessionNumber);
     		if (_docId == null || _docId.equals("")) {
     			throw new AccessControlException("AccessControlForSingleFile() - Accession number "
     							+ "can't be null in constructor");
+    		}
     		logMetacat.debug("AccessControlForSingleFile() - docid: " + _docId);
+    	}
       	/**
     	 * Insert a single access record into the database based on access DAO
-...
     	 * Insert a single access record into the database.
+    	 *
     	 * @param principalName
     	 *            the principal credentials
     	 * @param permission
     	 *            the permission
     	 * @param permType
     	 *            the permission type
     	 * @param permOrder
     	 * @throws AccessControlException
     	 *            the permission order
     	 */
     	public void insertPermissions(String principalName, Long permission, String permType, String permOrder)
     			throws AccessControlException, PermOrderException {
-...
     	 *            returned by the getdocumentinfo action in metacat.
     	 */
     	public void insertPermissions(String accessBlock) throws AccessControlException {
     		try {
     		try {
     			// use DocInfoHandler to parse the access section into DAO objects
     			XMLReader parser = null;
     			DocInfoHandler docInfoHandler = new DocInfoHandler(_docId);
     			ContentHandler chandler = docInfoHandler;
-...
     			parser.parse(new InputSource(new StringReader(accessBlock)));
     			XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
     			// replace all access on the document
     	        Vector<XMLAccessDAO> accessControlList = docInfoHandler.getAccessControlList();
     	        xmlAccessAccess.replaceAccess(_docId, accessControlList);
-...
+    	}
     	/**
     	 * Check if access control comination for
     	 * docid/principal/permission/permorder/permtype already exists.
+    	 *
     	 * @param xmlAccessDAO
     	 *            the dao object holding the access we want to check for.
     	 * @return true if the Access Control for this file already exists in the DB
     	 * @throws SQLException
     	 */
     	public boolean accessControlExists(XMLAccessDAO xmlAccessDAO) throws AccessControlException {
     		boolean exists = false;
-...
     	 * or Group should have permissions for reading access control information
     	 * for a document specified by
+    	 *
     	 * @docid.
     	 * @param docid
     	 *            document identifier which acl info to get
     	 * @param user
     	 *            name of user connected to Metacat system
     	 * @param groups
-...
     		boolean hasPermission = false;
     		try {
     			hasPermission = isOwned(_docId, user);
     			hasPermission = isOwned(user);
     			if (!hasPermission) {
     				PermissionController controller = new PermissionController(_docId);
     				hasPermission =
     					controller.hasPermission(user, groups, READSTRING);
+    			}
     			// if the user has permissions, get the access dao list for this doc and return
     			// it as a string.  Otherwise, get the string for an empty access dao list
     			// (which will return the access section with no allow or deny sections)
     			if (hasPermission) {
     				// Get a list of all access dao objects for this docid
     				XMLAccessAccess xmlAccessAccess = new XMLAccessAccess();
-...
+    		}
+    	}
     	/**
     	 * Get the access xml for all access on this docid
+    	 *
     	 * @return string representation of access
     	 */
     	public String getAccessString() throws AccessControlException {
     		Vector<XMLAccessDAO> xmlAccessDAOList = null;
-...
     		return getAccessString(xmlAccessDAOList);
+    	}
     	/**
     	 * Put together an xml representation of the objects in a given access dao list
     	 * @param xmlAccessDAOList list of xml access DAO objects
     	 * @return string representation of access
     	 */
     	public String getAccessString(Vector<XMLAccessDAO> xmlAccessDAOList) throws AccessControlException {
     		StringBuffer output = new StringBuffer();
-...
     		output.append(">\n");
     		if (xmlAccessDAOList.size() > 0) {
     			// Since there should only be one permission order allowed per document,
     			// we can just grab the order off of the first xml access dao object
     			permOrder = xmlAccessDAOList.get(0).getPermOrder();
+    		}
     		for (XMLAccessDAO xmlAccessDAO : xmlAccessDAOList) {
     			principal = xmlAccessDAO.getPrincipalName();
     			permission = xmlAccessDAO.getPermission().intValue();
-...
     		return output.toString();
+    	}
     	/* Check if @user is owner of @docid from db conn. */
     	private boolean isOwned(String docid, String user) throws SQLException {
     	/**
     	 * check if the docid represented in this class is owned by the user
+    	 *
     	 * @param user
     	 *            the user credentials
     	 * @return true if doc is owned by user, false otherwise
     	 */
     	private boolean isOwned(String user) throws SQLException {
     		PreparedStatement pstmt = null;
     		DBConnection conn = null;
     		int serialNumber = -1;
-...
     			serialNumber = conn.getCheckOutSerialNumber();
     			pstmt = conn.prepareStatement("SELECT 'x' FROM xml_documents "
     					+ "WHERE docid = ? " + "AND user_owner = ?");
     			pstmt.setString(1, docid);
     			pstmt.setString(1, _docId);
     			pstmt.setString(2, user);
     			pstmt.execute();
     			ResultSet rs = pstmt.getResultSet();

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 5115

Added by daigle over 14 years ago