Annotation of loncom/lonnet/perl/lonnet.pm, revision 1.127
1.1 albertel 1: # The LearningOnline Network
2: # TCP networking package
1.12 www 3: #
4: # Functions for use by content handlers:
5: #
1.112 harris41 6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
1.12 www 9: # plaintext(short) : plain text explanation of short term
1.25 www 10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
1.29 www 12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
1.21 www 18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
1.103 harris41 19: # set privileges in format of lonTabs/roles.tab for
1.21 www 20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
1.24 www 29: # appenv(hash) : adds hash to session environment
1.56 www 30: # delenv(varname) : deletes all environment entries starting with varname
1.124 www 31: # store(hashref,symb,courseid,udom,uname)
1.122 albertel 32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
1.124 www 36: # cstore(hashref,symb,courseid,udom,uname)
1.122 albertel 37: # : same as store but uses the critical interface to
38: # guarentee a store
1.124 www 39: # restore(symb,courseid,udom,uname)
1.122 albertel 40: # : returns hash for this symb, all args are optional
1.124 www 41: # if they aren't given they will be derived from the
42: # current enviroment
1.12 www 43: # eget(namesp,array) : returns hash with keys from array filled in from namesp
44: # get(namesp,array) : returns hash with keys from array filled in from namesp
1.38 www 45: # del(namesp,array) : deletes keys out of array from namesp
1.12 www 46: # put(namesp,hash) : stores hash in namesp
1.47 www 47: # cput(namesp,hash) : critical put
1.15 www 48: # dump(namesp) : dumps the complete namespace into a hash
1.23 www 49: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
50: # hash
1.34 www 51: # coursedescription(id) : returns and caches course description for id
1.17 www 52: # repcopy(filename) : replicate file
53: # dirlist(url) : gets a directory listing
1.40 www 54: # directcondval(index) : reading condition value of single condition from
55: # state string
1.28 www 56: # condval(index) : value of condition index based on state
1.58 www 57: # EXT(name) : value of a variable
1.31 www 58: # symblist(map,hash) : Updates symbolic storage links
1.44 www 59: # symbread([filename]) : returns the data handle (filename optional)
1.76 www 60: # rndseed() : returns a random seed
61: # receipt() : returns a receipt to be given out to users
1.36 albertel 62: # getfile(filename) : returns the contents of filename, or a -1 if it can't
63: # be found, replicates and subscribes to the file
1.121 harris41 64: # filelocation(dir,file) : returns a fairly clean absolute reference to file
1.36 albertel 65: # from the directory dir
1.46 www 66: # hreflocation(dir,file) : same as filelocation, but for hrefs
1.47 www 67: # log(domain,user,home,msg) : write to permanent log for user
1.70 www 68: # usection(domain,user,courseid) : output of section name/number or '' for
69: # "not in course" and '-1' for "no section"
70: # userenvironment(domain,user,what) : puts out any environment parameter
71: # for a user
72: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
73: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
74: # an array of IDs
75: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
76: # an array of names
1.73 www 77: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
78: # returns a comma separated list of keys
1.12 www 79: #
1.1 albertel 80: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
1.5 www 81: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
1.8 www 82: # 11/8,11/16,11/18,11/22,11/23,12/22,
1.12 www 83: # 01/06,01/13,02/24,02/28,02/29,
84: # 03/01,03/02,03/06,03/07,03/13,
1.15 www 85: # 04/05,05/29,05/31,06/01,
86: # 06/05,06/26 Gerd Kortemeyer
87: # 06/26 Ben Tyszka
1.22 www 88: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
1.23 www 89: # 08/14 Ben Tyszka
1.36 albertel 90: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
1.35 www 91: # 10/04 Gerd Kortemeyer
1.36 albertel 92: # 10/04 Guy Albertelli
1.54 www 93: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
1.71 www 94: # 10/30,10/31,
1.75 www 95: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
1.83 www 96: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
1.87 www 97: # 05/01/01 Guy Albertelli
1.89 www 98: # 05/01,06/01,09/01 Gerd Kortemeyer
1.92 www 99: # 09/01 Guy Albertelli
1.102 www 100: # 09/01,10/01,11/01 Gerd Kortemeyer
1.103 harris41 101: # 02/27/01 Scott Harrison
1.104 www 102: # 3/2 Gerd Kortemeyer
1.119 harris41 103: # 3/15,3/19 Scott Harrison
1.110 www 104: # 3/19,3/20 Gerd Kortemeyer
1.123 harris41 105: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
1.125 www 106: # 5/26,5/28 Gerd Kortemeyer
1.127 ! ng 107: # 5/30 H. K. Ng
1.124 www 108: #
1.1 albertel 109: package Apache::lonnet;
110:
111: use strict;
112: use Apache::File;
1.8 www 113: use LWP::UserAgent();
1.15 www 114: use HTTP::Headers;
1.11 www 115: use vars
1.77 www 116: qw(%perlvar %hostname %homecache %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache);
1.1 albertel 117: use IO::Socket;
1.31 www 118: use GDBM_File;
1.8 www 119: use Apache::Constants qw(:common :http);
1.71 www 120: use HTML::TokeParser;
1.88 www 121: use Fcntl qw(:flock);
1.1 albertel 122:
123: # --------------------------------------------------------------------- Logging
124:
125: sub logthis {
126: my $message=shift;
127: my $execdir=$perlvar{'lonDaemons'};
128: my $now=time;
129: my $local=localtime($now);
130: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
131: print $fh "$local ($$): $message\n";
132: return 1;
133: }
134:
135: sub logperm {
136: my $message=shift;
137: my $execdir=$perlvar{'lonDaemons'};
138: my $now=time;
139: my $local=localtime($now);
140: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
141: print $fh "$now:$message:$local\n";
142: return 1;
143: }
144:
145: # -------------------------------------------------- Non-critical communication
146: sub subreply {
147: my ($cmd,$server)=@_;
148: my $peerfile="$perlvar{'lonSockDir'}/$server";
149: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
150: Type => SOCK_STREAM,
151: Timeout => 10)
152: or return "con_lost";
153: print $client "$cmd\n";
154: my $answer=<$client>;
1.9 www 155: if (!$answer) { $answer="con_lost"; }
1.1 albertel 156: chomp($answer);
157: return $answer;
158: }
159:
160: sub reply {
161: my ($cmd,$server)=@_;
162: my $answer=subreply($cmd,$server);
163: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
1.65 www 164: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
1.12 www 165: &logthis("<font color=blue>WARNING:".
166: " $cmd to $server returned $answer</font>");
167: }
1.1 albertel 168: return $answer;
169: }
170:
171: # ----------------------------------------------------------- Send USR1 to lonc
172:
173: sub reconlonc {
174: my $peerfile=shift;
175: &logthis("Trying to reconnect for $peerfile");
176: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
177: if (my $fh=Apache::File->new("$loncfile")) {
178: my $loncpid=<$fh>;
179: chomp($loncpid);
180: if (kill 0 => $loncpid) {
181: &logthis("lonc at pid $loncpid responding, sending USR1");
182: kill USR1 => $loncpid;
183: sleep 1;
184: if (-e "$peerfile") { return; }
185: &logthis("$peerfile still not there, give it another try");
186: sleep 5;
187: if (-e "$peerfile") { return; }
1.12 www 188: &logthis(
189: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
1.1 albertel 190: } else {
1.12 www 191: &logthis(
192: "<font color=blue>WARNING:".
193: " lonc at pid $loncpid not responding, giving up</font>");
1.1 albertel 194: }
195: } else {
1.12 www 196: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
1.1 albertel 197: }
198: }
199:
200: # ------------------------------------------------------ Critical communication
1.12 www 201:
1.1 albertel 202: sub critical {
203: my ($cmd,$server)=@_;
1.89 www 204: unless ($hostname{$server}) {
205: &logthis("<font color=blue>WARNING:".
206: " Critical message to unknown server ($server)</font>");
207: return 'no_such_host';
208: }
1.1 albertel 209: my $answer=reply($cmd,$server);
210: if ($answer eq 'con_lost') {
211: my $pingreply=reply('ping',$server);
212: &reconlonc("$perlvar{'lonSockDir'}/$server");
213: my $pongreply=reply('pong',$server);
214: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
215: $answer=reply($cmd,$server);
216: if ($answer eq 'con_lost') {
217: my $now=time;
218: my $middlename=$cmd;
1.5 www 219: $middlename=substr($middlename,0,16);
1.1 albertel 220: $middlename=~s/\W//g;
221: my $dfilename=
222: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
223: {
224: my $dfh;
225: if ($dfh=Apache::File->new(">$dfilename")) {
1.7 www 226: print $dfh "$cmd\n";
1.1 albertel 227: }
228: }
229: sleep 2;
230: my $wcmd='';
231: {
232: my $dfh;
233: if ($dfh=Apache::File->new("$dfilename")) {
234: $wcmd=<$dfh>;
235: }
236: }
237: chomp($wcmd);
1.7 www 238: if ($wcmd eq $cmd) {
1.12 www 239: &logthis("<font color=blue>WARNING: ".
240: "Connection buffer $dfilename: $cmd</font>");
1.1 albertel 241: &logperm("D:$server:$cmd");
242: return 'con_delayed';
243: } else {
1.12 www 244: &logthis("<font color=red>CRITICAL:"
245: ." Critical connection failed: $server $cmd</font>");
1.1 albertel 246: &logperm("F:$server:$cmd");
247: return 'con_failed';
248: }
249: }
250: }
251: return $answer;
252: }
253:
1.5 www 254: # ---------------------------------------------------------- Append Environment
255:
256: sub appenv {
1.6 www 257: my %newenv=@_;
1.35 www 258: map {
259: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
260: &logthis("<font color=blue>WARNING: ".
261: "Attempt to modify environment ".$_." to ".$newenv{$_});
262: delete($newenv{$_});
263: } else {
264: $ENV{$_}=$newenv{$_};
265: }
266: } keys %newenv;
1.95 www 267:
268: my $lockfh;
269: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
1.97 www 270: return 'error: '.$!;
1.95 www 271: }
272: unless (flock($lockfh,LOCK_EX)) {
273: &logthis("<font color=blue>WARNING: ".
274: 'Could not obtain exclusive lock in appenv: '.$!);
275: $lockfh->close();
276: return 'error: '.$!;
277: }
278:
1.6 www 279: my @oldenv;
280: {
281: my $fh;
282: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
1.97 www 283: return 'error: '.$!;
1.6 www 284: }
285: @oldenv=<$fh>;
1.89 www 286: $fh->close();
1.6 www 287: }
288: for (my $i=0; $i<=$#oldenv; $i++) {
289: chomp($oldenv[$i]);
1.9 www 290: if ($oldenv[$i] ne '') {
291: my ($name,$value)=split(/=/,$oldenv[$i]);
1.24 www 292: unless (defined($newenv{$name})) {
293: $newenv{$name}=$value;
294: }
1.9 www 295: }
1.6 www 296: }
297: {
298: my $fh;
299: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
300: return 'error';
301: }
302: my $newname;
1.93 www 303: foreach $newname (keys %newenv) {
1.6 www 304: print $fh "$newname=$newenv{$newname}\n";
305: }
1.86 albertel 306: $fh->close();
1.56 www 307: }
1.95 www 308:
309: $lockfh->close();
1.56 www 310: return 'ok';
311: }
312: # ----------------------------------------------------- Delete from Environment
313:
314: sub delenv {
315: my $delthis=shift;
316: my %newenv=();
317: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
318: &logthis("<font color=blue>WARNING: ".
319: "Attempt to delete from environment ".$delthis);
320: return 'error';
321: }
322: my @oldenv;
323: {
324: my $fh;
325: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
326: return 'error';
327: }
1.89 www 328: unless (flock($fh,LOCK_SH)) {
329: &logthis("<font color=blue>WARNING: ".
330: 'Could not obtain shared lock in delenv: '.$!);
331: $fh->close();
332: return 'error: '.$!;
333: }
1.56 www 334: @oldenv=<$fh>;
1.89 www 335: $fh->close();
1.56 www 336: }
337: {
338: my $fh;
339: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
340: return 'error';
341: }
1.89 www 342: unless (flock($fh,LOCK_EX)) {
343: &logthis("<font color=blue>WARNING: ".
344: 'Could not obtain exclusive lock in delenv: '.$!);
345: $fh->close();
346: return 'error: '.$!;
347: }
1.56 www 348: map {
349: unless ($_=~/^$delthis/) { print $fh $_; }
350: } @oldenv;
1.87 www 351: $fh->close();
1.5 www 352: }
353: return 'ok';
354: }
1.1 albertel 355:
356: # ------------------------------ Find server with least workload from spare.tab
1.11 www 357:
1.1 albertel 358: sub spareserver {
359: my $tryserver;
360: my $spareserver='';
361: my $lowestserver=100;
362: foreach $tryserver (keys %spareid) {
363: my $answer=reply('load',$tryserver);
364: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
365: $spareserver="http://$hostname{$tryserver}";
366: $lowestserver=$answer;
367: }
368: }
369: return $spareserver;
370: }
371:
372: # --------- Try to authenticate user from domain's lib servers (first this one)
1.11 www 373:
1.1 albertel 374: sub authenticate {
375: my ($uname,$upass,$udom)=@_;
1.12 www 376: $upass=escape($upass);
1.1 albertel 377: if (($perlvar{'lonRole'} eq 'library') &&
378: ($udom eq $perlvar{'lonDefDomain'})) {
1.3 www 379: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
1.2 www 380: if ($answer =~ /authorized/) {
1.9 www 381: if ($answer eq 'authorized') {
382: &logthis("User $uname at $udom authorized by local server");
383: return $perlvar{'lonHostID'};
384: }
385: if ($answer eq 'non_authorized') {
386: &logthis("User $uname at $udom rejected by local server");
387: return 'no_host';
388: }
1.2 www 389: }
1.1 albertel 390: }
391:
392: my $tryserver;
393: foreach $tryserver (keys %libserv) {
394: if ($hostdom{$tryserver} eq $udom) {
1.10 www 395: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
1.1 albertel 396: if ($answer =~ /authorized/) {
1.9 www 397: if ($answer eq 'authorized') {
398: &logthis("User $uname at $udom authorized by $tryserver");
399: return $tryserver;
400: }
401: if ($answer eq 'non_authorized') {
402: &logthis("User $uname at $udom rejected by $tryserver");
403: return 'no_host';
404: }
1.1 albertel 405: }
406: }
1.9 www 407: }
408: &logthis("User $uname at $udom could not be authenticated");
1.1 albertel 409: return 'no_host';
410: }
411:
412: # ---------------------- Find the homebase for a user from domain's lib servers
1.11 www 413:
1.1 albertel 414: sub homeserver {
415: my ($uname,$udom)=@_;
416:
417: my $index="$uname:$udom";
418: if ($homecache{$index}) { return "$homecache{$index}"; }
419:
420: my $tryserver;
421: foreach $tryserver (keys %libserv) {
422: if ($hostdom{$tryserver} eq $udom) {
423: my $answer=reply("home:$udom:$uname",$tryserver);
424: if ($answer eq 'found') {
425: $homecache{$index}=$tryserver;
426: return $tryserver;
427: }
428: }
429: }
430: return 'no_host';
1.70 www 431: }
432:
433: # ------------------------------------- Find the usernames behind a list of IDs
434:
435: sub idget {
436: my ($udom,@ids)=@_;
437: my %returnhash=();
438:
439: my $tryserver;
440: foreach $tryserver (keys %libserv) {
441: if ($hostdom{$tryserver} eq $udom) {
442: my $idlist=join('&',@ids);
443: $idlist=~tr/A-Z/a-z/;
444: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
445: my @answer=();
1.76 www 446: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
1.70 www 447: @answer=split(/\&/,$reply);
448: } ;
449: my $i;
450: for ($i=0;$i<=$#ids;$i++) {
451: if ($answer[$i]) {
452: $returnhash{$ids[$i]}=$answer[$i];
453: }
454: }
455: }
456: }
457: return %returnhash;
458: }
459:
460: # ------------------------------------- Find the IDs behind a list of usernames
461:
462: sub idrget {
463: my ($udom,@unames)=@_;
464: my %returnhash=();
465: map {
466: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
467: } @unames;
468: return %returnhash;
469: }
470:
471: # ------------------------------- Store away a list of names and associated IDs
472:
473: sub idput {
474: my ($udom,%ids)=@_;
475: my %servers=();
476: map {
477: my $uhom=&homeserver($_,$udom);
478: if ($uhom ne 'no_host') {
479: my $id=&escape($ids{$_});
480: $id=~tr/A-Z/a-z/;
481: my $unam=&escape($_);
482: if ($servers{$uhom}) {
483: $servers{$uhom}.='&'.$id.'='.$unam;
484: } else {
485: $servers{$uhom}=$id.'='.$unam;
486: }
487: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
488: }
489: } keys %ids;
490: map {
491: &critical('idput:'.$udom.':'.$servers{$_},$_);
492: } keys %servers;
493: }
494:
495: # ------------------------------------- Find the section of student in a course
496:
497: sub usection {
498: my ($udom,$unam,$courseid)=@_;
499: $courseid=~s/\_/\//g;
500: $courseid=~s/^(\w)/\/$1/;
501: map {
502: my ($key,$value)=split(/\=/,$_);
503: $key=&unescape($key);
504: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
505: my $section=$1;
506: if ($key eq $courseid.'_st') { $section=''; }
507: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
508: my $now=time;
509: my $notactive=0;
510: if ($start) {
511: if ($now<$start) { $notactive=1; }
512: }
513: if ($end) {
514: if ($now>$end) { $notactive=1; }
515: }
516: unless ($notactive) { return $section; }
517: }
518: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
519: &homeserver($unam,$udom)));
520: return '-1';
521: }
522:
523: # ------------------------------------- Read an entry from a user's environment
524:
525: sub userenvironment {
526: my ($udom,$unam,@what)=@_;
527: my %returnhash=();
528: my @answer=split(/\&/,
529: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
530: &homeserver($unam,$udom)));
531: my $i;
532: for ($i=0;$i<=$#what;$i++) {
533: $returnhash{$what[$i]}=&unescape($answer[$i]);
534: }
535: return %returnhash;
1.1 albertel 536: }
537:
538: # ----------------------------- Subscribe to a resource, return URL if possible
1.11 www 539:
1.1 albertel 540: sub subscribe {
541: my $fname=shift;
542: my $author=$fname;
543: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
544: my ($udom,$uname)=split(/\//,$author);
545: my $home=homeserver($uname,$udom);
546: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
547: return 'not_found';
548: }
549: my $answer=reply("sub:$fname",$home);
1.64 www 550: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
551: $answer.=' by '.$home;
552: }
1.1 albertel 553: return $answer;
554: }
555:
1.8 www 556: # -------------------------------------------------------------- Replicate file
557:
558: sub repcopy {
559: my $filename=shift;
1.23 www 560: $filename=~s/\/+/\//g;
1.8 www 561: my $transname="$filename.in.transfer";
1.17 www 562: if ((-e $filename) || (-e $transname)) { return OK; }
1.8 www 563: my $remoteurl=subscribe($filename);
1.64 www 564: if ($remoteurl =~ /^con_lost by/) {
565: &logthis("Subscribe returned $remoteurl: $filename");
1.8 www 566: return HTTP_SERVICE_UNAVAILABLE;
567: } elsif ($remoteurl eq 'not_found') {
568: &logthis("Subscribe returned not_found: $filename");
569: return HTTP_NOT_FOUND;
1.64 www 570: } elsif ($remoteurl =~ /^rejected by/) {
571: &logthis("Subscribe returned $remoteurl: $filename");
1.8 www 572: return FORBIDDEN;
1.20 www 573: } elsif ($remoteurl eq 'directory') {
574: return OK;
1.8 www 575: } else {
576: my @parts=split(/\//,$filename);
577: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
578: if ($path ne "$perlvar{'lonDocRoot'}/res") {
579: &logthis("Malconfiguration for replication: $filename");
580: return HTTP_BAD_REQUEST;
581: }
582: my $count;
583: for ($count=5;$count<$#parts;$count++) {
584: $path.="/$parts[$count]";
585: if ((-e $path)!=1) {
586: mkdir($path,0777);
587: }
588: }
589: my $ua=new LWP::UserAgent;
590: my $request=new HTTP::Request('GET',"$remoteurl");
591: my $response=$ua->request($request,$transname);
592: if ($response->is_error()) {
593: unlink($transname);
594: my $message=$response->status_line;
1.12 www 595: &logthis("<font color=blue>WARNING:"
596: ." LWP get: $message: $filename</font>");
1.8 www 597: return HTTP_SERVICE_UNAVAILABLE;
598: } else {
1.16 www 599: if ($remoteurl!~/\.meta$/) {
600: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
601: my $mresponse=$ua->request($mrequest,$filename.'.meta');
602: if ($mresponse->is_error()) {
603: unlink($filename.'.meta');
604: &logthis(
605: "<font color=yellow>INFO: No metadata: $filename</font>");
606: }
607: }
1.8 www 608: rename($transname,$filename);
609: return OK;
610: }
611: }
612: }
613:
1.15 www 614: # --------------------------------------------------------- Server Side Include
615:
616: sub ssi {
617:
1.23 www 618: my ($fn,%form)=@_;
1.15 www 619:
620: my $ua=new LWP::UserAgent;
1.23 www 621:
622: my $request;
623:
624: if (%form) {
625: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
626: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
627: } else {
628: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
629: }
630:
1.15 www 631: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
632: my $response=$ua->request($request);
633:
634: return $response->content;
635: }
636:
1.14 www 637: # ------------------------------------------------------------------------- Log
638:
639: sub log {
640: my ($dom,$nam,$hom,$what)=@_;
1.47 www 641: return critical("log:$dom:$nam:$what",$hom);
1.110 www 642: }
643:
644: # --------------------------------------------- Set Expire Date for Spreadsheet
645:
646: sub expirespread {
647: my ($uname,$udom,$stype,$usymb)=@_;
648: my $cid=$ENV{'request.course.id'};
649: if ($cid) {
650: my $now=time;
651: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
652: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
653: $ENV{'course.'.$cid.'.num'}.
654: ':nohist_expirationdates:'.
655: &escape($key).'='.$now,
656: $ENV{'course.'.$cid.'.home'})
657: }
658: return 'ok';
1.14 www 659: }
660:
1.109 www 661: # ----------------------------------------------------- Devalidate Spreadsheets
662:
663: sub devalidate {
664: my $symb=shift;
665: my $cid=$ENV{'request.course.id'};
666: if ($cid) {
667: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
668: my $status=
669: &reply('del:'.$ENV{'course.'.$cid.'.domain'}.':'.
670: $ENV{'course.'.$cid.'.num'}.
671: ':nohist_calculatedsheets:'.
672: &escape($key.'studentcalc:'),
673: $ENV{'course.'.$cid.'.home'})
674: .' '.
675: &reply('del:'.$ENV{'user.domain'}.':'.
676: $ENV{'user.name'}.
677: ':nohist_calculatedsheets_'.$cid.':'.
678: &escape($key.'assesscalc:'.$symb),
679: $ENV{'user.home'});
680: unless ($status eq 'ok ok') {
681: &logthis('Could not devalidate spreadsheet '.
682: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
683: $symb.': '.$status);
684: }
685: }
686: }
687:
1.9 www 688: # ----------------------------------------------------------------------- Store
689:
690: sub store {
1.124 www 691: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
692: my $home='';
693:
694: if ($stuname) {
695: $home=&homeserver($stuname,$domain);
696: }
697:
1.122 albertel 698: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
1.109 www 699:
700: &devalidate($symb);
701:
702: $symb=escape($symb);
1.122 albertel 703: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
704: if (!$domain) { $domain=$ENV{'user.domain'}; }
705: if (!$stuname) { $stuname=$ENV{'user.name'}; }
706: if (!$home) { $home=$ENV{'user.home'}; }
1.12 www 707: my $namevalue='';
708: map {
1.122 albertel 709: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
710: } keys %$storehash;
1.12 www 711: $namevalue=~s/\&$//;
1.124 www 712: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
1.9 www 713: }
714:
1.47 www 715: # -------------------------------------------------------------- Critical Store
716:
717: sub cstore {
1.124 www 718: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
719: my $home='';
720:
721: if ($stuname) {
722: $home=&homeserver($stuname,$domain);
723: }
724:
1.122 albertel 725: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
1.109 www 726:
727: &devalidate($symb);
728:
729: $symb=escape($symb);
1.122 albertel 730: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
731: if (!$domain) { $domain=$ENV{'user.domain'}; }
732: if (!$stuname) { $stuname=$ENV{'user.name'}; }
733: if (!$home) { $home=$ENV{'user.home'}; }
734:
1.47 www 735: my $namevalue='';
736: map {
1.122 albertel 737: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
738: } keys %$storehash;
1.47 www 739: $namevalue=~s/\&$//;
1.122 albertel 740: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
1.47 www 741: }
742:
1.9 www 743: # --------------------------------------------------------------------- Restore
744:
745: sub restore {
1.124 www 746: my ($symb,$namespace,$domain,$stuname) = @_;
747: my $home='';
748:
749: if ($stuname) {
750: $home=&homeserver($stuname,$domain);
751: }
752:
1.122 albertel 753: if (!$symb) {
754: unless ($symb=escape(&symbread())) { return ''; }
755: } else {
756: $symb=&escape($symb);
757: }
758: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
759: if (!$domain) { $domain=$ENV{'user.domain'}; }
760: if (!$stuname) { $stuname=$ENV{'user.name'}; }
761: if (!$home) { $home=$ENV{'user.home'}; }
762: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
763:
1.12 www 764: my %returnhash=();
765: map {
766: my ($name,$value)=split(/\=/,$_);
767: $returnhash{&unescape($name)}=&unescape($value);
768: } split(/\&/,$answer);
1.75 www 769: my $version;
770: for ($version=1;$version<=$returnhash{'version'};$version++) {
771: map {
772: $returnhash{$_}=$returnhash{$version.':'.$_};
773: } split(/\:/,$returnhash{$version.':keys'});
774: }
1.13 www 775: return %returnhash;
1.34 www 776: }
777:
778: # ---------------------------------------------------------- Course Description
779:
780: sub coursedescription {
781: my $courseid=shift;
782: $courseid=~s/^\///;
1.49 www 783: $courseid=~s/\_/\//g;
1.34 www 784: my ($cdomain,$cnum)=split(/\//,$courseid);
785: my $chome=homeserver($cnum,$cdomain);
786: if ($chome ne 'no_host') {
787: my $rep=reply("dump:$cdomain:$cnum:environment",$chome);
788: if ($rep ne 'con_lost') {
1.96 www 789: my $normalid=$cdomain.'_'.$cnum;
1.53 www 790: my %envhash=();
1.34 www 791: my %returnhash=('home' => $chome,
792: 'domain' => $cdomain,
793: 'num' => $cnum);
794: map {
795: my ($name,$value)=split(/\=/,$_);
796: $name=&unescape($name);
797: $value=&unescape($value);
798: $returnhash{$name}=$value;
1.53 www 799: $envhash{'course.'.$normalid.'.'.$name}=$value;
1.34 www 800: } split(/\&/,$rep);
801: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
802: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
1.38 www 803: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
1.54 www 804: $envhash{'course.'.$normalid.'.last_cache'}=time;
1.60 www 805: $envhash{'course.'.$normalid.'.home'}=$chome;
806: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
807: $envhash{'course.'.$normalid.'.num'}=$cnum;
1.53 www 808: &appenv(%envhash);
1.34 www 809: return %returnhash;
810: }
811: }
812: return ();
1.9 www 813: }
1.1 albertel 814:
1.103 harris41 815: # -------------------------------------------------------- Get user privileges
1.11 www 816:
817: sub rolesinit {
818: my ($domain,$username,$authhost)=@_;
819: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
1.12 www 820: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
1.11 www 821: my %allroles=();
822: my %thesepriv=();
823: my $now=time;
1.21 www 824: my $userroles="user.login.time=$now\n";
1.11 www 825: my $thesestr;
826:
827: if ($rolesdump ne '') {
828: map {
1.21 www 829: if ($_!~/^rolesdef\&/) {
1.11 www 830: my ($area,$role)=split(/=/,$_);
1.21 www 831: $area=~s/\_\w\w$//;
1.11 www 832: my ($trole,$tend,$tstart)=split(/_/,$role);
1.21 www 833: $userroles.='user.role.'.$trole.'.'.$area.'='.
834: $tstart.'.'.$tend."\n";
1.11 www 835: if ($tend!=0) {
836: if ($tend<$now) {
837: $trole='';
838: }
839: }
840: if ($tstart!=0) {
841: if ($tstart>$now) {
842: $trole='';
843: }
844: }
845: if (($area ne '') && ($trole ne '')) {
1.50 www 846: my $spec=$trole.'.'.$area;
1.12 www 847: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
848: if ($trole =~ /^cr\//) {
849: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
850: my $homsvr=homeserver($rauthor,$rdomain);
851: if ($hostname{$homsvr} ne '') {
852: my $roledef=
1.21 www 853: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
1.12 www 854: $homsvr);
855: if (($roledef ne 'con_lost') && ($roledef ne '')) {
856: my ($syspriv,$dompriv,$coursepriv)=
1.21 www 857: split(/\_/,unescape($roledef));
1.50 www 858: $allroles{'cm./'}.=':'.$syspriv;
859: $allroles{$spec.'./'}.=':'.$syspriv;
1.12 www 860: if ($tdomain ne '') {
1.50 www 861: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
862: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
1.12 www 863: if ($trest ne '') {
1.50 www 864: $allroles{'cm.'.$area}.=':'.$coursepriv;
865: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
1.12 www 866: }
867: }
868: }
1.11 www 869: }
1.12 www 870: } else {
1.50 www 871: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
872: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
1.12 www 873: if ($tdomain ne '') {
1.50 www 874: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
875: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1.12 www 876: if ($trest ne '') {
1.50 www 877: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
878: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
1.12 www 879: }
880: }
1.11 www 881: }
1.12 www 882: }
883: }
1.11 www 884: } split(/&/,$rolesdump);
1.125 www 885: my $adv=0;
1.11 www 886: map {
887: %thesepriv=();
1.125 www 888: if ($_ ne 'st') { $adv=1; }
1.11 www 889: map {
890: if ($_ ne '') {
1.103 harris41 891: my ($privilege,$restrictions)=split(/&/,$_);
1.11 www 892: if ($restrictions eq '') {
1.103 harris41 893: $thesepriv{$privilege}='F';
1.11 www 894: } else {
1.103 harris41 895: if ($thesepriv{$privilege} ne 'F') {
896: $thesepriv{$privilege}.=$restrictions;
1.11 www 897: }
898: }
899: }
900: } split(/:/,$allroles{$_});
901: $thesestr='';
902: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
903: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
904: } keys %allroles;
1.125 www 905: $userroles.='user.adv='.$adv."\n";
1.126 www 906: $ENV{'user.adv'}=$adv;
1.11 www 907: }
908: return $userroles;
909: }
910:
1.12 www 911: # --------------------------------------------------------------- get interface
912:
913: sub get {
914: my ($namespace,@storearr)=@_;
915: my $items='';
916: map {
917: $items.=escape($_).'&';
918: } @storearr;
919: $items=~s/\&$//;
920: my $rep=reply("get:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
921: $ENV{'user.home'});
1.15 www 922: my @pairs=split(/\&/,$rep);
923: my %returnhash=();
1.42 www 924: my $i=0;
1.15 www 925: map {
1.42 www 926: $returnhash{$_}=unescape($pairs[$i]);
927: $i++;
928: } @storearr;
1.15 www 929: return %returnhash;
1.27 www 930: }
931:
932: # --------------------------------------------------------------- del interface
933:
934: sub del {
935: my ($namespace,@storearr)=@_;
936: my $items='';
937: map {
938: $items.=escape($_).'&';
939: } @storearr;
940: $items=~s/\&$//;
941: return reply("del:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
942: $ENV{'user.home'});
1.15 www 943: }
944:
945: # -------------------------------------------------------------- dump interface
946:
947: sub dump {
948: my $namespace=shift;
949: my $rep=reply("dump:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace",
950: $ENV{'user.home'});
1.12 www 951: my @pairs=split(/\&/,$rep);
952: my %returnhash=();
953: map {
954: my ($key,$value)=split(/=/,$_);
1.29 www 955: $returnhash{unescape($key)}=unescape($value);
1.12 www 956: } @pairs;
957: return %returnhash;
958: }
959:
960: # --------------------------------------------------------------- put interface
961:
962: sub put {
963: my ($namespace,%storehash)=@_;
964: my $items='';
965: map {
966: $items.=escape($_).'='.escape($storehash{$_}).'&';
967: } keys %storehash;
968: $items=~s/\&$//;
969: return reply("put:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
1.47 www 970: $ENV{'user.home'});
971: }
972:
973: # ------------------------------------------------------ critical put interface
974:
975: sub cput {
976: my ($namespace,%storehash)=@_;
977: my $items='';
978: map {
979: $items.=escape($_).'='.escape($storehash{$_}).'&';
980: } keys %storehash;
981: $items=~s/\&$//;
982: return critical
983: ("put:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
1.12 www 984: $ENV{'user.home'});
985: }
986:
987: # -------------------------------------------------------------- eget interface
988:
989: sub eget {
990: my ($namespace,@storearr)=@_;
991: my $items='';
992: map {
993: $items.=escape($_).'&';
994: } @storearr;
995: $items=~s/\&$//;
996: my $rep=reply("eget:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
997: $ENV{'user.home'});
998: my @pairs=split(/\&/,$rep);
999: my %returnhash=();
1.42 www 1000: my $i=0;
1.12 www 1001: map {
1.42 www 1002: $returnhash{$_}=unescape($pairs[$i]);
1003: $i++;
1004: } @storearr;
1.12 www 1005: return %returnhash;
1006: }
1007:
1.103 harris41 1008: # ------------------------------------------------- Check for a user privilege
1.12 www 1009:
1010: sub allowed {
1011: my ($priv,$uri)=@_;
1.52 www 1012: $uri=&declutter($uri);
1.29 www 1013:
1.54 www 1014: # Free bre access to adm and meta resources
1.29 www 1015:
1.54 www 1016: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1.14 www 1017: return 'F';
1018: }
1.29 www 1019:
1.52 www 1020: my $thisallowed='';
1021: my $statecond=0;
1022: my $courseprivid='';
1023:
1024: # Course
1025:
1026: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1027: $thisallowed.=$1;
1028: }
1.29 www 1029:
1.52 www 1030: # Domain
1031:
1032: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1033: =~/$priv\&([^\:]*)/) {
1.12 www 1034: $thisallowed.=$1;
1035: }
1.52 www 1036:
1037: # Course: uri itself is a course
1.66 www 1038: my $courseuri=$uri;
1039: $courseuri=~s/\_(\d)/\/$1/;
1.83 www 1040: $courseuri=~s/^([^\/])/\/$1/;
1.81 www 1041:
1.83 www 1042: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1.52 www 1043: =~/$priv\&([^\:]*)/) {
1.12 www 1044: $thisallowed.=$1;
1045: }
1.29 www 1046:
1.52 www 1047: # Full access at system, domain or course-wide level? Exit.
1.29 www 1048:
1049: if ($thisallowed=~/F/) {
1050: return 'F';
1051: }
1052:
1.52 www 1053: # If this is generating or modifying users, exit with special codes
1.29 www 1054:
1.52 www 1055: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
1056: return $thisallowed;
1057: }
1058: #
1.103 harris41 1059: # Gathered so far: system, domain and course wide privileges
1.52 www 1060: #
1061: # Course: See if uri or referer is an individual resource that is part of
1062: # the course
1063:
1064: if ($ENV{'request.course.id'}) {
1065: $courseprivid=$ENV{'request.course.id'};
1066: if ($ENV{'request.course.sec'}) {
1067: $courseprivid.='/'.$ENV{'request.course.sec'};
1068: }
1069: $courseprivid=~s/\_/\//;
1070: my $checkreferer=1;
1071: my @uriparts=split(/\//,$uri);
1072: my $filename=$uriparts[$#uriparts];
1073: my $pathname=$uri;
1074: $pathname=~s/\/$filename$//;
1075: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1.54 www 1076: /\&$filename\:([\d\|]+)\&/) {
1.52 www 1077: $statecond=$1;
1078: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1079: =~/$priv\&([^\:]*)/) {
1080: $thisallowed.=$1;
1081: $checkreferer=0;
1082: }
1.29 www 1083: }
1.83 www 1084:
1.52 www 1085: if (($ENV{'HTTP_REFERER'}) && ($checkreferer)) {
1.55 www 1086: my $refuri=$ENV{'HTTP_REFERER'};
1087: $refuri=~s/^http\:\/\/$ENV{'request.host'}//i;
1088: $refuri=&declutter($refuri);
1.53 www 1089: my @uriparts=split(/\//,$refuri);
1.52 www 1090: my $filename=$uriparts[$#uriparts];
1.53 www 1091: my $pathname=$refuri;
1.52 www 1092: $pathname=~s/\/$filename$//;
1.55 www 1093: my @filenameparts=split(/\./,$uri);
1.53 www 1094: if (&fileembstyle($filenameparts[$#filenameparts]) ne 'ssi') {
1095: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1.54 www 1096: /\&$filename\:([\d\|]+)\&/) {
1.53 www 1097: my $refstatecond=$1;
1.52 www 1098: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1099: =~/$priv\&([^\:]*)/) {
1100: $thisallowed.=$1;
1.53 www 1101: $uri=$refuri;
1102: $statecond=$refstatecond;
1.52 www 1103: }
1.53 www 1104: }
1.52 www 1105: }
1.29 www 1106: }
1.52 www 1107: }
1.29 www 1108:
1.52 www 1109: #
1.103 harris41 1110: # Gathered now: all privileges that could apply, and condition number
1.52 www 1111: #
1112: #
1113: # Full or no access?
1114: #
1.29 www 1115:
1.52 www 1116: if ($thisallowed=~/F/) {
1117: return 'F';
1118: }
1.29 www 1119:
1.52 www 1120: unless ($thisallowed) {
1121: return '';
1122: }
1.29 www 1123:
1.52 www 1124: # Restrictions exist, deal with them
1125: #
1126: # C:according to course preferences
1127: # R:according to resource settings
1128: # L:unless locked
1129: # X:according to user session state
1130: #
1131:
1132: # Possibly locked functionality, check all courses
1.54 www 1133: # Locks might take effect only after 10 minutes cache expiration for other
1134: # courses, and 2 minutes for current course
1.52 www 1135:
1136: my $envkey;
1137: if ($thisallowed=~/L/) {
1138: foreach $envkey (keys %ENV) {
1.54 www 1139: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1140: my $courseid=$2;
1141: my $roleid=$1.'.'.$2;
1.92 www 1142: $courseid=~s/^\///;
1.54 www 1143: my $expiretime=600;
1144: if ($ENV{'request.role'} eq $roleid) {
1145: $expiretime=120;
1146: }
1147: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1148: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1149: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1150: &coursedescription($courseid);
1151: }
1152: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1153: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1154: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1.57 www 1155: &log($ENV{'user.domain'},$ENV{'user.name'},
1156: $ENV{'user.host'},
1157: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1.52 www 1158: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1.54 www 1159: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1.52 www 1160: return '';
1161: }
1162: }
1.54 www 1163: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1164: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1165: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1.57 www 1166: &log($ENV{'user.domain'},$ENV{'user.name'},
1167: $ENV{'user.host'},
1168: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1.52 www 1169: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1.54 www 1170: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1.52 www 1171: return '';
1172: }
1173: }
1174: }
1.29 www 1175: }
1.52 www 1176: }
1177:
1178: #
1179: # Rest of the restrictions depend on selected course
1180: #
1181:
1182: unless ($ENV{'request.course.id'}) {
1183: return '1';
1184: }
1.29 www 1185:
1.52 www 1186: #
1187: # Now user is definitely in a course
1188: #
1.53 www 1189:
1190:
1191: # Course preferences
1192:
1193: if ($thisallowed=~/C/) {
1.54 www 1194: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1195: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1196: =~/\,$rolecode\,/) {
1.57 www 1197: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1198: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1.54 www 1199: $ENV{'request.course.id'});
1200: return '';
1201: }
1.53 www 1202: }
1203:
1204: # Resource preferences
1205:
1206: if ($thisallowed=~/R/) {
1.54 www 1207: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1208: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1209: if (-e $filename) {
1210: my @content;
1211: {
1212: my $fh=Apache::File->new($filename);
1213: @content=<$fh>;
1214: }
1215: if (join('',@content)=~
1216: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1.57 www 1217: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1218: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1.54 www 1219: return '';
1220:
1221: }
1222: }
1.53 www 1223: }
1.30 www 1224:
1.52 www 1225: # Restricted by state?
1.30 www 1226:
1.52 www 1227: if ($thisallowed=~/X/) {
1228: if (&condval($statecond)) {
1229: return '2';
1230: } else {
1231: return '';
1232: }
1233: }
1.30 www 1234:
1.52 www 1235: return 'F';
1.12 www 1236: }
1237:
1238: # ----------------------------------------------------------------- Define Role
1239:
1240: sub definerole {
1241: if (allowed('mcr','/')) {
1242: my ($rolename,$sysrole,$domrole,$courole)=@_;
1.21 www 1243: map {
1244: my ($crole,$cqual)=split(/\&/,$_);
1245: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1246: if ($pr{'cr:s'}=~/$crole\&/) {
1247: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1248: return "refused:s:$crole&$cqual";
1249: }
1250: }
1251: } split('/',$sysrole);
1252: map {
1253: my ($crole,$cqual)=split(/\&/,$_);
1254: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1255: if ($pr{'cr:d'}=~/$crole\&/) {
1256: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1257: return "refused:d:$crole&$cqual";
1258: }
1259: }
1260: } split('/',$domrole);
1261: map {
1262: my ($crole,$cqual)=split(/\&/,$_);
1263: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1264: if ($pr{'cr:c'}=~/$crole\&/) {
1265: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1266: return "refused:c:$crole&$cqual";
1267: }
1268: }
1269: } split('/',$courole);
1.12 www 1270: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1271: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1.21 www 1272: "rolesdef_$rolename=".
1273: escape($sysrole.'_'.$domrole.'_'.$courole);
1.12 www 1274: return reply($command,$ENV{'user.home'});
1275: } else {
1276: return 'refused';
1277: }
1.105 harris41 1278: }
1279:
1280: # ---------------- Make a metadata query against the network of library servers
1281:
1282: sub metadata_query {
1.116 harris41 1283: my ($query,$custom,$customshow)=@_;
1.118 harris41 1284: # need to put in a library server loop here and return a hash
1.120 harris41 1285: my %rhash;
1.123 harris41 1286: for my $server (keys %libserv) {
1.118 harris41 1287: unless ($custom or $customshow) {
1288: my $reply=&reply("querysend:".&escape($query),$server);
1289: $rhash{$server}=$reply;
1290: }
1291: else {
1292: my $reply=&reply("querysend:".&escape($query).':'.
1293: &escape($custom).':'.&escape($customshow),
1294: $server);
1295: $rhash{$server}=$reply;
1296: }
1.112 harris41 1297: }
1.118 harris41 1298: return \%rhash;
1.12 www 1299: }
1300:
1301: # ------------------------------------------------------------------ Plain Text
1302:
1303: sub plaintext {
1.22 www 1304: my $short=shift;
1305: return $prp{$short};
1.12 www 1306: }
1307:
1.25 www 1308: # ------------------------------------------------------------------ Plain Text
1309:
1310: sub fileembstyle {
1311: my $ending=shift;
1312: return $fe{$ending};
1313: }
1314:
1315: # ------------------------------------------------------------ Description Text
1316:
1.74 www 1317: sub filedescription {
1.25 www 1318: my $ending=shift;
1319: return $fd{$ending};
1320: }
1321:
1.12 www 1322: # ----------------------------------------------------------------- Assign Role
1323:
1324: sub assignrole {
1.21 www 1325: my ($udom,$uname,$url,$role,$end,$start)=@_;
1326: my $mrole;
1327: if ($role =~ /^cr\//) {
1.104 www 1328: unless (&allowed('ccr',$url)) {
1329: &logthis('Refused custom assignrole: '.
1330: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1331: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1332: return 'refused';
1333: }
1.21 www 1334: $mrole='cr';
1335: } else {
1.82 www 1336: my $cwosec=$url;
1.83 www 1337: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1.104 www 1338: unless (&allowed('c'.$role,$cwosec)) {
1339: &logthis('Refused assignrole: '.
1340: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1341: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1342: return 'refused';
1343: }
1.21 www 1344: $mrole=$role;
1345: }
1346: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1347: "$udom:$uname:$url".'_'."$mrole=$role";
1.81 www 1348: if ($end) { $command.='_'.$end; }
1.21 www 1349: if ($start) {
1350: if ($end) {
1.81 www 1351: $command.='_'.$start;
1.21 www 1352: } else {
1.81 www 1353: $command.='_0_'.$start;
1.21 www 1354: }
1355: }
1356: return &reply($command,&homeserver($uname,$udom));
1.80 www 1357: }
1358:
1.81 www 1359: # --------------------------------------------------------------- Modify a user
1.80 www 1360:
1361:
1.81 www 1362: sub modifyuser {
1.80 www 1363: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1.81 www 1364: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1.80 www 1365: $umode.', '.$first.', '.$middle.', '.
1366: $last.', '.$gene.' by '.
1367: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1368: my $uhome=&homeserver($uname,$udom);
1369: # ----------------------------------------------------------------- Create User
1.81 www 1370: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1.80 www 1371: my $unhome='';
1372: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1373: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1374: } else {
1375: my $tryserver;
1.81 www 1376: my $loadm=10000000;
1.80 www 1377: foreach $tryserver (keys %libserv) {
1378: if ($hostdom{$tryserver} eq $udom) {
1379: my $answer=reply('load',$tryserver);
1380: if (($answer=~/\d+/) && ($answer<$loadm)) {
1381: $loadm=$answer;
1382: $unhome=$tryserver;
1383: }
1384: }
1385: }
1386: }
1387: if (($unhome eq '') || ($unhome eq 'no_host')) {
1388: return 'error: find home';
1389: }
1390: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1391: &escape($upass),$unhome);
1392: unless ($reply eq 'ok') {
1393: return 'error: '.$reply;
1394: }
1395: $uhome=&homeserver($uname,$udom);
1396: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1397: return 'error: verify home';
1398: }
1399: }
1400: # ---------------------------------------------------------------------- Add ID
1401: if ($uid) {
1402: $uid=~tr/A-Z/a-z/;
1403: my %uidhash=&idrget($udom,$uname);
1404: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1405: unless ($uid eq $uidhash{$uname}) {
1406: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1407: }
1408: } else {
1409: &idput($udom,($uname => $uid));
1410: }
1411: }
1412: # -------------------------------------------------------------- Add names, etc
1413: my $names=&reply('get:'.$udom.':'.$uname.
1414: ':environment:firstname&middlename&lastname&generation',
1415: $uhome);
1416: my ($efirst,$emiddle,$elast,$egene)=split(/\&/,$names);
1.81 www 1417: if ($first) { $efirst = &escape($first); }
1418: if ($middle) { $emiddle = &escape($middle); }
1419: if ($last) { $elast = &escape($last); }
1420: if ($gene) { $egene = &escape($gene); }
1.80 www 1421: my $reply=&reply('put:'.$udom.':'.$uname.
1422: ':environment:firstname='.$efirst.
1423: '&middlename='.$emiddle.
1424: '&lastname='.$elast.
1425: '&generation='.$egene,$uhome);
1426: if ($reply ne 'ok') {
1427: return 'error: '.$reply;
1428: }
1.81 www 1429: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1.80 www 1430: $umode.', '.$first.', '.$middle.', '.
1431: $last.', '.$gene.' by '.
1432: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1433: return 'ok';
1434: }
1435:
1.81 www 1436: # -------------------------------------------------------------- Modify student
1.80 www 1437:
1.81 www 1438: sub modifystudent {
1439: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1440: $end,$start)=@_;
1441: my $cid='';
1442: unless ($cid=$ENV{'request.course.id'}) {
1.80 www 1443: return 'not_in_class';
1444: }
1445: # --------------------------------------------------------------- Make the user
1.81 www 1446: my $reply=&modifyuser
1.80 www 1447: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1448: unless ($reply eq 'ok') { return $reply; }
1.81 www 1449: my $uhome=&homeserver($uname,$udom);
1450: if (($uhome eq '') || ($uhome eq 'no_host')) {
1451: return 'error: no such user';
1452: }
1.80 www 1453: # -------------------------------------------------- Add student to course list
1.81 www 1454: my $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1455: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1456: &escape($uname.':'.$udom).'='.
1457: &escape($end.':'.$start),
1458: $ENV{'course.'.$cid.'.home'});
1459: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1460: return 'error: '.$reply;
1461: }
1.80 www 1462: # ---------------------------------------------------- Add student role to user
1.83 www 1463: my $uurl='/'.$cid;
1.81 www 1464: $uurl=~s/\_/\//g;
1465: if ($usec) {
1466: $uurl.='/'.$usec;
1467: }
1468: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1.21 www 1469: }
1470:
1.84 www 1471: # ------------------------------------------------- Write to course preferences
1472:
1473: sub writecoursepref {
1474: my ($courseid,%prefs)=@_;
1475: $courseid=~s/^\///;
1476: $courseid=~s/\_/\//g;
1477: my ($cdomain,$cnum)=split(/\//,$courseid);
1478: my $chome=homeserver($cnum,$cdomain);
1479: if (($chome eq '') || ($chome eq 'no_host')) {
1480: return 'error: no such course';
1481: }
1482: my $cstring='';
1483: map {
1484: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1485: } keys %prefs;
1486: $cstring=~s/\&$//;
1487: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1488: }
1489:
1490: # ---------------------------------------------------------- Make/modify course
1491:
1492: sub createcourse {
1493: my ($udom,$description,$url)=@_;
1494: $url=&declutter($url);
1495: my $cid='';
1496: unless (&allowed('ccc',$ENV{'user.domain'})) {
1497: return 'refused';
1498: }
1499: unless ($udom eq $ENV{'user.domain'}) {
1500: return 'refused';
1501: }
1502: # ------------------------------------------------------------------- Create ID
1503: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1504: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1505: # ----------------------------------------------- Make sure that does not exist
1506: my $uhome=&homeserver($uname,$udom);
1507: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1508: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1509: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1510: $uhome=&homeserver($uname,$udom);
1511: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1512: return 'error: unable to generate unique course-ID';
1513: }
1514: }
1515: # ------------------------------------------------------------- Make the course
1516: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1517: $ENV{'user.home'});
1518: unless ($reply eq 'ok') { return 'error: '.$reply; }
1519: my $uhome=&homeserver($uname,$udom);
1520: if (($uhome eq '') || ($uhome eq 'no_host')) {
1521: return 'error: no such course';
1522: }
1523: &writecoursepref($udom.'_'.$uname,
1524: ('description' => $description,
1525: 'url' => $url));
1526: return '/'.$udom.'/'.$uname;
1527: }
1528:
1.21 www 1529: # ---------------------------------------------------------- Assign Custom Role
1530:
1531: sub assigncustomrole {
1532: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1533: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1534: $end,$start);
1535: }
1536:
1537: # ----------------------------------------------------------------- Revoke Role
1538:
1539: sub revokerole {
1540: my ($udom,$uname,$url,$role)=@_;
1541: my $now=time;
1542: return &assignrole($udom,$uname,$url,$role,$now);
1543: }
1544:
1545: # ---------------------------------------------------------- Revoke Custom Role
1546:
1547: sub revokecustomrole {
1548: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1549: my $now=time;
1550: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1.17 www 1551: }
1552:
1553: # ------------------------------------------------------------ Directory lister
1554:
1555: sub dirlist {
1556: my $uri=shift;
1.18 www 1557: $uri=~s/^\///;
1558: $uri=~s/\/$//;
1.19 www 1559: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1560: if ($udom) {
1561: if ($uname) {
1562: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1563: homeserver($uname,$udom));
1564: return split(/:/,$listing);
1565: } else {
1566: my $tryserver;
1567: my %allusers=();
1568: foreach $tryserver (keys %libserv) {
1569: if ($hostdom{$tryserver} eq $udom) {
1570: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1571: $tryserver);
1572: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1573: && ($listing ne 'con_lost')) {
1574: map {
1575: my ($entry,@stat)=split(/&/,$_);
1576: $allusers{$entry}=1;
1577: } split(/:/,$listing);
1578: }
1579: }
1580: }
1581: my $alluserstr='';
1582: map {
1583: $alluserstr.=$_.'&user:';
1584: } sort keys %allusers;
1585: $alluserstr=~s/:$//;
1586: return split(/:/,$alluserstr);
1587: }
1588: } else {
1589: my $tryserver;
1590: my %alldom=();
1591: foreach $tryserver (keys %libserv) {
1592: $alldom{$hostdom{$tryserver}}=1;
1593: }
1594: my $alldomstr='';
1595: map {
1596: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1597: } sort keys %alldom;
1598: $alldomstr=~s/:$//;
1599: return split(/:/,$alldomstr);
1600: }
1.26 www 1601: }
1602:
1603: # -------------------------------------------------------- Value of a Condition
1604:
1.40 www 1605: sub directcondval {
1606: my $number=shift;
1607: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1608: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1609: } else {
1610: return 2;
1611: }
1612: }
1613:
1.26 www 1614: sub condval {
1615: my $condidx=shift;
1616: my $result=0;
1.54 www 1617: my $allpathcond='';
1618: map {
1619: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1620: $allpathcond.=
1621: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1622: }
1623: } split(/\|/,$condidx);
1624: $allpathcond=~s/\|$//;
1.33 www 1625: if ($ENV{'request.course.id'}) {
1.54 www 1626: if ($allpathcond) {
1.26 www 1627: my $operand='|';
1628: my @stack;
1629: map {
1630: if ($_ eq '(') {
1631: push @stack,($operand,$result)
1632: } elsif ($_ eq ')') {
1633: my $before=pop @stack;
1634: if (pop @stack eq '&') {
1635: $result=$result>$before?$before:$result;
1636: } else {
1637: $result=$result>$before?$result:$before;
1638: }
1639: } elsif (($_ eq '&') || ($_ eq '|')) {
1640: $operand=$_;
1641: } else {
1.40 www 1642: my $new=directcondval($_);
1.26 www 1643: if ($operand eq '&') {
1644: $result=$result>$new?$new:$result;
1645: } else {
1646: $result=$result>$new?$result:$new;
1647: }
1648: }
1.54 www 1649: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1.26 www 1650: }
1651: }
1652: return $result;
1.28 www 1653: }
1654:
1655: # --------------------------------------------------------- Value of a Variable
1656:
1.58 www 1657: sub EXT {
1.102 www 1658: my $varname=shift;
1.68 www 1659: unless ($varname) { return ''; }
1.48 www 1660: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1661: my $rest;
1662: if ($therest[0]) {
1663: $rest=join('.',@therest);
1664: } else {
1665: $rest='';
1666: }
1.57 www 1667: my $qualifierrest=$qualifier;
1668: if ($rest) { $qualifierrest.='.'.$rest; }
1669: my $spacequalifierrest=$space;
1670: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1.28 www 1671: if ($realm eq 'user') {
1.48 www 1672: # --------------------------------------------------------------- user.resource
1673: if ($space eq 'resource') {
1.122 albertel 1674: my %restored=&restore();
1.57 www 1675: return $restored{$qualifierrest};
1.48 www 1676: # ----------------------------------------------------------------- user.access
1677: } elsif ($space eq 'access') {
1678: return &allowed($qualifier,$rest);
1679: # ------------------------------------------ user.preferences, user.environment
1680: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1.57 www 1681: return $ENV{join('.',('environment',$qualifierrest))};
1.48 www 1682: # ----------------------------------------------------------------- user.course
1683: } elsif ($space eq 'course') {
1684: return $ENV{join('.',('request.course',$qualifier))};
1685: # ------------------------------------------------------------------- user.role
1686: } elsif ($space eq 'role') {
1687: my ($role,$where)=split(/\./,$ENV{'request.role'});
1688: if ($qualifier eq 'value') {
1689: return $role;
1690: } elsif ($qualifier eq 'extent') {
1691: return $where;
1692: }
1693: # ----------------------------------------------------------------- user.domain
1694: } elsif ($space eq 'domain') {
1695: return $ENV{'user.domain'};
1696: # ------------------------------------------------------------------- user.name
1697: } elsif ($space eq 'name') {
1698: return $ENV{'user.name'};
1699: # ---------------------------------------------------- Any other user namespace
1.29 www 1700: } else {
1.48 www 1701: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1702: my %reply=&get($space,$item);
1703: return $reply{$item};
1704: }
1705: } elsif ($realm eq 'request') {
1706: # ------------------------------------------------------------- request.browser
1707: if ($space eq 'browser') {
1708: return $ENV{'browser.'.$qualifier};
1.57 www 1709: # ------------------------------------------------------------ request.filename
1710: } else {
1711: return $ENV{'request.'.$spacequalifierrest};
1.29 www 1712: }
1.28 www 1713: } elsif ($realm eq 'course') {
1.48 www 1714: # ---------------------------------------------------------- course.description
1.127 ! ng 1715: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1.57 www 1716: $spacequalifierrest};
1717: } elsif ($realm eq 'resource') {
1.127 ! ng 1718: if ($ENV{'request.course.id'}) {
1.60 www 1719: # ----------------------------------------------------- Cascading lookup scheme
1.127 ! ng 1720: my $symbp=&symbread();
! 1721: my $mapp=(split(/\_\_\_/,$symbp))[0];
1.69 www 1722:
1.127 ! ng 1723: my $symbparm=$symbp.'.'.$spacequalifierrest;
! 1724: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1.69 www 1725:
1.127 ! ng 1726: my $seclevel=
1.69 www 1727: $ENV{'request.course.id'}.'.['.
1728: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1.127 ! ng 1729: my $seclevelr=
1.69 www 1730: $ENV{'request.course.id'}.'.['.
1731: $ENV{'request.course.sec'}.'].'.$symbparm;
1.127 ! ng 1732: my $seclevelm=
1.69 www 1733: $ENV{'request.course.id'}.'.['.
1734: $ENV{'request.course.sec'}.'].'.$mapparm;
1735:
1.127 ! ng 1736: my $courselevel=
1.60 www 1737: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1.127 ! ng 1738: my $courselevelr=
1.69 www 1739: $ENV{'request.course.id'}.'.'.$symbparm;
1.127 ! ng 1740: my $courselevelm=
1.69 www 1741: $ENV{'request.course.id'}.'.'.$mapparm;
1742:
1.60 www 1743: # ----------------------------------------------------------- first, check user
1.127 ! ng 1744: my %resourcedata=get('resourcedata',
1.69 www 1745: ($courselevelr,$courselevelm,$courselevel));
1.127 ! ng 1746: if (($resourcedata{$courselevelr}!~/^error\:/) &&
! 1747: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1.69 www 1748:
1.127 ! ng 1749: if ($resourcedata{$courselevelr}) {
! 1750: return $resourcedata{$courselevelr}; }
! 1751: if ($resourcedata{$courselevelm}) {
! 1752: return $resourcedata{$courselevelm}; }
! 1753: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1.69 www 1754:
1.94 www 1755: } else {
1756: if ($resourcedata{$courselevelr}!~/No such file/) {
1757: &logthis("<font color=blue>WARNING:".
1758: " Trying to get resource data for ".$ENV{'user.name'}." at "
1759: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1760: "</font>");
1761: }
1.63 www 1762: }
1.95 www 1763:
1.60 www 1764: # -------------------------------------------------------- second, check course
1.96 www 1765:
1.60 www 1766: my $reply=&reply('get:'.
1.96 www 1767: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
1768: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1.79 www 1769: ':resourcedata:'.
1770: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
1771: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
1.96 www 1772: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
1.63 www 1773: if ($reply!~/^error\:/) {
1.79 www 1774: map {
1775: if ($_) { return &unescape($_); }
1776: } split(/\&/,$reply);
1.63 www 1777: }
1.94 www 1778: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
1779: &logthis("<font color=blue>WARNING:".
1.95 www 1780: " Getting ".$reply." asking for ".$varname." for ".
1.96 www 1781: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1.95 www 1782: ' at '.
1.96 www 1783: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
1.95 www 1784: ' from '.
1.96 www 1785: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
1.94 www 1786: "</font>");
1787: }
1.60 www 1788: # ------------------------------------------------------ third, check map parms
1.65 www 1789: my %parmhash=();
1790: my $thisparm='';
1791: if (tie(%parmhash,'GDBM_File',
1792: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
1793: $thisparm=$parmhash{$symbparm};
1794: untie(%parmhash);
1.60 www 1795: }
1.65 www 1796: if ($thisparm) { return $thisparm; }
1.60 www 1797: }
1798:
1799: # --------------------------------------------- last, look in resource metadata
1.71 www 1800:
1.78 www 1801: $spacequalifierrest=~s/\./\_/;
1.71 www 1802: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
1803: if ($metadata) { return $metadata; }
1.78 www 1804: $metadata=&metadata($ENV{'request.filename'},
1805: 'parameter_'.$spacequalifierrest);
1806: if ($metadata) { return $metadata; }
1.71 www 1807:
1.48 www 1808: # ---------------------------------------------------- Any other user namespace
1809: } elsif ($realm eq 'environment') {
1810: # ----------------------------------------------------------------- environment
1.127 ! ng 1811: return $ENV{'environment.'.$spacequalifierrest};
1.28 www 1812: } elsif ($realm eq 'system') {
1.48 www 1813: # ----------------------------------------------------------------- system.time
1814: if ($space eq 'time') {
1815: return time;
1816: }
1.28 www 1817: }
1.48 www 1818: return '';
1.61 www 1819: }
1820:
1.71 www 1821: # ---------------------------------------------------------------- Get metadata
1822:
1823: sub metadata {
1824: my ($uri,$what)=@_;
1.78 www 1825:
1.71 www 1826: $uri=&declutter($uri);
1.73 www 1827: my $filename=$uri;
1828: $uri=~s/\.meta$//;
1.71 www 1829: unless ($metacache{$uri.':keys'}) {
1.73 www 1830: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
1831: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
1.71 www 1832: my $parser=HTML::TokeParser->new(\$metastring);
1833: my $token;
1834: while ($token=$parser->get_token) {
1835: if ($token->[0] eq 'S') {
1836: my $entry=$token->[1];
1837: my $unikey=$entry;
1.72 www 1838: if (defined($token->[2]->{'part'})) {
1.71 www 1839: $unikey.='_'.$token->[2]->{'part'};
1840: }
1.72 www 1841: if (defined($token->[2]->{'name'})) {
1.71 www 1842: $unikey.='_'.$token->[2]->{'name'};
1843: }
1844: if ($metacache{$uri.':keys'}) {
1845: $metacache{$uri.':keys'}.=','.$unikey;
1846: } else {
1847: $metacache{$uri.':keys'}=$unikey;
1848: }
1849: map {
1850: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
1.72 www 1851: } @{$token->[3]};
1.78 www 1852: unless (
1853: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
1854: ) { $metacache{$uri.':'.$unikey}=
1855: $metacache{$uri.':'.$unikey.'.default'};
1856: }
1.71 www 1857: }
1858: }
1859: }
1860: return $metacache{$uri.':'.$what};
1861: }
1862:
1.31 www 1863: # ------------------------------------------------- Update symbolic store links
1864:
1865: sub symblist {
1866: my ($mapname,%newhash)=@_;
1867: $mapname=declutter($mapname);
1868: my %hash;
1869: if (($ENV{'request.course.fn'}) && (%newhash)) {
1870: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
1871: &GDBM_WRCREAT,0640)) {
1872: map {
1873: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
1874: } keys %newhash;
1875: if (untie(%hash)) {
1876: return 'ok';
1877: }
1878: }
1879: }
1880: return 'error';
1881: }
1882:
1883: # ------------------------------------------------------ Return symb list entry
1884:
1885: sub symbread {
1.44 www 1886: my $thisfn=shift;
1887: unless ($thisfn) {
1888: $thisfn=$ENV{'request.filename'};
1889: }
1890: $thisfn=declutter($thisfn);
1.31 www 1891: my %hash;
1.37 www 1892: my %bighash;
1893: my $syval='';
1.45 www 1894: if (($ENV{'request.course.fn'}) && ($thisfn)) {
1.31 www 1895: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
1896: &GDBM_READER,0640)) {
1897: $syval=$hash{$thisfn};
1.37 www 1898: untie(%hash);
1899: }
1900: # ---------------------------------------------------------- There was an entry
1901: if ($syval) {
1902: unless ($syval=~/\_\d+$/) {
1903: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
1.44 www 1904: &appenv('request.ambiguous' => $thisfn);
1.37 www 1905: return '';
1906: }
1907: $syval.=$1;
1908: }
1909: } else {
1910: # ------------------------------------------------------- Was not in symb table
1911: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
1912: &GDBM_READER,0640)) {
1913: # ---------------------------------------------- Get ID(s) for current resource
1914: my $ids=$bighash{'ids_/res/'.$thisfn};
1.65 www 1915: unless ($ids) {
1916: $ids=$bighash{'ids_/'.$thisfn};
1917: }
1.37 www 1918: if ($ids) {
1919: # ------------------------------------------------------------------- Has ID(s)
1920: my @possibilities=split(/\,/,$ids);
1.39 www 1921: if ($#possibilities==0) {
1922: # ----------------------------------------------- There is only one possibility
1.37 www 1923: my ($mapid,$resid)=split(/\./,$ids);
1924: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
1925: } else {
1.39 www 1926: # ------------------------------------------ There is more than one possibility
1927: my $realpossible=0;
1928: map {
1929: my $file=$bighash{'src_'.$_};
1930: if (&allowed('bre',$file)) {
1931: my ($mapid,$resid)=split(/\./,$_);
1932: if ($bighash{'map_type_'.$mapid} ne 'page') {
1933: $realpossible++;
1934: $syval=declutter($bighash{'map_id_'.$mapid}).
1935: '___'.$resid;
1936: }
1937: }
1938: } @possibilities;
1939: if ($realpossible!=1) { $syval=''; }
1.37 www 1940: }
1941: }
1942: untie(%bighash)
1943: }
1.31 www 1944: }
1.62 www 1945: if ($syval) {
1946: return $syval.'___'.$thisfn;
1947: }
1.31 www 1948: }
1.44 www 1949: &appenv('request.ambiguous' => $thisfn);
1.31 www 1950: return '';
1951: }
1952:
1953: # ---------------------------------------------------------- Return random seed
1954:
1.32 www 1955: sub numval {
1956: my $txt=shift;
1957: $txt=~tr/A-J/0-9/;
1958: $txt=~tr/a-j/0-9/;
1959: $txt=~tr/K-T/0-9/;
1960: $txt=~tr/k-t/0-9/;
1961: $txt=~tr/U-Z/0-5/;
1962: $txt=~tr/u-z/0-5/;
1963: $txt=~s/\D//g;
1964: return int($txt);
1965: }
1966:
1.31 www 1967: sub rndseed {
1968: my $symb;
1.44 www 1969: unless ($symb=&symbread()) { return time; }
1.98 albertel 1970: {
1971: use integer;
1972: my $symbchck=unpack("%32C*",$symb) << 27;
1.100 albertel 1973: my $symbseed=numval($symb) << 22;
1.98 albertel 1974: my $namechck=unpack("%32C*",$ENV{'user.name'}) << 17;
1.100 albertel 1975: my $nameseed=numval($ENV{'user.name'}) << 12;
1.98 albertel 1976: my $domainseed=unpack("%32C*",$ENV{'user.domain'}) << 7;
1977: my $courseseed=unpack("%32C*",$ENV{'request.course.id'});
1978: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
1.99 albertel 1979: #uncommenting these lines can break things!
1980: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
1981: #&Apache::lonxml::debug("rndseed :$num:$symb");
1.98 albertel 1982: return $num;
1983: }
1.36 albertel 1984: }
1985:
1.76 www 1986: sub ireceipt {
1987: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
1988: my $cuname=unpack("%32C*",$funame);
1989: my $cudom=unpack("%32C*",$fudom);
1990: my $cucourseid=unpack("%32C*",$fucourseid);
1991: my $cusymb=unpack("%32C*",$fusymb);
1.77 www 1992: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
1.76 www 1993: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
1994: ($cunique%$cuname+
1995: $cunique%$cudom+
1996: $cusymb%$cuname+
1997: $cusymb%$cudom+
1998: $cucourseid%$cuname+
1999: $cucourseid%$cudom);
2000: }
2001:
2002: sub receipt {
2003: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2004: $ENV{'request.course.id'},&symbread());
2005: }
2006:
1.36 albertel 2007: # ------------------------------------------------------------ Serves up a file
2008: # returns either the contents of the file or a -1
2009: sub getfile {
2010: my $file=shift;
1.37 www 2011: &repcopy($file);
1.36 albertel 2012: if (! -e $file ) { return -1; };
2013: my $fh=Apache::File->new($file);
2014: my $a='';
2015: while (<$fh>) { $a .=$_; }
2016: return $a
2017: }
2018:
2019: sub filelocation {
2020: my ($dir,$file) = @_;
2021: my $location;
2022: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
1.59 albertel 2023: if ($file=~m:^/~:) { # is a contruction space reference
2024: $location = $file;
2025: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
1.36 albertel 2026: } else {
1.59 albertel 2027: $file=~s/^$perlvar{'lonDocRoot'}//;
2028: $file=~s:^/*res::;
2029: if ( !( $file =~ m:^/:) ) {
2030: $location = $dir. '/'.$file;
2031: } else {
2032: $location = '/home/httpd/html/res'.$file;
2033: }
1.36 albertel 2034: }
2035: $location=~s://+:/:g; # remove duplicate /
1.46 www 2036: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2037: return $location;
2038: }
1.36 albertel 2039:
1.46 www 2040: sub hreflocation {
2041: my ($dir,$file)=@_;
2042: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2043: my $finalpath=filelocation($dir,$file);
2044: $finalpath=~s/^\/home\/httpd\/html//;
2045: return $finalpath;
2046: } else {
2047: return $file;
2048: }
1.31 www 2049: }
2050:
2051: # ------------------------------------------------------------- Declutters URLs
2052:
2053: sub declutter {
2054: my $thisfn=shift;
2055: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2056: $thisfn=~s/^\///;
2057: $thisfn=~s/^res\///;
2058: return $thisfn;
1.12 www 2059: }
2060:
2061: # -------------------------------------------------------- Escape Special Chars
2062:
2063: sub escape {
2064: my $str=shift;
2065: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2066: return $str;
2067: }
2068:
2069: # ----------------------------------------------------- Un-Escape Special Chars
2070:
2071: sub unescape {
2072: my $str=shift;
2073: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2074: return $str;
2075: }
1.11 www 2076:
1.1 albertel 2077: # ================================================================ Main Program
2078:
2079: sub BEGIN {
2080: if ($readit ne 'done') {
2081: # ------------------------------------------------------------ Read access.conf
2082: {
2083: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2084:
2085: while (my $configline=<$config>) {
2086: if ($configline =~ /PerlSetVar/) {
2087: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
1.8 www 2088: chomp($varvalue);
1.1 albertel 2089: $perlvar{$varname}=$varvalue;
2090: }
2091: }
2092: }
2093:
2094: # ------------------------------------------------------------- Read hosts file
2095: {
2096: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2097:
2098: while (my $configline=<$config>) {
2099: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2100: $hostname{$id}=$name;
2101: $hostdom{$id}=$domain;
2102: if ($role eq 'library') { $libserv{$id}=$name; }
2103: }
2104: }
2105:
2106: # ------------------------------------------------------ Read spare server file
2107: {
2108: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2109:
2110: while (my $configline=<$config>) {
2111: chomp($configline);
2112: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2113: $spareid{$configline}=1;
2114: }
2115: }
2116: }
1.11 www 2117: # ------------------------------------------------------------ Read permissions
2118: {
2119: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2120:
2121: while (my $configline=<$config>) {
2122: chomp($configline);
2123: my ($role,$perm)=split(/ /,$configline);
2124: if ($perm ne '') { $pr{$role}=$perm; }
2125: }
2126: }
2127:
2128: # -------------------------------------------- Read plain texts for permissions
2129: {
2130: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2131:
2132: while (my $configline=<$config>) {
2133: chomp($configline);
2134: my ($short,$plain)=split(/:/,$configline);
2135: if ($plain ne '') { $prp{$short}=$plain; }
1.25 www 2136: }
2137: }
2138:
2139: # ------------------------------------------------------------- Read file types
2140: {
2141: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2142:
2143: while (my $configline=<$config>) {
2144: chomp($configline);
2145: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2146: if ($descr[0] ne '') {
2147: $fe{$ending}=$emb;
2148: $fd{$ending}=join(' ',@descr);
2149: }
1.11 www 2150: }
2151: }
2152:
1.71 www 2153: %metacache=();
1.22 www 2154:
1.1 albertel 2155: $readit='done';
1.12 www 2156: &logthis('<font color=yellow>INFO: Read configuration</font>');
1.1 albertel 2157: }
2158: }
2159: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>