version 1.185, 2020/12/22 22:23:37
|
version 1.186, 2021/01/02 19:31:11
|
Line 616 sub handler {
|
Line 616 sub handler {
|
} |
} |
# ---------------------------------------------------------------- Check access |
# ---------------------------------------------------------------- Check access |
my $now = time; |
my $now = time; |
my ($check_symb,$check_access); |
my ($check_symb,$check_access,$check_block,$access,$poss_symb); |
if ($requrl !~ m{^/(?:adm|public|(?:prt|zip)spool)/} |
if ($requrl !~ m{^/(?:adm|public|(?:prt|zip)spool)/} |
|| $requrl =~ /^\/adm\/.*\/(smppg|bulletinboard)(\?|$ )/x) { |
|| $requrl =~ /^\/adm\/.*\/(smppg|bulletinboard)(\?|$ )/x) { |
$check_access = 1; |
$check_access = 1; |
} |
} |
|
if ((!$check_access) && ($env{'request.course.id'})) { |
|
if (($requrl eq '/adm/viewclasslist') || |
|
($requrl =~ m{^(/adm/wrapper|)\Q/uploaded/$cdom/$cnum/docs/\E}) || |
|
($requrl =~ m{^/adm/.*/aboutme$}) || |
|
($requrl=~m{^/adm/coursedocs/showdoc/}) || |
|
($requrl=~m{^(/adm/wrapper|)/adm/$cdom/$cnum/\d+/ext\.tool$})) { |
|
$check_block = 1; |
|
} |
|
} |
if (($env{'request.course.id'}) && (!$suppext)) { |
if (($env{'request.course.id'}) && (!$suppext)) { |
$requrl=~/\.(\w+)$/; |
$requrl=~/\.(\w+)$/; |
if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') || |
if ((&Apache::loncommon::fileembstyle($1) eq 'ssi') || |
Line 635 sub handler {
|
Line 644 sub handler {
|
$check_symb = 1; |
$check_symb = 1; |
} |
} |
} |
} |
if ($check_access) { |
if (($check_access) || ($check_block)) { |
my ($access,$poss_symb); |
|
if ($check_symb) { |
if ($check_symb) { |
if ($env{'form.symb'}) { |
if ($env{'form.symb'}) { |
$poss_symb=&Apache::lonnet::symbclean($env{'form.symb'}); |
$poss_symb=&Apache::lonnet::symbclean($env{'form.symb'}); |
Line 656 sub handler {
|
Line 664 sub handler {
|
if ($poss_symb) { |
if ($poss_symb) { |
my ($possmap,$resid,$url)=&Apache::lonnet::decode_symb($poss_symb); |
my ($possmap,$resid,$url)=&Apache::lonnet::decode_symb($poss_symb); |
$url = &Apache::lonnet::clutter($url); |
$url = &Apache::lonnet::clutter($url); |
unless (($url eq $requrl) && (&Apache::lonnet::is_on_map($possmap))) { |
my $toplevelmap = $env{'course.'.$env{'request.course.id'}.'.url'}; |
|
unless (($url eq $requrl) && (($possmap eq $toplevelmap) || |
|
(&Apache::lonnet::is_on_map($possmap)))) { |
undef($poss_symb); |
undef($poss_symb); |
} |
} |
if ($poss_symb) { |
if ($poss_symb) { |
Line 674 sub handler {
|
Line 684 sub handler {
|
} else { |
} else { |
$access=&Apache::lonnet::allowed('bre',$requrl); |
$access=&Apache::lonnet::allowed('bre',$requrl); |
} |
} |
|
} |
|
if ($check_block) { |
|
if ($access eq 'B') { |
|
if ($poss_symb) { |
|
if (&Apache::lonnet::symbverify($poss_symb,$requrl)) { |
|
$env{'request.symb'} = $poss_symb; |
|
} |
|
} |
|
&Apache::blockedaccess::setup_handler($r); |
|
return OK; |
|
} |
|
} elsif ($check_access) { |
if ($handle eq '') { |
if ($handle eq '') { |
unless ($access eq 'F') { |
unless ($access eq 'F') { |
if ($requrl =~ m{^/res/$match_domain/$match_username/}) { |
if ($requrl =~ m{^/res/$match_domain/$match_username/}) { |
Line 691 sub handler {
|
Line 713 sub handler {
|
} |
} |
if ($access eq 'B') { |
if ($access eq 'B') { |
if ($poss_symb) { |
if ($poss_symb) { |
if ($requrl=~m{^(/adm/.*/aboutme)/portfolio$}) { |
|
$requrl = $1; |
|
} |
|
if (&Apache::lonnet::symbverify($poss_symb,$requrl)) { |
if (&Apache::lonnet::symbverify($poss_symb,$requrl)) { |
$env{'request.symb'} = $poss_symb; |
$env{'request.symb'} = $poss_symb; |
} |
} |