/src/edu/ucsb/nceas/metacat/Eml200SAXHandler.java - Diff - Metacat - Ecoinformatics Redmine

« Previous | Next »

Revision 6744

Added by ben leinfelder over 12 years ago

refactor Metacat access handling to be on a per-revision basis so that it more closely aligns with the DataONE approach
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5560

             // Get the unchangable subtrees (user doesn't have write permission)
             try
+            {
                 PermissionController control = new PermissionController(docid
                         + PropertyService.getProperty("document.accNumSeparator") + revision);
                 //unChangableSubTreeHash = getUnchangableSubTree(control, user,
                 // groups);
                 // If the action is update and user doesn't have "ALL" permission
                 // we need to check if user update access subtree
                 if (action != null && action.equals("UPDATE")
                         && !control.hasPermission(user, groups,
                                 AccessControlInterface.ALLSTRING)
                                 && !AuthUtil.isAdministrator(user, groups))
+                {
                     needToCheckAccessModule = true;
                     topAccessSubTreeFromDB = getTopAccessSubTreeFromDB();
                     additionalAccessSubTreeListFromDB =
                                              getAdditionalAccessSubTreeListFromDB();
                     referencedAccessSubTreeListFromDB =
                                              getReferencedAccessSubTreeListFromDB();
+                }
                 //Here is for  data object checking.
                 if (action != null && action.equals("UPDATE"))
+                {
                 if (action != null && action.equals("UPDATE")) {
         			// we need to check if user can update access subtree
         			int latestRevision = DBUtil.getLatestRevisionInDocumentTable(docid);
         			String previousDocid =
         				docid + PropertyService.getProperty("document.accNumSeparator") + latestRevision;
         			PermissionController control = new PermissionController(previousDocid);
                 	 // If the action is update and user doesn't have "ALL" permission
                     // we need to check if user update access subtree
                 	if ( !control.hasPermission(user, groups, AccessControlInterface.ALLSTRING)
                             && !AuthUtil.isAdministrator(user, groups)) {
                         needToCheckAccessModule = true;
                         topAccessSubTreeFromDB = getTopAccessSubTreeFromDB();
                         additionalAccessSubTreeListFromDB =
                                                  getAdditionalAccessSubTreeListFromDB();
                         referencedAccessSubTreeListFromDB =
                                                  getReferencedAccessSubTreeListFromDB();
+                	}
                   //info about inline data object which user doesn't have read
                   //permission the info come from xml_access table
                   previousUnreadableInlineDataObjectHash = PermissionController.
                                 getUnReadableInlineDataIdList(docid, user,
                                                               groups, true);
                                 getUnReadableInlineDataIdList(previousDocid, user, groups);
                   //info about data object which user doesn't have write permission
                   // the info come from xml_accesss table
                   previousUnwritableInlineDataObjectHash = PermissionController.
                                 getUnWritableInlineDataIdList(docid, user,
                                 getUnWritableInlineDataIdList(previousDocid, user,
                                                               groups, true);
+                }
-...
            String permOrder = newAccess.getPermissionOrder();
            Vector accessRule = newAccess.getAccessRules();
            String subtree     = null;
            // document itself
            deletePermissionsInAccessTableForDoc(docid);
            writeGivenAccessRuleIntoDB(permOrder, accessRule, docid, subtree);
            // use GUID
            String guid = null;
     		try {
     			guid = IdentifierManager.getInstance().getGUID(docid, Integer.valueOf(revision));
     		} catch (NumberFormatException e) {
     			throw new SAXException(e.getMessage(), e);
     		} catch (McdbDocNotFoundException e) {
     			// register the default mapping now
     			guid = docid + "." + revision;
     			IdentifierManager.getInstance().createMapping(guid, guid);
+    		}
            deletePermissionsInAccessTableForDoc(guid);
            writeGivenAccessRuleIntoDB(permOrder, accessRule, guid, subtree);
            // for online data, it includes with id and without id.
            // 1. for the data with subtree id, we should ignore the ones already in
            // the hash - onlineURLIdHasAddionalAccess.
-...
                                       " write to xml_access table");
             throw new SAXException("The access object is null");
+          }
            // get rid of rev from dataId
            //dataId = MetacatUtil.getDocIdFromString(dataId);
            //String permOrder = accessSection.getPermissionOrder();
           // geet the guid, not the docid alone
           String guid = null;
     		try {
     			guid = IdentifierManager.getInstance().getGUID(docid, Integer.valueOf(revision));
     		} catch (NumberFormatException e) {
     			throw new SAXException(e.getMessage(), e);
     		} catch (McdbDocNotFoundException e) {
     			// register the default mapping now
     			guid = docid + "." + revision;
     			IdentifierManager.getInstance().createMapping(guid, guid);
+    		}
            String sql = null;
            PreparedStatement pstmt = null;
            sql = "INSERT INTO xml_access (docid, principal_name, permission, "
            sql = "INSERT INTO xml_access (guid, principal_name, permission, "
                    + "perm_type, perm_order, accessfileid, subtreeid) VALUES "
                    + " (?, ?, ?, ?, ?, ?, ?)";
-...
                connection.increaseUsageCount(1);
                // Bind the values to the query
                pstmt.setString(1, dataId);
                logMetacat.info("Docid in accesstable: " + docid);
                pstmt.setString(6, docid);
                logMetacat.info("Accessfileid in accesstable: " + docid);
                logMetacat.info("guid in accesstable: " + dataId);
                pstmt.setString(6, guid);
                logMetacat.info("Accessfileid in accesstable: " + guid);
                pstmt.setString(5, permOrder);
                logMetacat.info("PermOder in accesstable: " + permOrder);
                pstmt.setString(7, subTreeId);
-...
         }//writeGivenAccessRuleIntoDB
         /* Delete from db all permission for resources related to @docid if any. */
         private void deletePermissionsInAccessTableForDoc(String docid)
         /* Delete from db all permission for resources related guid, if any. */
         private void deletePermissionsInAccessTableForDoc(String guid)
                 throws SAXException
+        {
             PreparedStatement pstmt = null;
             try {
             	String sql = "DELETE FROM xml_access WHERE docid = ?";
                 // delete all acl records for resources related to @aclid if any
             	String sql = "DELETE FROM xml_access WHERE guid = ? ";
                 // delete all acl records for resources related to guid if any
                 pstmt = connection.prepareStatement(sql);
                 pstmt.setString(1, docid);
                 pstmt.setString(1, guid);
                 // Increase DBConnection usage count
                 connection.increaseUsageCount(1);
                 pstmt.execute();
-...
+           {
         	   String sql =
         		   "DELETE FROM xml_access " +
         		   "WHERE accessfileid = ? " +
         		   "WHERE accessfileid IN (SELECT guid from identifier where docid = ? and rev = ?) " +
                    "AND subtreeid = ?";
                pstmt = connection.prepareStatement(sql);
                pstmt.setString(1, docid);
                pstmt.setString(2, subtreeid);
                pstmt.setInt(2, Integer.valueOf(revision));
                pstmt.setString(3, subtreeid);
                // Increase DBConnection usage count
                connection.increaseUsageCount(1);
                pstmt.execute();
-...
+           {
         	   String sql =
         		   "DELETE FROM xml_access " +
         		   "WHERE accessfileid = ? AND subtreeid IS NOT NULL";
         		   "WHERE accessfileid IN (SELECT guid from identifier where docid = ? and rev = ?) " +
         		   "AND subtreeid IS NOT NULL";
                pstmt = connection.prepareStatement(sql);
                pstmt.setString(1, docid);
                pstmt.setInt(2, Integer.valueOf(revision));
                // Increase DBConnection usage count
                connection.increaseUsageCount(1);
                pstmt.execute();
-...
         /*
          * This method will handle data file in online url. If the data file is in
          * ecogrid protocol, then the datafile identifier(without rev) be returned.
          * ecogrid protocol, then the datafile identifier (guid) be returned.
          * otherwise, null will be returned.
          * If the data file doesn't exsit in xml_documents or
          * xml_revision table, or the user has all permission to the data file if
          * the docid already existed, the data file id (without rev)will be returned
          * the docid already existed, the data file id (guid) will be returned
          * NEED to do:
          * We should also need to implement http and ftp. Those
          * external files should be download and assign a data file id to it.
-...
+        {
           logMetacat.warn("The url is "+ url);
           String docid = null;
           String guid = null;
           // if the url is not a ecogrid protocol, null will be getten
           String accessionNumber =
         	  DocumentUtil.getAccessionNumberFromEcogridIdentifier(url);
-...
             // handle ecogrid protocol
             // get rid of revision number to get the docid.
             docid = DocumentUtil.getDocIdFromAccessionNumber(accessionNumber);
             // use the guid instead
             int rev = DocumentUtil.getRevisionFromAccessionNumber(accessionNumber);
     		try {
     			guid = IdentifierManager.getInstance().getGUID(docid, rev);
     		} catch (McdbDocNotFoundException e1) {
     			guid = docid + "." + rev;
     			IdentifierManager.getInstance().createMapping(guid, guid);
+    		}
             onlineDataFileIdInRelationVector.add(docid);
             try
+            {
               if (!AccessionNumber.accNumberUsed(docid))
+              {
                 return docid;
                 return guid;
+              }
               PermissionController controller = new
                   PermissionController(accessionNumber);
               if (controller.hasPermission(
                   user, groups, AccessControlInterface.ALLSTRING))
+              {
                 return docid;
                 return guid;
+              }
               else
+              {
                 throw new SAXException("User: " + user + " does not have permission to update " +
                       "access rules for data file "+ docid);
                       "access rules for data file "+ guid);
+              }
             }//try
             catch(Exception e)
-...
               throw new SAXException(e.getMessage());
+            }
+          }
           return docid;
           return guid;
+        }
         private void compareElementNameSpaceAttributes(Stack unchangableNodeStack,

Also available in: Unified diff

Project

General

Profile

Metacat

Revision 6744

Added by ben leinfelder over 12 years ago