1: # The LearningOnline Network
2: # TCP networking package
3: #
4: # Functions for use by content handlers:
5: #
6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
9: # plaintext(short) : plain text explanation of short term
10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
19: # set privileges in format of lonTabs/roles.tab for
20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
29: # appenv(hash) : adds hash to session environment
30: # delenv(varname) : deletes all environment entries starting with varname
31: # store(hashref,symb,courseid,udom,uname)
32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
36: # cstore(hashref,symb,courseid,udom,uname)
37: # : same as store but uses the critical interface to
38: # guarentee a store
39: # restore(symb,courseid,udom,uname)
40: # : returns hash for this symb, all args are optional
41: # if they aren't given they will be derived from the
42: # current enviroment
43: #
44: #
45: # for the next 6 functions udom and uname are optional
46: # if supplied they use udom as the domain and uname
47: # as the username for the function (supply a courseid
48: # for the uname if you want a course database)
49: # if not supplied it uses %ENV and looks at
50: # user. attribute for the values
51: #
52: # eget(namesp,arrayref,udom,uname)
53: # : returns hash with keys from array reference filled
54: # in from namesp (encrypts the return communication)
55: # get(namesp,arrayref,udom,uname)
56: # : returns hash with keys from array reference filled
57: # in from namesp
58: # dump(namesp,udom,uname) : dumps the complete namespace into a hash
59: # del(namesp,array,udom,uname) : deletes keys out of array from namesp
60: # put(namesp,hash,udom,uname) : stores hash in namesp
61: # cput(namesp,hash,udom,uname) : critical put
62: #
63: #
64: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
65: # hash
66: # coursedescription(id) : returns and caches course description for id
67: # repcopy(filename) : replicate file
68: # dirlist(url) : gets a directory listing
69: # directcondval(index) : reading condition value of single condition from
70: # state string
71: # condval(index) : value of condition index based on state
72: # EXT(name) : value of a variable
73: # symblist(map,hash) : Updates symbolic storage links
74: # symbread([filename]) : returns the data handle (filename optional)
75: # rndseed() : returns a random seed
76: # receipt() : returns a receipt to be given out to users
77: # getfile(filename) : returns the contents of filename, or a -1 if it can't
78: # be found, replicates and subscribes to the file
79: # filelocation(dir,file) : returns a fairly clean absolute reference to file
80: # from the directory dir
81: # hreflocation(dir,file) : same as filelocation, but for hrefs
82: # log(domain,user,home,msg) : write to permanent log for user
83: # usection(domain,user,courseid) : output of section name/number or '' for
84: # "not in course" and '-1' for "no section"
85: # userenvironment(domain,user,what) : puts out any environment parameter
86: # for a user
87: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
88: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
89: # an array of IDs
90: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
91: # an array of names
92: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
93: # returns a comma separated list of keys
94: #
95: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
96: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
97: # 11/8,11/16,11/18,11/22,11/23,12/22,
98: # 01/06,01/13,02/24,02/28,02/29,
99: # 03/01,03/02,03/06,03/07,03/13,
100: # 04/05,05/29,05/31,06/01,
101: # 06/05,06/26 Gerd Kortemeyer
102: # 06/26 Ben Tyszka
103: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
104: # 08/14 Ben Tyszka
105: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
106: # 10/04 Gerd Kortemeyer
107: # 10/04 Guy Albertelli
108: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
109: # 10/30,10/31,
110: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
111: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
112: # 05/01/01 Guy Albertelli
113: # 05/01,06/01,09/01 Gerd Kortemeyer
114: # 09/01 Guy Albertelli
115: # 09/01,10/01,11/01 Gerd Kortemeyer
116: # 02/27/01 Scott Harrison
117: # 3/2 Gerd Kortemeyer
118: # 3/15,3/19 Scott Harrison
119: # 3/19,3/20 Gerd Kortemeyer
120: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
121: # 5/26,5/28 Gerd Kortemeyer
122: # 5/30 H. K. Ng
123: # 6/1 Gerd Kortemeyer
124: # July Guy Albertelli
125: # 8/4,8/7,8/8,8/9,8/11,8/16 Gerd Kortemeyer
126:
127: package Apache::lonnet;
128:
129: use strict;
130: use Apache::File;
131: use LWP::UserAgent();
132: use HTTP::Headers;
133: use vars
134: qw(%perlvar %hostname %homecache %hostip %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache %packagetab);
135: use IO::Socket;
136: use GDBM_File;
137: use Apache::Constants qw(:common :http);
138: use HTML::TokeParser;
139: use Fcntl qw(:flock);
140:
141: # --------------------------------------------------------------------- Logging
142:
143: sub logthis {
144: my $message=shift;
145: my $execdir=$perlvar{'lonDaemons'};
146: my $now=time;
147: my $local=localtime($now);
148: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
149: print $fh "$local ($$): $message\n";
150: return 1;
151: }
152:
153: sub logperm {
154: my $message=shift;
155: my $execdir=$perlvar{'lonDaemons'};
156: my $now=time;
157: my $local=localtime($now);
158: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
159: print $fh "$now:$message:$local\n";
160: return 1;
161: }
162:
163: # -------------------------------------------------- Non-critical communication
164: sub subreply {
165: my ($cmd,$server)=@_;
166: my $peerfile="$perlvar{'lonSockDir'}/$server";
167: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
168: Type => SOCK_STREAM,
169: Timeout => 10)
170: or return "con_lost";
171: print $client "$cmd\n";
172: my $answer=<$client>;
173: if (!$answer) { $answer="con_lost"; }
174: chomp($answer);
175: return $answer;
176: }
177:
178: sub reply {
179: my ($cmd,$server)=@_;
180: my $answer=subreply($cmd,$server);
181: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
182: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
183: &logthis("<font color=blue>WARNING:".
184: " $cmd to $server returned $answer</font>");
185: }
186: return $answer;
187: }
188:
189: # ----------------------------------------------------------- Send USR1 to lonc
190:
191: sub reconlonc {
192: my $peerfile=shift;
193: &logthis("Trying to reconnect for $peerfile");
194: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
195: if (my $fh=Apache::File->new("$loncfile")) {
196: my $loncpid=<$fh>;
197: chomp($loncpid);
198: if (kill 0 => $loncpid) {
199: &logthis("lonc at pid $loncpid responding, sending USR1");
200: kill USR1 => $loncpid;
201: sleep 1;
202: if (-e "$peerfile") { return; }
203: &logthis("$peerfile still not there, give it another try");
204: sleep 5;
205: if (-e "$peerfile") { return; }
206: &logthis(
207: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
208: } else {
209: &logthis(
210: "<font color=blue>WARNING:".
211: " lonc at pid $loncpid not responding, giving up</font>");
212: }
213: } else {
214: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
215: }
216: }
217:
218: # ------------------------------------------------------ Critical communication
219:
220: sub critical {
221: my ($cmd,$server)=@_;
222: unless ($hostname{$server}) {
223: &logthis("<font color=blue>WARNING:".
224: " Critical message to unknown server ($server)</font>");
225: return 'no_such_host';
226: }
227: my $answer=reply($cmd,$server);
228: if ($answer eq 'con_lost') {
229: my $pingreply=reply('ping',$server);
230: &reconlonc("$perlvar{'lonSockDir'}/$server");
231: my $pongreply=reply('pong',$server);
232: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
233: $answer=reply($cmd,$server);
234: if ($answer eq 'con_lost') {
235: my $now=time;
236: my $middlename=$cmd;
237: $middlename=substr($middlename,0,16);
238: $middlename=~s/\W//g;
239: my $dfilename=
240: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
241: {
242: my $dfh;
243: if ($dfh=Apache::File->new(">$dfilename")) {
244: print $dfh "$cmd\n";
245: }
246: }
247: sleep 2;
248: my $wcmd='';
249: {
250: my $dfh;
251: if ($dfh=Apache::File->new("$dfilename")) {
252: $wcmd=<$dfh>;
253: }
254: }
255: chomp($wcmd);
256: if ($wcmd eq $cmd) {
257: &logthis("<font color=blue>WARNING: ".
258: "Connection buffer $dfilename: $cmd</font>");
259: &logperm("D:$server:$cmd");
260: return 'con_delayed';
261: } else {
262: &logthis("<font color=red>CRITICAL:"
263: ." Critical connection failed: $server $cmd</font>");
264: &logperm("F:$server:$cmd");
265: return 'con_failed';
266: }
267: }
268: }
269: return $answer;
270: }
271:
272: # ---------------------------------------------------------- Append Environment
273:
274: sub appenv {
275: my %newenv=@_;
276: map {
277: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
278: &logthis("<font color=blue>WARNING: ".
279: "Attempt to modify environment ".$_." to ".$newenv{$_});
280: delete($newenv{$_});
281: } else {
282: $ENV{$_}=$newenv{$_};
283: }
284: } keys %newenv;
285:
286: my $lockfh;
287: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
288: return 'error: '.$!;
289: }
290: unless (flock($lockfh,LOCK_EX)) {
291: &logthis("<font color=blue>WARNING: ".
292: 'Could not obtain exclusive lock in appenv: '.$!);
293: $lockfh->close();
294: return 'error: '.$!;
295: }
296:
297: my @oldenv;
298: {
299: my $fh;
300: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
301: return 'error: '.$!;
302: }
303: @oldenv=<$fh>;
304: $fh->close();
305: }
306: for (my $i=0; $i<=$#oldenv; $i++) {
307: chomp($oldenv[$i]);
308: if ($oldenv[$i] ne '') {
309: my ($name,$value)=split(/=/,$oldenv[$i]);
310: unless (defined($newenv{$name})) {
311: $newenv{$name}=$value;
312: }
313: }
314: }
315: {
316: my $fh;
317: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
318: return 'error';
319: }
320: my $newname;
321: foreach $newname (keys %newenv) {
322: print $fh "$newname=$newenv{$newname}\n";
323: }
324: $fh->close();
325: }
326:
327: $lockfh->close();
328: return 'ok';
329: }
330: # ----------------------------------------------------- Delete from Environment
331:
332: sub delenv {
333: my $delthis=shift;
334: my %newenv=();
335: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
336: &logthis("<font color=blue>WARNING: ".
337: "Attempt to delete from environment ".$delthis);
338: return 'error';
339: }
340: my @oldenv;
341: {
342: my $fh;
343: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
344: return 'error';
345: }
346: unless (flock($fh,LOCK_SH)) {
347: &logthis("<font color=blue>WARNING: ".
348: 'Could not obtain shared lock in delenv: '.$!);
349: $fh->close();
350: return 'error: '.$!;
351: }
352: @oldenv=<$fh>;
353: $fh->close();
354: }
355: {
356: my $fh;
357: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
358: return 'error';
359: }
360: unless (flock($fh,LOCK_EX)) {
361: &logthis("<font color=blue>WARNING: ".
362: 'Could not obtain exclusive lock in delenv: '.$!);
363: $fh->close();
364: return 'error: '.$!;
365: }
366: map {
367: unless ($_=~/^$delthis/) { print $fh $_; }
368: } @oldenv;
369: $fh->close();
370: }
371: return 'ok';
372: }
373:
374: # ------------------------------ Find server with least workload from spare.tab
375:
376: sub spareserver {
377: my $tryserver;
378: my $spareserver='';
379: my $lowestserver=100;
380: foreach $tryserver (keys %spareid) {
381: my $answer=reply('load',$tryserver);
382: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
383: $spareserver="http://$hostname{$tryserver}";
384: $lowestserver=$answer;
385: }
386: }
387: return $spareserver;
388: }
389:
390: # --------- Try to authenticate user from domain's lib servers (first this one)
391:
392: sub authenticate {
393: my ($uname,$upass,$udom)=@_;
394: $upass=escape($upass);
395: if (($perlvar{'lonRole'} eq 'library') &&
396: ($udom eq $perlvar{'lonDefDomain'})) {
397: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
398: if ($answer =~ /authorized/) {
399: if ($answer eq 'authorized') {
400: &logthis("User $uname at $udom authorized by local server");
401: return $perlvar{'lonHostID'};
402: }
403: if ($answer eq 'non_authorized') {
404: &logthis("User $uname at $udom rejected by local server");
405: return 'no_host';
406: }
407: }
408: }
409:
410: my $tryserver;
411: foreach $tryserver (keys %libserv) {
412: if ($hostdom{$tryserver} eq $udom) {
413: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
414: if ($answer =~ /authorized/) {
415: if ($answer eq 'authorized') {
416: &logthis("User $uname at $udom authorized by $tryserver");
417: return $tryserver;
418: }
419: if ($answer eq 'non_authorized') {
420: &logthis("User $uname at $udom rejected by $tryserver");
421: return 'no_host';
422: }
423: }
424: }
425: }
426: &logthis("User $uname at $udom could not be authenticated");
427: return 'no_host';
428: }
429:
430: # ---------------------- Find the homebase for a user from domain's lib servers
431:
432: sub homeserver {
433: my ($uname,$udom)=@_;
434:
435: my $index="$uname:$udom";
436: if ($homecache{$index}) { return "$homecache{$index}"; }
437:
438: my $tryserver;
439: foreach $tryserver (keys %libserv) {
440: if ($hostdom{$tryserver} eq $udom) {
441: my $answer=reply("home:$udom:$uname",$tryserver);
442: if ($answer eq 'found') {
443: $homecache{$index}=$tryserver;
444: return $tryserver;
445: }
446: }
447: }
448: return 'no_host';
449: }
450:
451: # ------------------------------------- Find the usernames behind a list of IDs
452:
453: sub idget {
454: my ($udom,@ids)=@_;
455: my %returnhash=();
456:
457: my $tryserver;
458: foreach $tryserver (keys %libserv) {
459: if ($hostdom{$tryserver} eq $udom) {
460: my $idlist=join('&',@ids);
461: $idlist=~tr/A-Z/a-z/;
462: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
463: my @answer=();
464: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
465: @answer=split(/\&/,$reply);
466: } ;
467: my $i;
468: for ($i=0;$i<=$#ids;$i++) {
469: if ($answer[$i]) {
470: $returnhash{$ids[$i]}=$answer[$i];
471: }
472: }
473: }
474: }
475: return %returnhash;
476: }
477:
478: # ------------------------------------- Find the IDs behind a list of usernames
479:
480: sub idrget {
481: my ($udom,@unames)=@_;
482: my %returnhash=();
483: map {
484: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
485: } @unames;
486: return %returnhash;
487: }
488:
489: # ------------------------------- Store away a list of names and associated IDs
490:
491: sub idput {
492: my ($udom,%ids)=@_;
493: my %servers=();
494: map {
495: my $uhom=&homeserver($_,$udom);
496: if ($uhom ne 'no_host') {
497: my $id=&escape($ids{$_});
498: $id=~tr/A-Z/a-z/;
499: my $unam=&escape($_);
500: if ($servers{$uhom}) {
501: $servers{$uhom}.='&'.$id.'='.$unam;
502: } else {
503: $servers{$uhom}=$id.'='.$unam;
504: }
505: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
506: }
507: } keys %ids;
508: map {
509: &critical('idput:'.$udom.':'.$servers{$_},$_);
510: } keys %servers;
511: }
512:
513: # ------------------------------------- Find the section of student in a course
514:
515: sub usection {
516: my ($udom,$unam,$courseid)=@_;
517: $courseid=~s/\_/\//g;
518: $courseid=~s/^(\w)/\/$1/;
519: map {
520: my ($key,$value)=split(/\=/,$_);
521: $key=&unescape($key);
522: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
523: my $section=$1;
524: if ($key eq $courseid.'_st') { $section=''; }
525: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
526: my $now=time;
527: my $notactive=0;
528: if ($start) {
529: if ($now<$start) { $notactive=1; }
530: }
531: if ($end) {
532: if ($now>$end) { $notactive=1; }
533: }
534: unless ($notactive) { return $section; }
535: }
536: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
537: &homeserver($unam,$udom)));
538: return '-1';
539: }
540:
541: # ------------------------------------- Read an entry from a user's environment
542:
543: sub userenvironment {
544: my ($udom,$unam,@what)=@_;
545: my %returnhash=();
546: my @answer=split(/\&/,
547: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
548: &homeserver($unam,$udom)));
549: my $i;
550: for ($i=0;$i<=$#what;$i++) {
551: $returnhash{$what[$i]}=&unescape($answer[$i]);
552: }
553: return %returnhash;
554: }
555:
556: # ----------------------------- Subscribe to a resource, return URL if possible
557:
558: sub subscribe {
559: my $fname=shift;
560: my $author=$fname;
561: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
562: my ($udom,$uname)=split(/\//,$author);
563: my $home=homeserver($uname,$udom);
564: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
565: return 'not_found';
566: }
567: my $answer=reply("sub:$fname",$home);
568: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
569: $answer.=' by '.$home;
570: }
571: return $answer;
572: }
573:
574: # -------------------------------------------------------------- Replicate file
575:
576: sub repcopy {
577: my $filename=shift;
578: $filename=~s/\/+/\//g;
579: my $transname="$filename.in.transfer";
580: if ((-e $filename) || (-e $transname)) { return OK; }
581: my $remoteurl=subscribe($filename);
582: if ($remoteurl =~ /^con_lost by/) {
583: &logthis("Subscribe returned $remoteurl: $filename");
584: return HTTP_SERVICE_UNAVAILABLE;
585: } elsif ($remoteurl eq 'not_found') {
586: &logthis("Subscribe returned not_found: $filename");
587: return HTTP_NOT_FOUND;
588: } elsif ($remoteurl =~ /^rejected by/) {
589: &logthis("Subscribe returned $remoteurl: $filename");
590: return FORBIDDEN;
591: } elsif ($remoteurl eq 'directory') {
592: return OK;
593: } else {
594: my @parts=split(/\//,$filename);
595: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
596: if ($path ne "$perlvar{'lonDocRoot'}/res") {
597: &logthis("Malconfiguration for replication: $filename");
598: return HTTP_BAD_REQUEST;
599: }
600: my $count;
601: for ($count=5;$count<$#parts;$count++) {
602: $path.="/$parts[$count]";
603: if ((-e $path)!=1) {
604: mkdir($path,0777);
605: }
606: }
607: my $ua=new LWP::UserAgent;
608: my $request=new HTTP::Request('GET',"$remoteurl");
609: my $response=$ua->request($request,$transname);
610: if ($response->is_error()) {
611: unlink($transname);
612: my $message=$response->status_line;
613: &logthis("<font color=blue>WARNING:"
614: ." LWP get: $message: $filename</font>");
615: return HTTP_SERVICE_UNAVAILABLE;
616: } else {
617: if ($remoteurl!~/\.meta$/) {
618: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
619: my $mresponse=$ua->request($mrequest,$filename.'.meta');
620: if ($mresponse->is_error()) {
621: unlink($filename.'.meta');
622: &logthis(
623: "<font color=yellow>INFO: No metadata: $filename</font>");
624: }
625: }
626: rename($transname,$filename);
627: return OK;
628: }
629: }
630: }
631:
632: # --------------------------------------------------------- Server Side Include
633:
634: sub ssi {
635:
636: my ($fn,%form)=@_;
637:
638: my $ua=new LWP::UserAgent;
639:
640: my $request;
641:
642: if (%form) {
643: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
644: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
645: } else {
646: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
647: }
648:
649: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
650: my $response=$ua->request($request);
651:
652: return $response->content;
653: }
654:
655: # ------------------------------------------------------------------------- Log
656:
657: sub log {
658: my ($dom,$nam,$hom,$what)=@_;
659: return critical("log:$dom:$nam:$what",$hom);
660: }
661:
662: # ----------------------------------------------------------- Check out an item
663:
664: sub checkout {
665: my ($symb,$tuname,$tudom,$tcrsid)=@_;
666: my $now=time;
667: my $lonhost=$perlvar{'lonHostID'};
668: my $infostr=&escape(
669: $tuname.'&'.
670: $tudom.'&'.
671: $tcrsid.'&'.
672: $symb.'&'.
673: $now.'&'.$ENV{'REMOTE_ADDR'});
674: my $token=&reply('tmpput:'.$infostr,$lonhost);
675: if ($token=~/^error\:/) { return ''; }
676: $token=~s/^(\d+)\_.*\_(\d+)$/$1\*$2\*$lonhost/;
677: $token=~tr/a-z/A-Z/;
678:
679: my %infohash=('outtoken' => $token,
680: 'checkouttime' => $now,
681: 'outremote' => $ENV{'REMOTE_ADDR'});
682:
683: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
684: return '';
685: }
686:
687: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
688: &escape('Checkout '.$infostr.' - '.
689: $token)) ne 'ok') {
690: return '';
691: }
692: }
693:
694: # ------------------------------------------------------------ Check in an item
695:
696: sub checkin {
697: my $token=shift;
698: my $now=time;
699: my ($ta,$tb,$lonhost)=split(/\*/,$token);
700: $lonhost=~tr/A-Z/a-z/;
701: my $dtoken=$ta.'_'.$hostip{$lonhost}.'_'.$tb;
702: $dtoken=~s/\W/\_/g;
703: my ($tuname,$tudom,$tcrsid,$symb,$chtim,$rmaddr)=
704: split(/\&/,&unescape(&reply('tmpget:'.$dtoken,$lonhost)));
705:
706: my %infohash=('intoken' => $token,
707: 'checkintime' => $now,
708: 'inremote' => $ENV{'REMOTE_ADDR'});
709:
710: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
711: return '';
712: }
713:
714: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
715: &escape('Checkin - '.$token)) ne 'ok') {
716: return '';
717: }
718:
719: return ($symb,$tuname,$tudom,$tcrsid);
720: }
721:
722: # --------------------------------------------- Set Expire Date for Spreadsheet
723:
724: sub expirespread {
725: my ($uname,$udom,$stype,$usymb)=@_;
726: my $cid=$ENV{'request.course.id'};
727: if ($cid) {
728: my $now=time;
729: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
730: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
731: $ENV{'course.'.$cid.'.num'}.
732: ':nohist_expirationdates:'.
733: &escape($key).'='.$now,
734: $ENV{'course.'.$cid.'.home'})
735: }
736: return 'ok';
737: }
738:
739: # ----------------------------------------------------- Devalidate Spreadsheets
740:
741: sub devalidate {
742: my $symb=shift;
743: my $cid=$ENV{'request.course.id'};
744: if ($cid) {
745: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
746: my $status=
747: &del('nohist_calculatedsheet',
748: [$key.'studentcalc'],
749: $ENV{'course.'.$cid.'.domain'},
750: $ENV{'course.'.$cid.'.num'})
751: .' '.
752: &del('nohist_calculatedsheets_'.$cid,
753: [$key.'assesscalc:'.$symb]);
754: unless ($status eq 'ok ok') {
755: &logthis('Could not devalidate spreadsheet '.
756: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
757: $symb.': '.$status);
758: }
759: }
760: }
761:
762: # ----------------------------------------------------------------------- Store
763:
764: sub store {
765: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
766: my $home='';
767:
768: if ($stuname) {
769: $home=&homeserver($stuname,$domain);
770: }
771:
772: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
773:
774: &devalidate($symb);
775:
776: $symb=escape($symb);
777: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
778: if (!$domain) { $domain=$ENV{'user.domain'}; }
779: if (!$stuname) { $stuname=$ENV{'user.name'}; }
780: if (!$home) { $home=$ENV{'user.home'}; }
781: my $namevalue='';
782: map {
783: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
784: } keys %$storehash;
785: $namevalue=~s/\&$//;
786: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
787: }
788:
789: # -------------------------------------------------------------- Critical Store
790:
791: sub cstore {
792: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
793: my $home='';
794:
795: if ($stuname) {
796: $home=&homeserver($stuname,$domain);
797: }
798:
799: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
800:
801: &devalidate($symb);
802:
803: $symb=escape($symb);
804: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
805: if (!$domain) { $domain=$ENV{'user.domain'}; }
806: if (!$stuname) { $stuname=$ENV{'user.name'}; }
807: if (!$home) { $home=$ENV{'user.home'}; }
808:
809: my $namevalue='';
810: map {
811: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
812: } keys %$storehash;
813: $namevalue=~s/\&$//;
814: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
815: }
816:
817: # --------------------------------------------------------------------- Restore
818:
819: sub restore {
820: my ($symb,$namespace,$domain,$stuname) = @_;
821: my $home='';
822:
823: if ($stuname) {
824: $home=&homeserver($stuname,$domain);
825: }
826:
827: if (!$symb) {
828: unless ($symb=escape(&symbread())) { return ''; }
829: } else {
830: $symb=&escape($symb);
831: }
832: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
833: if (!$domain) { $domain=$ENV{'user.domain'}; }
834: if (!$stuname) { $stuname=$ENV{'user.name'}; }
835: if (!$home) { $home=$ENV{'user.home'}; }
836: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
837:
838: my %returnhash=();
839: map {
840: my ($name,$value)=split(/\=/,$_);
841: $returnhash{&unescape($name)}=&unescape($value);
842: } split(/\&/,$answer);
843: my $version;
844: for ($version=1;$version<=$returnhash{'version'};$version++) {
845: map {
846: $returnhash{$_}=$returnhash{$version.':'.$_};
847: } split(/\:/,$returnhash{$version.':keys'});
848: }
849: return %returnhash;
850: }
851:
852: # ---------------------------------------------------------- Course Description
853:
854: sub coursedescription {
855: my $courseid=shift;
856: $courseid=~s/^\///;
857: $courseid=~s/\_/\//g;
858: my ($cdomain,$cnum)=split(/\//,$courseid);
859: my $chome=&homeserver($cnum,$cdomain);
860: if ($chome ne 'no_host') {
861: my %returnhash=&dump('environment',$cdomain,$cnum);
862: if (!exists($returnhash{'con_lost'})) {
863: my $normalid=$cdomain.'_'.$cnum;
864: my %envhash=();
865: $returnhash{'home'}= $chome;
866: $returnhash{'domain'} = $cdomain;
867: $returnhash{'num'} = $cnum;
868: while (my ($name,$value) = each %returnhash) {
869: $envhash{'course.'.$normalid.'.'.$name}=$value;
870: }
871: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
872: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
873: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
874: $envhash{'course.'.$normalid.'.last_cache'}=time;
875: $envhash{'course.'.$normalid.'.home'}=$chome;
876: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
877: $envhash{'course.'.$normalid.'.num'}=$cnum;
878: &appenv(%envhash);
879: return %returnhash;
880: }
881: }
882: return ();
883: }
884:
885: # -------------------------------------------------------- Get user privileges
886:
887: sub rolesinit {
888: my ($domain,$username,$authhost)=@_;
889: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
890: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
891: my %allroles=();
892: my %thesepriv=();
893: my $now=time;
894: my $userroles="user.login.time=$now\n";
895: my $thesestr;
896:
897: if ($rolesdump ne '') {
898: map {
899: if ($_!~/^rolesdef\&/) {
900: my ($area,$role)=split(/=/,$_);
901: $area=~s/\_\w\w$//;
902: my ($trole,$tend,$tstart)=split(/_/,$role);
903: $userroles.='user.role.'.$trole.'.'.$area.'='.
904: $tstart.'.'.$tend."\n";
905: if ($tend!=0) {
906: if ($tend<$now) {
907: $trole='';
908: }
909: }
910: if ($tstart!=0) {
911: if ($tstart>$now) {
912: $trole='';
913: }
914: }
915: if (($area ne '') && ($trole ne '')) {
916: my $spec=$trole.'.'.$area;
917: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
918: if ($trole =~ /^cr\//) {
919: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
920: my $homsvr=homeserver($rauthor,$rdomain);
921: if ($hostname{$homsvr} ne '') {
922: my $roledef=
923: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
924: $homsvr);
925: if (($roledef ne 'con_lost') && ($roledef ne '')) {
926: my ($syspriv,$dompriv,$coursepriv)=
927: split(/\_/,unescape($roledef));
928: $allroles{'cm./'}.=':'.$syspriv;
929: $allroles{$spec.'./'}.=':'.$syspriv;
930: if ($tdomain ne '') {
931: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
932: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
933: if ($trest ne '') {
934: $allroles{'cm.'.$area}.=':'.$coursepriv;
935: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
936: }
937: }
938: }
939: }
940: } else {
941: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
942: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
943: if ($tdomain ne '') {
944: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
945: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
946: if ($trest ne '') {
947: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
948: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
949: }
950: }
951: }
952: }
953: }
954: } split(/&/,$rolesdump);
955: my $adv=0;
956: my $author=0;
957: map {
958: %thesepriv=();
959: if (($_!~/^st/) && ($_!~/^ta/) && ($_!~/^cm/)) { $adv=1; }
960: if (($_=~/^au/) || ($_=~/^ca/)) { $author=1; }
961: map {
962: if ($_ ne '') {
963: my ($privilege,$restrictions)=split(/&/,$_);
964: if ($restrictions eq '') {
965: $thesepriv{$privilege}='F';
966: } else {
967: if ($thesepriv{$privilege} ne 'F') {
968: $thesepriv{$privilege}.=$restrictions;
969: }
970: }
971: }
972: } split(/:/,$allroles{$_});
973: $thesestr='';
974: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
975: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
976: } keys %allroles;
977: $userroles.='user.adv='.$adv."\n".
978: 'user.author='.$author."\n";
979: $ENV{'user.adv'}=$adv;
980: }
981: return $userroles;
982: }
983:
984: # --------------------------------------------------------------- get interface
985:
986: sub get {
987: my ($namespace,$storearr,$udomain,$uname)=@_;
988: my $items='';
989: map {
990: $items.=escape($_).'&';
991: } @$storearr;
992: $items=~s/\&$//;
993: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
994: if (!$uname) { $uname=$ENV{'user.name'}; }
995: my $uhome=&homeserver($uname,$udomain);
996:
997: my $rep=&reply("get:$udomain:$uname:$namespace:$items",$uhome);
998: my @pairs=split(/\&/,$rep);
999: my %returnhash=();
1000: my $i=0;
1001: map {
1002: $returnhash{$_}=unescape($pairs[$i]);
1003: $i++;
1004: } @$storearr;
1005: return %returnhash;
1006: }
1007:
1008: # --------------------------------------------------------------- del interface
1009:
1010: sub del {
1011: my ($namespace,$storearr,$udomain,$uname)=@_;
1012: my $items='';
1013: map {
1014: $items.=escape($_).'&';
1015: } @$storearr;
1016: $items=~s/\&$//;
1017: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1018: if (!$uname) { $uname=$ENV{'user.name'}; }
1019: my $uhome=&homeserver($uname,$udomain);
1020:
1021: return &reply("del:$udomain:$uname:$namespace:$items",$uhome);
1022: }
1023:
1024: # -------------------------------------------------------------- dump interface
1025:
1026: sub dump {
1027: my ($namespace,$udomain,$uname)=@_;
1028: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1029: if (!$uname) { $uname=$ENV{'user.name'}; }
1030: my $uhome=&homeserver($uname,$udomain);
1031: my $rep=reply("dump:$udomain:$uname:$namespace",$uhome);
1032: my @pairs=split(/\&/,$rep);
1033: my %returnhash=();
1034: map {
1035: my ($key,$value)=split(/=/,$_);
1036: $returnhash{unescape($key)}=unescape($value);
1037: } @pairs;
1038: return %returnhash;
1039: }
1040:
1041: # --------------------------------------------------------------- put interface
1042:
1043: sub put {
1044: my ($namespace,$storehash,$udomain,$uname)=@_;
1045: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1046: if (!$uname) { $uname=$ENV{'user.name'}; }
1047: my $uhome=&homeserver($uname,$udomain);
1048: my $items='';
1049: map {
1050: $items.=&escape($_).'='.&escape($$storehash{$_}).'&';
1051: } keys %$storehash;
1052: $items=~s/\&$//;
1053: return &reply("put:$udomain:$uname:$namespace:$items",$uhome);
1054: }
1055:
1056: # ------------------------------------------------------ critical put interface
1057:
1058: sub cput {
1059: my ($namespace,$storehash,$udomain,$uname)=@_;
1060: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1061: if (!$uname) { $uname=$ENV{'user.name'}; }
1062: my $uhome=&homeserver($uname,$udomain);
1063: my $items='';
1064: map {
1065: $items.=escape($_).'='.escape($$storehash{$_}).'&';
1066: } keys %$storehash;
1067: $items=~s/\&$//;
1068: return &critical("put:$udomain:$uname:$namespace:$items",$uhome);
1069: }
1070:
1071: # -------------------------------------------------------------- eget interface
1072:
1073: sub eget {
1074: my ($namespace,$storearr,$udomain,$uname)=@_;
1075: my $items='';
1076: map {
1077: $items.=escape($_).'&';
1078: } @$storearr;
1079: $items=~s/\&$//;
1080: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1081: if (!$uname) { $uname=$ENV{'user.name'}; }
1082: my $uhome=&homeserver($uname,$udomain);
1083: my $rep=&reply("eget:$udomain:$uname:$namespace:$items",$uhome);
1084: my @pairs=split(/\&/,$rep);
1085: my %returnhash=();
1086: my $i=0;
1087: map {
1088: $returnhash{$_}=unescape($pairs[$i]);
1089: $i++;
1090: } @$storearr;
1091: return %returnhash;
1092: }
1093:
1094: # ------------------------------------------------- Check for a user privilege
1095:
1096: sub allowed {
1097: my ($priv,$uri)=@_;
1098: $uri=&declutter($uri);
1099:
1100: # Free bre access to adm and meta resources
1101:
1102: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1103: return 'F';
1104: }
1105:
1106: my $thisallowed='';
1107: my $statecond=0;
1108: my $courseprivid='';
1109:
1110: # Course
1111:
1112: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1113: $thisallowed.=$1;
1114: }
1115:
1116: # Domain
1117:
1118: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1119: =~/$priv\&([^\:]*)/) {
1120: $thisallowed.=$1;
1121: }
1122:
1123: # Course: uri itself is a course
1124: my $courseuri=$uri;
1125: $courseuri=~s/\_(\d)/\/$1/;
1126: $courseuri=~s/^([^\/])/\/$1/;
1127:
1128: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1129: =~/$priv\&([^\:]*)/) {
1130: $thisallowed.=$1;
1131: }
1132:
1133: # Full access at system, domain or course-wide level? Exit.
1134:
1135: if ($thisallowed=~/F/) {
1136: return 'F';
1137: }
1138:
1139: # If this is generating or modifying users, exit with special codes
1140:
1141: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
1142: return $thisallowed;
1143: }
1144: #
1145: # Gathered so far: system, domain and course wide privileges
1146: #
1147: # Course: See if uri or referer is an individual resource that is part of
1148: # the course
1149:
1150: if ($ENV{'request.course.id'}) {
1151: $courseprivid=$ENV{'request.course.id'};
1152: if ($ENV{'request.course.sec'}) {
1153: $courseprivid.='/'.$ENV{'request.course.sec'};
1154: }
1155: $courseprivid=~s/\_/\//;
1156: my $checkreferer=1;
1157: my @uriparts=split(/\//,$uri);
1158: my $filename=$uriparts[$#uriparts];
1159: my $pathname=$uri;
1160: $pathname=~s/\/$filename$//;
1161: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1162: /\&$filename\:([\d\|]+)\&/) {
1163: $statecond=$1;
1164: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1165: =~/$priv\&([^\:]*)/) {
1166: $thisallowed.=$1;
1167: $checkreferer=0;
1168: }
1169: }
1170:
1171: if ($checkreferer) {
1172: my $refuri=$ENV{'httpref.'.$uri};
1173:
1174: unless ($refuri) {
1175: map {
1176: if ($_=~/^httpref\..*\*/) {
1177: my $pattern=$_;
1178: $pattern=~s/\*/\[\^\/\]\+/g;
1179: $pattern=~s/\//\\\//g;
1180: if ($uri=~/$pattern/) {
1181: $refuri=$ENV{$_};
1182: }
1183: }
1184: } keys %ENV;
1185: }
1186: if ($refuri) {
1187: my @uriparts=split(/\//,$refuri);
1188: my $filename=$uriparts[$#uriparts];
1189: my $pathname=$refuri;
1190: $pathname=~s/\/$filename$//;
1191: my @filenameparts=split(/\./,$uri);
1192: if (&fileembstyle($filenameparts[$#filenameparts]) ne 'ssi') {
1193: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1194: /\&$filename\:([\d\|]+)\&/) {
1195: my $refstatecond=$1;
1196: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1197: =~/$priv\&([^\:]*)/) {
1198: $thisallowed.=$1;
1199: $uri=$refuri;
1200: $statecond=$refstatecond;
1201: }
1202: }
1203: }
1204: }
1205: }
1206: }
1207:
1208: #
1209: # Gathered now: all privileges that could apply, and condition number
1210: #
1211: #
1212: # Full or no access?
1213: #
1214:
1215: if ($thisallowed=~/F/) {
1216: return 'F';
1217: }
1218:
1219: unless ($thisallowed) {
1220: return '';
1221: }
1222:
1223: # Restrictions exist, deal with them
1224: #
1225: # C:according to course preferences
1226: # R:according to resource settings
1227: # L:unless locked
1228: # X:according to user session state
1229: #
1230:
1231: # Possibly locked functionality, check all courses
1232: # Locks might take effect only after 10 minutes cache expiration for other
1233: # courses, and 2 minutes for current course
1234:
1235: my $envkey;
1236: if ($thisallowed=~/L/) {
1237: foreach $envkey (keys %ENV) {
1238: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1239: my $courseid=$2;
1240: my $roleid=$1.'.'.$2;
1241: $courseid=~s/^\///;
1242: my $expiretime=600;
1243: if ($ENV{'request.role'} eq $roleid) {
1244: $expiretime=120;
1245: }
1246: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1247: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1248: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1249: &coursedescription($courseid);
1250: }
1251: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1252: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1253: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1254: &log($ENV{'user.domain'},$ENV{'user.name'},
1255: $ENV{'user.host'},
1256: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1257: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1258: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1259: return '';
1260: }
1261: }
1262: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1263: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1264: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1265: &log($ENV{'user.domain'},$ENV{'user.name'},
1266: $ENV{'user.host'},
1267: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1268: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1269: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1270: return '';
1271: }
1272: }
1273: }
1274: }
1275: }
1276:
1277: #
1278: # Rest of the restrictions depend on selected course
1279: #
1280:
1281: unless ($ENV{'request.course.id'}) {
1282: return '1';
1283: }
1284:
1285: #
1286: # Now user is definitely in a course
1287: #
1288:
1289:
1290: # Course preferences
1291:
1292: if ($thisallowed=~/C/) {
1293: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1294: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1295: =~/\,$rolecode\,/) {
1296: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1297: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1298: $ENV{'request.course.id'});
1299: return '';
1300: }
1301: }
1302:
1303: # Resource preferences
1304:
1305: if ($thisallowed=~/R/) {
1306: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1307: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1308: if (-e $filename) {
1309: my @content;
1310: {
1311: my $fh=Apache::File->new($filename);
1312: @content=<$fh>;
1313: }
1314: if (join('',@content)=~
1315: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1316: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1317: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1318: return '';
1319:
1320: }
1321: }
1322: }
1323:
1324: # Restricted by state?
1325:
1326: if ($thisallowed=~/X/) {
1327: if (&condval($statecond)) {
1328: return '2';
1329: } else {
1330: return '';
1331: }
1332: }
1333:
1334: return 'F';
1335: }
1336:
1337: # ----------------------------------------------------------------- Define Role
1338:
1339: sub definerole {
1340: if (allowed('mcr','/')) {
1341: my ($rolename,$sysrole,$domrole,$courole)=@_;
1342: map {
1343: my ($crole,$cqual)=split(/\&/,$_);
1344: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1345: if ($pr{'cr:s'}=~/$crole\&/) {
1346: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1347: return "refused:s:$crole&$cqual";
1348: }
1349: }
1350: } split('/',$sysrole);
1351: map {
1352: my ($crole,$cqual)=split(/\&/,$_);
1353: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1354: if ($pr{'cr:d'}=~/$crole\&/) {
1355: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1356: return "refused:d:$crole&$cqual";
1357: }
1358: }
1359: } split('/',$domrole);
1360: map {
1361: my ($crole,$cqual)=split(/\&/,$_);
1362: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1363: if ($pr{'cr:c'}=~/$crole\&/) {
1364: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1365: return "refused:c:$crole&$cqual";
1366: }
1367: }
1368: } split('/',$courole);
1369: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1370: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1371: "rolesdef_$rolename=".
1372: escape($sysrole.'_'.$domrole.'_'.$courole);
1373: return reply($command,$ENV{'user.home'});
1374: } else {
1375: return 'refused';
1376: }
1377: }
1378:
1379: # ---------------- Make a metadata query against the network of library servers
1380:
1381: sub metadata_query {
1382: my ($query,$custom,$customshow)=@_;
1383: # need to put in a library server loop here and return a hash
1384: my %rhash;
1385: for my $server (keys %libserv) {
1386: unless ($custom or $customshow) {
1387: my $reply=&reply("querysend:".&escape($query),$server);
1388: $rhash{$server}=$reply;
1389: }
1390: else {
1391: my $reply=&reply("querysend:".&escape($query).':'.
1392: &escape($custom).':'.&escape($customshow),
1393: $server);
1394: $rhash{$server}=$reply;
1395: }
1396: }
1397: return \%rhash;
1398: }
1399:
1400: # ------------------------------------------------------------------ Plain Text
1401:
1402: sub plaintext {
1403: my $short=shift;
1404: return $prp{$short};
1405: }
1406:
1407: # ------------------------------------------------------------------ Plain Text
1408:
1409: sub fileembstyle {
1410: my $ending=shift;
1411: return $fe{$ending};
1412: }
1413:
1414: # ------------------------------------------------------------ Description Text
1415:
1416: sub filedescription {
1417: my $ending=shift;
1418: return $fd{$ending};
1419: }
1420:
1421: # ----------------------------------------------------------------- Assign Role
1422:
1423: sub assignrole {
1424: my ($udom,$uname,$url,$role,$end,$start)=@_;
1425: my $mrole;
1426: if ($role =~ /^cr\//) {
1427: unless (&allowed('ccr',$url)) {
1428: &logthis('Refused custom assignrole: '.
1429: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1430: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1431: return 'refused';
1432: }
1433: $mrole='cr';
1434: } else {
1435: my $cwosec=$url;
1436: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1437: unless (&allowed('c'.$role,$cwosec)) {
1438: &logthis('Refused assignrole: '.
1439: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1440: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1441: return 'refused';
1442: }
1443: $mrole=$role;
1444: }
1445: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1446: "$udom:$uname:$url".'_'."$mrole=$role";
1447: if ($end) { $command.='_'.$end; }
1448: if ($start) {
1449: if ($end) {
1450: $command.='_'.$start;
1451: } else {
1452: $command.='_0_'.$start;
1453: }
1454: }
1455: return &reply($command,&homeserver($uname,$udom));
1456: }
1457:
1458: # --------------------------------------------------------------- Modify a user
1459:
1460:
1461: sub modifyuser {
1462: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1463: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1464: $umode.', '.$first.', '.$middle.', '.
1465: $last.', '.$gene.' by '.
1466: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1467: my $uhome=&homeserver($uname,$udom);
1468: # ----------------------------------------------------------------- Create User
1469: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1470: my $unhome='';
1471: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1472: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1473: } else {
1474: my $tryserver;
1475: my $loadm=10000000;
1476: foreach $tryserver (keys %libserv) {
1477: if ($hostdom{$tryserver} eq $udom) {
1478: my $answer=reply('load',$tryserver);
1479: if (($answer=~/\d+/) && ($answer<$loadm)) {
1480: $loadm=$answer;
1481: $unhome=$tryserver;
1482: }
1483: }
1484: }
1485: }
1486: if (($unhome eq '') || ($unhome eq 'no_host')) {
1487: return 'error: find home';
1488: }
1489: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1490: &escape($upass),$unhome);
1491: unless ($reply eq 'ok') {
1492: return 'error: '.$reply;
1493: }
1494: $uhome=&homeserver($uname,$udom);
1495: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1496: return 'error: verify home';
1497: }
1498: }
1499: # ---------------------------------------------------------------------- Add ID
1500: if ($uid) {
1501: $uid=~tr/A-Z/a-z/;
1502: my %uidhash=&idrget($udom,$uname);
1503: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1504: unless ($uid eq $uidhash{$uname}) {
1505: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1506: }
1507: } else {
1508: &idput($udom,($uname => $uid));
1509: }
1510: }
1511: # -------------------------------------------------------------- Add names, etc
1512: my %names=&get('environment',
1513: ['firstname','middlename','lastname','generation'],
1514: $udom,$uname);
1515: if ($first) { $names{'firstname'} = $first; }
1516: if ($middle) { $names{'middlename'} = $middle; }
1517: if ($last) { $names{'lastname'} = $last; }
1518: if ($gene) { $names{'generation'} = $gene; }
1519: my $reply = &put('environment', \%names, $udom,$uname);
1520: if ($reply ne 'ok') { return 'error: '.$reply; }
1521: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1522: $umode.', '.$first.', '.$middle.', '.
1523: $last.', '.$gene.' by '.
1524: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1525: return 'ok';
1526: }
1527:
1528: # -------------------------------------------------------------- Modify student
1529:
1530: sub modifystudent {
1531: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1532: $end,$start)=@_;
1533: my $cid='';
1534: unless ($cid=$ENV{'request.course.id'}) {
1535: return 'not_in_class';
1536: }
1537: # --------------------------------------------------------------- Make the user
1538: my $reply=&modifyuser
1539: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1540: unless ($reply eq 'ok') { return $reply; }
1541: my $uhome=&homeserver($uname,$udom);
1542: if (($uhome eq '') || ($uhome eq 'no_host')) {
1543: return 'error: no such user';
1544: }
1545: # -------------------------------------------------- Add student to course list
1546: my $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1547: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1548: &escape($uname.':'.$udom).'='.
1549: &escape($end.':'.$start),
1550: $ENV{'course.'.$cid.'.home'});
1551: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1552: return 'error: '.$reply;
1553: }
1554: # ---------------------------------------------------- Add student role to user
1555: my $uurl='/'.$cid;
1556: $uurl=~s/\_/\//g;
1557: if ($usec) {
1558: $uurl.='/'.$usec;
1559: }
1560: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1561: }
1562:
1563: # ------------------------------------------------- Write to course preferences
1564:
1565: sub writecoursepref {
1566: my ($courseid,%prefs)=@_;
1567: $courseid=~s/^\///;
1568: $courseid=~s/\_/\//g;
1569: my ($cdomain,$cnum)=split(/\//,$courseid);
1570: my $chome=homeserver($cnum,$cdomain);
1571: if (($chome eq '') || ($chome eq 'no_host')) {
1572: return 'error: no such course';
1573: }
1574: my $cstring='';
1575: map {
1576: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1577: } keys %prefs;
1578: $cstring=~s/\&$//;
1579: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1580: }
1581:
1582: # ---------------------------------------------------------- Make/modify course
1583:
1584: sub createcourse {
1585: my ($udom,$description,$url)=@_;
1586: $url=&declutter($url);
1587: my $cid='';
1588: unless (&allowed('ccc',$ENV{'user.domain'})) {
1589: return 'refused';
1590: }
1591: unless ($udom eq $ENV{'user.domain'}) {
1592: return 'refused';
1593: }
1594: # ------------------------------------------------------------------- Create ID
1595: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1596: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1597: # ----------------------------------------------- Make sure that does not exist
1598: my $uhome=&homeserver($uname,$udom);
1599: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1600: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1601: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1602: $uhome=&homeserver($uname,$udom);
1603: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1604: return 'error: unable to generate unique course-ID';
1605: }
1606: }
1607: # ------------------------------------------------------------- Make the course
1608: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1609: $ENV{'user.home'});
1610: unless ($reply eq 'ok') { return 'error: '.$reply; }
1611: my $uhome=&homeserver($uname,$udom);
1612: if (($uhome eq '') || ($uhome eq 'no_host')) {
1613: return 'error: no such course';
1614: }
1615: &writecoursepref($udom.'_'.$uname,
1616: ('description' => $description,
1617: 'url' => $url));
1618: return '/'.$udom.'/'.$uname;
1619: }
1620:
1621: # ---------------------------------------------------------- Assign Custom Role
1622:
1623: sub assigncustomrole {
1624: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1625: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1626: $end,$start);
1627: }
1628:
1629: # ----------------------------------------------------------------- Revoke Role
1630:
1631: sub revokerole {
1632: my ($udom,$uname,$url,$role)=@_;
1633: my $now=time;
1634: return &assignrole($udom,$uname,$url,$role,$now);
1635: }
1636:
1637: # ---------------------------------------------------------- Revoke Custom Role
1638:
1639: sub revokecustomrole {
1640: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1641: my $now=time;
1642: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1643: }
1644:
1645: # ------------------------------------------------------------ Directory lister
1646:
1647: sub dirlist {
1648: my $uri=shift;
1649: $uri=~s/^\///;
1650: $uri=~s/\/$//;
1651: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1652: if ($udom) {
1653: if ($uname) {
1654: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1655: homeserver($uname,$udom));
1656: return split(/:/,$listing);
1657: } else {
1658: my $tryserver;
1659: my %allusers=();
1660: foreach $tryserver (keys %libserv) {
1661: if ($hostdom{$tryserver} eq $udom) {
1662: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1663: $tryserver);
1664: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1665: && ($listing ne 'con_lost')) {
1666: map {
1667: my ($entry,@stat)=split(/&/,$_);
1668: $allusers{$entry}=1;
1669: } split(/:/,$listing);
1670: }
1671: }
1672: }
1673: my $alluserstr='';
1674: map {
1675: $alluserstr.=$_.'&user:';
1676: } sort keys %allusers;
1677: $alluserstr=~s/:$//;
1678: return split(/:/,$alluserstr);
1679: }
1680: } else {
1681: my $tryserver;
1682: my %alldom=();
1683: foreach $tryserver (keys %libserv) {
1684: $alldom{$hostdom{$tryserver}}=1;
1685: }
1686: my $alldomstr='';
1687: map {
1688: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1689: } sort keys %alldom;
1690: $alldomstr=~s/:$//;
1691: return split(/:/,$alldomstr);
1692: }
1693: }
1694:
1695: # -------------------------------------------------------- Value of a Condition
1696:
1697: sub directcondval {
1698: my $number=shift;
1699: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1700: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1701: } else {
1702: return 2;
1703: }
1704: }
1705:
1706: sub condval {
1707: my $condidx=shift;
1708: my $result=0;
1709: my $allpathcond='';
1710: map {
1711: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1712: $allpathcond.=
1713: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1714: }
1715: } split(/\|/,$condidx);
1716: $allpathcond=~s/\|$//;
1717: if ($ENV{'request.course.id'}) {
1718: if ($allpathcond) {
1719: my $operand='|';
1720: my @stack;
1721: map {
1722: if ($_ eq '(') {
1723: push @stack,($operand,$result)
1724: } elsif ($_ eq ')') {
1725: my $before=pop @stack;
1726: if (pop @stack eq '&') {
1727: $result=$result>$before?$before:$result;
1728: } else {
1729: $result=$result>$before?$result:$before;
1730: }
1731: } elsif (($_ eq '&') || ($_ eq '|')) {
1732: $operand=$_;
1733: } else {
1734: my $new=directcondval($_);
1735: if ($operand eq '&') {
1736: $result=$result>$new?$new:$result;
1737: } else {
1738: $result=$result>$new?$result:$new;
1739: }
1740: }
1741: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1742: }
1743: }
1744: return $result;
1745: }
1746:
1747: # --------------------------------------------------------- Value of a Variable
1748:
1749: sub EXT {
1750: my ($varname,$symbparm)=@_;
1751: unless ($varname) { return ''; }
1752: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1753: my $rest;
1754: if ($therest[0]) {
1755: $rest=join('.',@therest);
1756: } else {
1757: $rest='';
1758: }
1759: my $qualifierrest=$qualifier;
1760: if ($rest) { $qualifierrest.='.'.$rest; }
1761: my $spacequalifierrest=$space;
1762: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1763: if ($realm eq 'user') {
1764: # --------------------------------------------------------------- user.resource
1765: if ($space eq 'resource') {
1766: my %restored=&restore();
1767: return $restored{$qualifierrest};
1768: # ----------------------------------------------------------------- user.access
1769: } elsif ($space eq 'access') {
1770: return &allowed($qualifier,$rest);
1771: # ------------------------------------------ user.preferences, user.environment
1772: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1773: return $ENV{join('.',('environment',$qualifierrest))};
1774: # ----------------------------------------------------------------- user.course
1775: } elsif ($space eq 'course') {
1776: return $ENV{join('.',('request.course',$qualifier))};
1777: # ------------------------------------------------------------------- user.role
1778: } elsif ($space eq 'role') {
1779: my ($role,$where)=split(/\./,$ENV{'request.role'});
1780: if ($qualifier eq 'value') {
1781: return $role;
1782: } elsif ($qualifier eq 'extent') {
1783: return $where;
1784: }
1785: # ----------------------------------------------------------------- user.domain
1786: } elsif ($space eq 'domain') {
1787: return $ENV{'user.domain'};
1788: # ------------------------------------------------------------------- user.name
1789: } elsif ($space eq 'name') {
1790: return $ENV{'user.name'};
1791: # ---------------------------------------------------- Any other user namespace
1792: } else {
1793: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1794: my %reply=&get($space,[$item]);
1795: return $reply{$item};
1796: }
1797: } elsif ($realm eq 'request') {
1798: # ------------------------------------------------------------- request.browser
1799: if ($space eq 'browser') {
1800: return $ENV{'browser.'.$qualifier};
1801: # ------------------------------------------------------------ request.filename
1802: } else {
1803: return $ENV{'request.'.$spacequalifierrest};
1804: }
1805: } elsif ($realm eq 'course') {
1806: # ---------------------------------------------------------- course.description
1807: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1808: $spacequalifierrest};
1809: } elsif ($realm eq 'resource') {
1810: if ($ENV{'request.course.id'}) {
1811:
1812: # print '<br>'.$space.' - '.$qualifier.' - '.$spacequalifierrest;
1813:
1814:
1815: # ----------------------------------------------------- Cascading lookup scheme
1816: my $symbp;
1817: if ($symbparm) {
1818: $symbp=$symbparm;
1819: } else {
1820: $symbp=&symbread();
1821: }
1822: my $mapp=(split(/\_\_\_/,$symbp))[0];
1823:
1824: my $symbparm=$symbp.'.'.$spacequalifierrest;
1825: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1826:
1827: my $seclevel=
1828: $ENV{'request.course.id'}.'.['.
1829: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1830: my $seclevelr=
1831: $ENV{'request.course.id'}.'.['.
1832: $ENV{'request.course.sec'}.'].'.$symbparm;
1833: my $seclevelm=
1834: $ENV{'request.course.id'}.'.['.
1835: $ENV{'request.course.sec'}.'].'.$mapparm;
1836:
1837: my $courselevel=
1838: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1839: my $courselevelr=
1840: $ENV{'request.course.id'}.'.'.$symbparm;
1841: my $courselevelm=
1842: $ENV{'request.course.id'}.'.'.$mapparm;
1843:
1844: # ----------------------------------------------------------- first, check user
1845: my %resourcedata=get('resourcedata',
1846: [$courselevelr,$courselevelm,$courselevel]);
1847: if (($resourcedata{$courselevelr}!~/^error\:/) &&
1848: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1849:
1850: if ($resourcedata{$courselevelr}) {
1851: return $resourcedata{$courselevelr}; }
1852: if ($resourcedata{$courselevelm}) {
1853: return $resourcedata{$courselevelm}; }
1854: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1855:
1856: } else {
1857: if ($resourcedata{$courselevelr}!~/No such file/) {
1858: &logthis("<font color=blue>WARNING:".
1859: " Trying to get resource data for ".$ENV{'user.name'}." at "
1860: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1861: "</font>");
1862: }
1863: }
1864:
1865: # -------------------------------------------------------- second, check course
1866:
1867: my $reply=&reply('get:'.
1868: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
1869: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1870: ':resourcedata:'.
1871: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
1872: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
1873: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
1874: if ($reply!~/^error\:/) {
1875: map {
1876: if ($_) { return &unescape($_); }
1877: } split(/\&/,$reply);
1878: }
1879: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
1880: &logthis("<font color=blue>WARNING:".
1881: " Getting ".$reply." asking for ".$varname." for ".
1882: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1883: ' at '.
1884: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
1885: ' from '.
1886: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
1887: "</font>");
1888: }
1889: # ------------------------------------------------------ third, check map parms
1890: my %parmhash=();
1891: my $thisparm='';
1892: if (tie(%parmhash,'GDBM_File',
1893: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
1894: $thisparm=$parmhash{$symbparm};
1895: untie(%parmhash);
1896: }
1897: if ($thisparm) { return $thisparm; }
1898: }
1899:
1900: # --------------------------------------------- last, look in resource metadata
1901:
1902: $spacequalifierrest=~s/\./\_/;
1903: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
1904: if ($metadata) { return $metadata; }
1905: $metadata=&metadata($ENV{'request.filename'},
1906: 'parameter_'.$spacequalifierrest);
1907: if ($metadata) { return $metadata; }
1908:
1909: # ------------------------------------------------------------------ Cascade up
1910:
1911: unless ($space eq '0') {
1912: my ($part,$id)=split(/\_/,$space);
1913: if ($id) {
1914: my $partgeneral=&EXT('resource.'.$part.'.'.$qualifierrest,
1915: $symbparm);
1916: if ($partgeneral) { return $partgeneral; }
1917: } else {
1918: my $resourcegeneral=&EXT('resource.0.'.$qualifierrest,
1919: $symbparm);
1920: if ($resourcegeneral) { return $resourcegeneral; }
1921: }
1922: }
1923:
1924: # ---------------------------------------------------- Any other user namespace
1925: } elsif ($realm eq 'environment') {
1926: # ----------------------------------------------------------------- environment
1927: return $ENV{'environment.'.$spacequalifierrest};
1928: } elsif ($realm eq 'system') {
1929: # ----------------------------------------------------------------- system.time
1930: if ($space eq 'time') {
1931: return time;
1932: }
1933: }
1934: return '';
1935: }
1936:
1937: # ---------------------------------------------------------------- Get metadata
1938:
1939: sub metadata {
1940: my ($uri,$what)=@_;
1941:
1942: $uri=&declutter($uri);
1943: my $filename=$uri;
1944: $uri=~s/\.meta$//;
1945: unless ($metacache{$uri.':keys'}) {
1946: my %metathesekeys=();
1947: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
1948: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
1949: my $parser=HTML::TokeParser->new(\$metastring);
1950: my $token;
1951: undef %metathesekeys;
1952: while ($token=$parser->get_token) {
1953: if ($token->[0] eq 'S') {
1954: if (defined($token->[2]->{'package'})) {
1955: my $package=$token->[2]->{'package'};
1956: my $keyroot='';
1957: if (defined($token->[2]->{'part'})) {
1958: $keyroot.='_'.$token->[2]->{'part'};
1959: }
1960: if (defined($token->[2]->{'id'})) {
1961: $keyroot.='_'.$token->[2]->{'id'};
1962: }
1963: if ($metacache{$uri.':packages'}) {
1964: $metacache{$uri.':packages'}.=','.$package.$keyroot;
1965: } else {
1966: $metacache{$uri.':packages'}=$package.$keyroot;
1967: }
1968: map {
1969: if ($_=~/^$package\&/) {
1970: my ($pack,$name,$subp)=split(/\&/,$_);
1971: my $value=$packagetab{$_};
1972: my $part=$keyroot;
1973: $part=~s/^\_//;
1974: if ($subp eq 'display') {
1975: $value.=' [Part: '.$part.']';
1976: }
1977: my $unikey='parameter'.$keyroot.'_'.$name;
1978: $metathesekeys{$unikey}=1;
1979: $metacache{$uri.':'.$unikey.'.part'}=$part;
1980: unless
1981: (defined($metacache{$uri.':'.$unikey.'.'.$subp})) {
1982: $metacache{$uri.':'.$unikey.'.'.$subp}=$value;
1983: }
1984: }
1985: } keys %packagetab;
1986: } else {
1987: my $entry=$token->[1];
1988: my $unikey=$entry;
1989: if (defined($token->[2]->{'part'})) {
1990: $unikey.='_'.$token->[2]->{'part'};
1991: }
1992: if (defined($token->[2]->{'id'})) {
1993: $unikey.='_'.$token->[2]->{'id'};
1994: }
1995: if (defined($token->[2]->{'name'})) {
1996: $unikey.='_'.$token->[2]->{'name'};
1997: }
1998: $metathesekeys{$unikey}=1;
1999: map {
2000: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
2001: } @{$token->[3]};
2002: unless (
2003: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
2004: ) { $metacache{$uri.':'.$unikey}=
2005: $metacache{$uri.':'.$unikey.'.default'};
2006: }
2007: }
2008: }
2009: }
2010: $metacache{$uri.':keys'}=join(',',keys %metathesekeys);
2011: }
2012: return $metacache{$uri.':'.$what};
2013: }
2014:
2015: # ------------------------------------------------- Update symbolic store links
2016:
2017: sub symblist {
2018: my ($mapname,%newhash)=@_;
2019: $mapname=declutter($mapname);
2020: my %hash;
2021: if (($ENV{'request.course.fn'}) && (%newhash)) {
2022: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2023: &GDBM_WRCREAT,0640)) {
2024: map {
2025: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
2026: } keys %newhash;
2027: if (untie(%hash)) {
2028: return 'ok';
2029: }
2030: }
2031: }
2032: return 'error';
2033: }
2034:
2035: # ------------------------------------------------------ Return symb list entry
2036:
2037: sub symbread {
2038: my $thisfn=shift;
2039: unless ($thisfn) {
2040: $thisfn=$ENV{'request.filename'};
2041: }
2042: $thisfn=declutter($thisfn);
2043: my %hash;
2044: my %bighash;
2045: my $syval='';
2046: if (($ENV{'request.course.fn'}) && ($thisfn)) {
2047: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2048: &GDBM_READER,0640)) {
2049: $syval=$hash{$thisfn};
2050: untie(%hash);
2051: }
2052: # ---------------------------------------------------------- There was an entry
2053: if ($syval) {
2054: unless ($syval=~/\_\d+$/) {
2055: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
2056: &appenv('request.ambiguous' => $thisfn);
2057: return '';
2058: }
2059: $syval.=$1;
2060: }
2061: } else {
2062: # ------------------------------------------------------- Was not in symb table
2063: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
2064: &GDBM_READER,0640)) {
2065: # ---------------------------------------------- Get ID(s) for current resource
2066: my $ids=$bighash{'ids_/res/'.$thisfn};
2067: unless ($ids) {
2068: $ids=$bighash{'ids_/'.$thisfn};
2069: }
2070: if ($ids) {
2071: # ------------------------------------------------------------------- Has ID(s)
2072: my @possibilities=split(/\,/,$ids);
2073: if ($#possibilities==0) {
2074: # ----------------------------------------------- There is only one possibility
2075: my ($mapid,$resid)=split(/\./,$ids);
2076: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
2077: } else {
2078: # ------------------------------------------ There is more than one possibility
2079: my $realpossible=0;
2080: map {
2081: my $file=$bighash{'src_'.$_};
2082: if (&allowed('bre',$file)) {
2083: my ($mapid,$resid)=split(/\./,$_);
2084: if ($bighash{'map_type_'.$mapid} ne 'page') {
2085: $realpossible++;
2086: $syval=declutter($bighash{'map_id_'.$mapid}).
2087: '___'.$resid;
2088: }
2089: }
2090: } @possibilities;
2091: if ($realpossible!=1) { $syval=''; }
2092: }
2093: }
2094: untie(%bighash)
2095: }
2096: }
2097: if ($syval) {
2098: return $syval.'___'.$thisfn;
2099: }
2100: }
2101: &appenv('request.ambiguous' => $thisfn);
2102: return '';
2103: }
2104:
2105: # ---------------------------------------------------------- Return random seed
2106:
2107: sub numval {
2108: my $txt=shift;
2109: $txt=~tr/A-J/0-9/;
2110: $txt=~tr/a-j/0-9/;
2111: $txt=~tr/K-T/0-9/;
2112: $txt=~tr/k-t/0-9/;
2113: $txt=~tr/U-Z/0-5/;
2114: $txt=~tr/u-z/0-5/;
2115: $txt=~s/\D//g;
2116: return int($txt);
2117: }
2118:
2119: sub rndseed {
2120: my $symb;
2121: unless ($symb=&symbread()) { return time; }
2122: {
2123: use integer;
2124: my $symbchck=unpack("%32C*",$symb) << 27;
2125: my $symbseed=numval($symb) << 22;
2126: my $namechck=unpack("%32C*",$ENV{'user.name'}) << 17;
2127: my $nameseed=numval($ENV{'user.name'}) << 12;
2128: my $domainseed=unpack("%32C*",$ENV{'user.domain'}) << 7;
2129: my $courseseed=unpack("%32C*",$ENV{'request.course.id'});
2130: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
2131: #uncommenting these lines can break things!
2132: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
2133: #&Apache::lonxml::debug("rndseed :$num:$symb");
2134: return $num;
2135: }
2136: }
2137:
2138: sub ireceipt {
2139: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
2140: my $cuname=unpack("%32C*",$funame);
2141: my $cudom=unpack("%32C*",$fudom);
2142: my $cucourseid=unpack("%32C*",$fucourseid);
2143: my $cusymb=unpack("%32C*",$fusymb);
2144: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
2145: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
2146: ($cunique%$cuname+
2147: $cunique%$cudom+
2148: $cusymb%$cuname+
2149: $cusymb%$cudom+
2150: $cucourseid%$cuname+
2151: $cucourseid%$cudom);
2152: }
2153:
2154: sub receipt {
2155: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2156: $ENV{'request.course.id'},&symbread());
2157: }
2158:
2159: # ------------------------------------------------------------ Serves up a file
2160: # returns either the contents of the file or a -1
2161: sub getfile {
2162: my $file=shift;
2163: &repcopy($file);
2164: if (! -e $file ) { return -1; };
2165: my $fh=Apache::File->new($file);
2166: my $a='';
2167: while (<$fh>) { $a .=$_; }
2168: return $a
2169: }
2170:
2171: sub filelocation {
2172: my ($dir,$file) = @_;
2173: my $location;
2174: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
2175: if ($file=~m:^/~:) { # is a contruction space reference
2176: $location = $file;
2177: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
2178: } else {
2179: $file=~s/^$perlvar{'lonDocRoot'}//;
2180: $file=~s:^/*res::;
2181: if ( !( $file =~ m:^/:) ) {
2182: $location = $dir. '/'.$file;
2183: } else {
2184: $location = '/home/httpd/html/res'.$file;
2185: }
2186: }
2187: $location=~s://+:/:g; # remove duplicate /
2188: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2189: return $location;
2190: }
2191:
2192: sub hreflocation {
2193: my ($dir,$file)=@_;
2194: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2195: my $finalpath=filelocation($dir,$file);
2196: $finalpath=~s/^\/home\/httpd\/html//;
2197: return $finalpath;
2198: } else {
2199: return $file;
2200: }
2201: }
2202:
2203: # ------------------------------------------------------------- Declutters URLs
2204:
2205: sub declutter {
2206: my $thisfn=shift;
2207: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2208: $thisfn=~s/^\///;
2209: $thisfn=~s/^res\///;
2210: return $thisfn;
2211: }
2212:
2213: # -------------------------------------------------------- Escape Special Chars
2214:
2215: sub escape {
2216: my $str=shift;
2217: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2218: return $str;
2219: }
2220:
2221: # ----------------------------------------------------- Un-Escape Special Chars
2222:
2223: sub unescape {
2224: my $str=shift;
2225: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2226: return $str;
2227: }
2228:
2229: # ================================================================ Main Program
2230:
2231: sub BEGIN {
2232: if ($readit ne 'done') {
2233: # ------------------------------------------------------------ Read access.conf
2234: {
2235: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2236:
2237: while (my $configline=<$config>) {
2238: if ($configline =~ /PerlSetVar/) {
2239: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
2240: chomp($varvalue);
2241: $perlvar{$varname}=$varvalue;
2242: }
2243: }
2244: }
2245:
2246: # ------------------------------------------------------------- Read hosts file
2247: {
2248: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2249:
2250: while (my $configline=<$config>) {
2251: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2252: $hostname{$id}=$name;
2253: $hostdom{$id}=$domain;
2254: $hostip{$id}=$ip;
2255: if ($role eq 'library') { $libserv{$id}=$name; }
2256: }
2257: }
2258:
2259: # ------------------------------------------------------ Read spare server file
2260: {
2261: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2262:
2263: while (my $configline=<$config>) {
2264: chomp($configline);
2265: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2266: $spareid{$configline}=1;
2267: }
2268: }
2269: }
2270: # ------------------------------------------------------------ Read permissions
2271: {
2272: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2273:
2274: while (my $configline=<$config>) {
2275: chomp($configline);
2276: my ($role,$perm)=split(/ /,$configline);
2277: if ($perm ne '') { $pr{$role}=$perm; }
2278: }
2279: }
2280:
2281: # -------------------------------------------- Read plain texts for permissions
2282: {
2283: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2284:
2285: while (my $configline=<$config>) {
2286: chomp($configline);
2287: my ($short,$plain)=split(/:/,$configline);
2288: if ($plain ne '') { $prp{$short}=$plain; }
2289: }
2290: }
2291:
2292: # ---------------------------------------------------------- Read package table
2293: {
2294: my $config=Apache::File->new("$perlvar{'lonTabDir'}/packages.tab");
2295:
2296: while (my $configline=<$config>) {
2297: chomp($configline);
2298: my ($short,$plain)=split(/:/,$configline);
2299: my ($pack,$name)=split(/\&/,$short);
2300: if ($plain ne '') {
2301: $packagetab{$pack.'&'.$name.'&name'}=$name;
2302: $packagetab{$short}=$plain;
2303: }
2304: }
2305: }
2306:
2307: # ------------------------------------------------------------- Read file types
2308: {
2309: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2310:
2311: while (my $configline=<$config>) {
2312: chomp($configline);
2313: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2314: if ($descr[0] ne '') {
2315: $fe{$ending}=$emb;
2316: $fd{$ending}=join(' ',@descr);
2317: }
2318: }
2319: }
2320:
2321: %metacache=();
2322:
2323: $readit='done';
2324: &logthis('<font color=yellow>INFO: Read configuration</font>');
2325: }
2326: }
2327: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to lonnet.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / lonnet / perl