/ - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 638

Added by bojilova about 24 years ago

included support for submition of access files
+ storing the acl info in xml_access table and relationship records in xml_relation table like
<aclfile, "isaclfilefor", recourceIdentifier> for every resource included in the access file

     package edu.ucsb.nceas.metacat;
     import java.sql.*;
     import java.io.StringReader;
     import java.util.Stack;
     import java.util.Vector;
     import java.util.Enumeration;
-...
         DBSAXNode currNode = null;
         DBSAXNode prevNode = null;
         Connection dbconn = null;
         String doctype = currentDocument.getDoctype();
         int step = 0;
         int counter = 0;
-...
           Enumeration nodes = nodeIndex.elements();
           while ( nodes.hasMoreElements() ) {
             currNode = (DBSAXNode)nodes.nextElement();
             currNode.updateNodeIndex(dbconn, docid, currentDocument.getDoctype());
             currNode.updateNodeIndex(dbconn, docid, doctype);
+          }
           dbconn.commit();
           //if this is a package file then write the package info to
           //the xml_relation table. RelationHandler checks to see
           //if it is a package file so you don't have to do it here.
           DocumentImpl xmldoc = new DocumentImpl(dbconn, docid);
           RelationHandler rth = new RelationHandler(xmldoc, dbconn);
           if ( doctype.equals(util.getOption("packagedoctype")) )
+          {
             DocumentImpl xmldoc = new DocumentImpl(dbconn, docid);
             RelationHandler rth = new RelationHandler(xmldoc, dbconn);
+          }
           else if ( doctype.equals("-//NCEAS//eml-access//EN") )
+          {
             DocumentImpl xmldoc = new DocumentImpl(dbconn, docid);
             String xml = xmldoc.toString();
             AccessControlList aclobj =
             new AccessControlList(dbconn,docid,null,new StringReader(xml));
             dbconn.commit();
+          }
           dbconn.close();
         } catch (Exception e) {

               conn.setAutoCommit(false);
               parser.parse(new InputSource(xml));
               conn.commit();
               // if acltext is provided for @xml, store acl info into db
               if ( acl != null )
+              {
                 if ( action.equals("UPDATE") )
+                {
                   Statement stmt = conn.createStatement();
                   stmt.execute("DELETE FROM xml_access WHERE docid='"+newdocid+"'");
                   stmt.close();
+                }
                 AccessControlList aclobj = new AccessControlList(conn,newdocid,acl);
                 AccessControlList aclobj=new AccessControlList(conn,null,newdocid,acl);
                 conn.commit();
+              }
               conn.setAutoCommit(true);
+            }
             catch (Exception e)
-...
+        }
         try
+        {
+        {
           XMLReader parser=initializeParser(conn,action,newdocid,user,serverCode,dtd);
           conn.setAutoCommit(false);
           parser.parse(new InputSource(xml));
           conn.commit();
           // if acltext is provided for @xml, store acl info into db
           if ( acl != null )
+          {
             if ( action.equals("UPDATE") )
+            {
               Statement stmt = conn.createStatement();
               stmt.execute("DELETE FROM xml_access WHERE docid='"+newdocid +"'");
               stmt.close();
+            }
             AccessControlList aclobj = new AccessControlList(conn, newdocid, acl);
             AccessControlList aclobj=new AccessControlList(conn,null,newdocid,acl);
             conn.commit();
+          }
+          }
           conn.setAutoCommit(true);
+        }
-...
         //no longer be active if it has been deleted from the system.
         RelationHandler.deleteRelations(docid);
+      }
       /**
         * Check for "WRITE" permission on @docid for @user and/or @group
         * from DB connection

       private Stack elementStack;
       private boolean	processingDTD;
       private String  aclid;
       private String  docid;
       private String 	docname;
       private String 	doctype;
       private String 	systemid;
       private String resourceURL;
       private String resourceId;
       private Vector principalName;
       private int    permission;
-...
       private String beginTime;
       private String endTime;
       private int    ticketCount;
       /**
        * Construct an instance of the AccessControlList class.
        * It is used by the permission check up from DBQuery and DocumentImpl
-...
        * @param docid the Accession# of the document with the acl data
        * @param acl the acl file containing acl data
        */
       public AccessControlList ( Connection conn, String docid, Reader acl )
       public AccessControlList(Connection conn,String aclid,String docid,Reader acl)
                       throws SAXException, IOException, ClassNotFoundException
+      {
         // Get an instance of the parser
-...
         this.processingDTD = false;
         this.elementStack = new Stack();
         this.aclid = aclid;
         this.docid = docid;
         this.principalName = new Vector();
         this.permission = 0;
         this.ticketCount = 0;
         // Initialize the parser and read the queryspec
         XMLReader parser = initializeParser();
         parser.parse(new InputSource(acl));
-...
        * @param docid the Accession# of the document with the acl data
        * @param aclfilename the name of acl file containing acl data
        */
       public AccessControlList( Connection conn, String docid, String aclfilename )
       public AccessControlList( Connection conn, String aclid,
                                 String docid, String aclfilename )
                       throws SAXException, IOException, ClassNotFoundException
+      {
         this(conn,docid,new FileReader(new File(aclfilename).toString()));
         this(conn, aclid, docid, new FileReader(new File(aclfilename).toString()));
+      }
       /**
        * Set up the SAX parser for reading the XML serialized ACL
        */
-...
         parser = XMLReaderFactory.createXMLReader(parserName);
         // Turn off validation
         parser.setFeature("http://xml.org/sax/features/validation", false);
         parser.setFeature("http://xml.org/sax/features/validation", true);
         // Set Handlers in the parser
         // Set the ContentHandler to this instance
-...
         String currentTag = currentNode.getTagName();
         if (currentTag.equals("resourceIdentifier")) {
           resourceId = inputString;
           if ( docid != null ) {
             resourceId = docid;
           } else {
             resourceURL = inputString;
             resourceId = getDocID(inputString);
             // here should be ProtocolHandler.get("docid");
+          }
         } else if (currentTag.equals("principalName")) {
           principalName.addElement(new String(inputString));
         } else if (currentTag.equals("permission")) {
-...
              throws SAXException
+      {
         BasicNode leaving = (BasicNode)elementStack.pop();
         if ( leaving.getTagName().equals("allow") ) {
         if ( leaving.getTagName().equals("resourceIdentifier") ) {
           try {
             // delete all acl records for resourceId first if any
             deletePermissions();
             // make a relationship for acl file on resourceId
             if ( aclid != null ) {
               insertRelation();
+            }
           } catch (SQLException sqle) {
             throw new SAXException(sqle);
+          }
         } else if ( leaving.getTagName().equals("allow") ) {
           if ( permission > 0 ) {
             // insert into db calculated permission for the list of principals
-...
         return processingDTD;
+      }
       /** Delete from db all permission for resourceId if any */
       private void deletePermissions()
               throws SQLException
+      {
         // delete all acl records for resourceId if any
         Statement stmt = conn.createStatement();
         stmt.execute("DELETE FROM xml_access WHERE docid='" + resourceId +"'");
         stmt.close();
+      }
       /** Insert relationship into db for aclid on resourceId  */
       private void insertRelation()
               throws SQLException
+      {
         MetaCatUtil util = new MetaCatUtil();
         String server = util.getOption("server");
         String aclURL = "metacat://" + server + "?docid=" + aclid;
         // insert relationship
         PreparedStatement pstmt;
         pstmt = conn.prepareStatement(
                 "INSERT INTO xml_relation (docid,subject,relationship,object) " +
                 "VALUES (?, ?, ?, ?)");
         pstmt.setString(1, aclid);
         pstmt.setString(2, aclURL);
         pstmt.setString(3, "isaclfor");
         pstmt.setString(4, resourceURL);
         pstmt.execute();
         pstmt.close();
+      }
       /** Insert into db calculated permission for the list of principals */
       private void insertPermissions( String permType )
               throws SQLException
+      {
         PreparedStatement pstmt;
         //
         try {
           pstmt = conn.prepareStatement(
                   "INSERT INTO xml_access " +
-...
               permOrder = rs.getString(2);
               ticketCount = rs.getInt(3);
               if ( ( accessValue & intValue(permission) ) == intValue(permission) &&
                    ( permOrder.equals("allow first") ) &&
                    ( permOrder.equals("allowFirst") ) &&
                    ( rs.wasNull() || ticketCount > 0 ) ) {
                 if ( !rs.wasNull() && ticketCount > 0 ) {
                   decreaseNumberOfAccess(accessValue,principal,resourceId,"denied");
-...
         return -1;
+      }
       // TEMPORARY - ProtocolHandler should be used instead
       // get the docid from @url
       private String getDocID ( String url ) throws SAXException
+      {
         try {
           return url.substring(url.lastIndexOf("docid=")+6);
         } catch (StringIndexOutOfBoundsException e) {
           throw new SAXException(e.getMessage());
+        }
+      }
+    }

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 638

Added by bojilova about 24 years ago