Metacat

import java.sql.SQLException;

import java.util.List;

import org.dataone.service.types.Group;

import edu.ucsb.nceas.metacat.DocumentImpl;

import edu.ucsb.nceas.metacat.client.InsufficientKarmaException;

    String localId = null;

    boolean allowed = false;

    Subject subject = session.getSubject();

    List<Group> groupList = session.getSubjectList().getGroupList();

    String[] groups = new String[groupList.size()];

    IdentifierManager im = IdentifierManager.getInstance();

    // put the group names into a string array

    if( session != null ) {

      for ( int i = 0; i > groupList.size(); i++ ) {

      	groups[i] = groupList.get(i).getGroupName();

      }

    }

    // be sure the user is authenticated for delete()

    if (subject.getValue() == null || 

        subject.getValue().toLowerCase().equals("public") ) {

      throw new NotAuthorized("1320", "The provided identity does not have " +

        "permission to DELETE objects on the Member Node.");

    }

    // do we have a valid pid?

    if ( pid == null || pid.getValue().trim().equals("") ) {

      throw new InvalidRequest("1322", "The provided identifier was invalid.");

    }

    // check for the existing identifier

    try {

	    localId = im.getLocalId(pid.getValue());

    } catch (McdbDocNotFoundException e) {

      throw new InvalidRequest("1322", "The object with the provided " +

      	"identifier was not found.");

    }

    // does the subject have DELETE (a D1 CHANGE_PERMISSION level) priveleges on the pid?

    allowed = isAuthorized(session, pid, Permission.CHANGE_PERMISSION);

    if ( allowed ) {

      try {

        // delete the document

      	DocumentImpl.delete(localId, subject.getValue(), groups, null);

      } catch (McdbDocNotFoundException e) {

        throw new InvalidRequest("1322", "The provided identifier was invalid.");

      } catch (SQLException e) {

        throw new ServiceFailure("1350", "There was a problem deleting the object." +

        	"The error message was: " + e.getMessage());

      } catch (InsufficientKarmaException e) {

        throw new NotAuthorized("1320", "The provided identity does not have " +

        "permission to DELETE objects on the Member Node.");

      } catch (Exception e) { // for some reason DocumentImpl throws a general Exception

        throw new ServiceFailure("1350", "There was a problem deleting the object." +

          	"The error message was: " + e.getMessage());

      }

    } else {

    }

		return pid;