1: # The LearningOnline Network
2: # TCP networking package
3: #
4: # Functions for use by content handlers:
5: #
6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
9: # plaintext(short) : plain text explanation of short term
10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
19: # set privileges in format of lonTabs/roles.tab for
20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
29: # appenv(hash) : adds hash to session environment
30: # delenv(varname) : deletes all environment entries starting with varname
31: # store(hashref,symb,courseid,udom,uname)
32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
36: # cstore(hashref,symb,courseid,udom,uname)
37: # : same as store but uses the critical interface to
38: # guarentee a store
39: # restore(symb,courseid,udom,uname)
40: # : returns hash for this symb, all args are optional
41: # if they aren't given they will be derived from the
42: # current enviroment
43: #
44: #
45: # for the next 6 functions udom and uname are optional
46: # if supplied they use udom as the domain and uname
47: # as the username for the function (supply a courseid
48: # for the uname if you want a course database)
49: # if not supplied it uses %ENV and looks at
50: # user. attribute for the values
51: #
52: # eget(namesp,arrayref,udom,uname)
53: # : returns hash with keys from array reference filled
54: # in from namesp (encrypts the return communication)
55: # get(namesp,arrayref,udom,uname)
56: # : returns hash with keys from array reference filled
57: # in from namesp
58: # dump(namesp,udom,uname) : dumps the complete namespace into a hash
59: # del(namesp,array,udom,uname) : deletes keys out of array from namesp
60: # put(namesp,hash,udom,uname) : stores hash in namesp
61: # cput(namesp,hash,udom,uname) : critical put
62: #
63: #
64: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
65: # hash
66: # coursedescription(id) : returns and caches course description for id
67: # repcopy(filename) : replicate file
68: # dirlist(url) : gets a directory listing
69: # directcondval(index) : reading condition value of single condition from
70: # state string
71: # condval(index) : value of condition index based on state
72: # EXT(name) : value of a variable
73: # symblist(map,hash) : Updates symbolic storage links
74: # symbread([filename]) : returns the data handle (filename optional)
75: # rndseed() : returns a random seed
76: # receipt() : returns a receipt to be given out to users
77: # getfile(filename) : returns the contents of filename, or a -1 if it can't
78: # be found, replicates and subscribes to the file
79: # filelocation(dir,file) : returns a fairly clean absolute reference to file
80: # from the directory dir
81: # hreflocation(dir,file) : same as filelocation, but for hrefs
82: # log(domain,user,home,msg) : write to permanent log for user
83: # usection(domain,user,courseid) : output of section name/number or '' for
84: # "not in course" and '-1' for "no section"
85: # userenvironment(domain,user,what) : puts out any environment parameter
86: # for a user
87: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
88: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
89: # an array of IDs
90: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
91: # an array of names
92: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
93: # returns a comma separated list of keys
94: #
95: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
96: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
97: # 11/8,11/16,11/18,11/22,11/23,12/22,
98: # 01/06,01/13,02/24,02/28,02/29,
99: # 03/01,03/02,03/06,03/07,03/13,
100: # 04/05,05/29,05/31,06/01,
101: # 06/05,06/26 Gerd Kortemeyer
102: # 06/26 Ben Tyszka
103: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
104: # 08/14 Ben Tyszka
105: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
106: # 10/04 Gerd Kortemeyer
107: # 10/04 Guy Albertelli
108: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
109: # 10/30,10/31,
110: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
111: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
112: # 05/01/01 Guy Albertelli
113: # 05/01,06/01,09/01 Gerd Kortemeyer
114: # 09/01 Guy Albertelli
115: # 09/01,10/01,11/01 Gerd Kortemeyer
116: # 02/27/01 Scott Harrison
117: # 3/2 Gerd Kortemeyer
118: # 3/15,3/19 Scott Harrison
119: # 3/19,3/20 Gerd Kortemeyer
120: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
121: # 5/26,5/28 Gerd Kortemeyer
122: # 5/30 H. K. Ng
123: # 6/1 Gerd Kortemeyer
124: # July Guy Albertelli
125: # 8/4,8/7,8/8,8/9,8/11,8/16,8/17,8/18,8/20 Gerd Kortemeyer
126:
127: package Apache::lonnet;
128:
129: use strict;
130: use Apache::File;
131: use LWP::UserAgent();
132: use HTTP::Headers;
133: use vars
134: qw(%perlvar %hostname %homecache %hostip %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache %packagetab);
135: use IO::Socket;
136: use GDBM_File;
137: use Apache::Constants qw(:common :http);
138: use HTML::TokeParser;
139: use Fcntl qw(:flock);
140:
141: # --------------------------------------------------------------------- Logging
142:
143: sub logthis {
144: my $message=shift;
145: my $execdir=$perlvar{'lonDaemons'};
146: my $now=time;
147: my $local=localtime($now);
148: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
149: print $fh "$local ($$): $message\n";
150: return 1;
151: }
152:
153: sub logperm {
154: my $message=shift;
155: my $execdir=$perlvar{'lonDaemons'};
156: my $now=time;
157: my $local=localtime($now);
158: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
159: print $fh "$now:$message:$local\n";
160: return 1;
161: }
162:
163: # -------------------------------------------------- Non-critical communication
164: sub subreply {
165: my ($cmd,$server)=@_;
166: my $peerfile="$perlvar{'lonSockDir'}/$server";
167: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
168: Type => SOCK_STREAM,
169: Timeout => 10)
170: or return "con_lost";
171: print $client "$cmd\n";
172: my $answer=<$client>;
173: if (!$answer) { $answer="con_lost"; }
174: chomp($answer);
175: return $answer;
176: }
177:
178: sub reply {
179: my ($cmd,$server)=@_;
180: my $answer=subreply($cmd,$server);
181: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
182: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
183: &logthis("<font color=blue>WARNING:".
184: " $cmd to $server returned $answer</font>");
185: }
186: return $answer;
187: }
188:
189: # ----------------------------------------------------------- Send USR1 to lonc
190:
191: sub reconlonc {
192: my $peerfile=shift;
193: &logthis("Trying to reconnect for $peerfile");
194: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
195: if (my $fh=Apache::File->new("$loncfile")) {
196: my $loncpid=<$fh>;
197: chomp($loncpid);
198: if (kill 0 => $loncpid) {
199: &logthis("lonc at pid $loncpid responding, sending USR1");
200: kill USR1 => $loncpid;
201: sleep 1;
202: if (-e "$peerfile") { return; }
203: &logthis("$peerfile still not there, give it another try");
204: sleep 5;
205: if (-e "$peerfile") { return; }
206: &logthis(
207: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
208: } else {
209: &logthis(
210: "<font color=blue>WARNING:".
211: " lonc at pid $loncpid not responding, giving up</font>");
212: }
213: } else {
214: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
215: }
216: }
217:
218: # ------------------------------------------------------ Critical communication
219:
220: sub critical {
221: my ($cmd,$server)=@_;
222: unless ($hostname{$server}) {
223: &logthis("<font color=blue>WARNING:".
224: " Critical message to unknown server ($server)</font>");
225: return 'no_such_host';
226: }
227: my $answer=reply($cmd,$server);
228: if ($answer eq 'con_lost') {
229: my $pingreply=reply('ping',$server);
230: &reconlonc("$perlvar{'lonSockDir'}/$server");
231: my $pongreply=reply('pong',$server);
232: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
233: $answer=reply($cmd,$server);
234: if ($answer eq 'con_lost') {
235: my $now=time;
236: my $middlename=$cmd;
237: $middlename=substr($middlename,0,16);
238: $middlename=~s/\W//g;
239: my $dfilename=
240: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
241: {
242: my $dfh;
243: if ($dfh=Apache::File->new(">$dfilename")) {
244: print $dfh "$cmd\n";
245: }
246: }
247: sleep 2;
248: my $wcmd='';
249: {
250: my $dfh;
251: if ($dfh=Apache::File->new("$dfilename")) {
252: $wcmd=<$dfh>;
253: }
254: }
255: chomp($wcmd);
256: if ($wcmd eq $cmd) {
257: &logthis("<font color=blue>WARNING: ".
258: "Connection buffer $dfilename: $cmd</font>");
259: &logperm("D:$server:$cmd");
260: return 'con_delayed';
261: } else {
262: &logthis("<font color=red>CRITICAL:"
263: ." Critical connection failed: $server $cmd</font>");
264: &logperm("F:$server:$cmd");
265: return 'con_failed';
266: }
267: }
268: }
269: return $answer;
270: }
271:
272: # ---------------------------------------------------------- Append Environment
273:
274: sub appenv {
275: my %newenv=@_;
276: map {
277: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
278: &logthis("<font color=blue>WARNING: ".
279: "Attempt to modify environment ".$_." to ".$newenv{$_}
280: .'</font>');
281: delete($newenv{$_});
282: } else {
283: $ENV{$_}=$newenv{$_};
284: }
285: } keys %newenv;
286:
287: my $lockfh;
288: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
289: return 'error: '.$!;
290: }
291: unless (flock($lockfh,LOCK_EX)) {
292: &logthis("<font color=blue>WARNING: ".
293: 'Could not obtain exclusive lock in appenv: '.$!);
294: $lockfh->close();
295: return 'error: '.$!;
296: }
297:
298: my @oldenv;
299: {
300: my $fh;
301: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
302: return 'error: '.$!;
303: }
304: @oldenv=<$fh>;
305: $fh->close();
306: }
307: for (my $i=0; $i<=$#oldenv; $i++) {
308: chomp($oldenv[$i]);
309: if ($oldenv[$i] ne '') {
310: my ($name,$value)=split(/=/,$oldenv[$i]);
311: unless (defined($newenv{$name})) {
312: $newenv{$name}=$value;
313: }
314: }
315: }
316: {
317: my $fh;
318: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
319: return 'error';
320: }
321: my $newname;
322: foreach $newname (keys %newenv) {
323: print $fh "$newname=$newenv{$newname}\n";
324: }
325: $fh->close();
326: }
327:
328: $lockfh->close();
329: return 'ok';
330: }
331: # ----------------------------------------------------- Delete from Environment
332:
333: sub delenv {
334: my $delthis=shift;
335: my %newenv=();
336: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
337: &logthis("<font color=blue>WARNING: ".
338: "Attempt to delete from environment ".$delthis);
339: return 'error';
340: }
341: my @oldenv;
342: {
343: my $fh;
344: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
345: return 'error';
346: }
347: unless (flock($fh,LOCK_SH)) {
348: &logthis("<font color=blue>WARNING: ".
349: 'Could not obtain shared lock in delenv: '.$!);
350: $fh->close();
351: return 'error: '.$!;
352: }
353: @oldenv=<$fh>;
354: $fh->close();
355: }
356: {
357: my $fh;
358: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
359: return 'error';
360: }
361: unless (flock($fh,LOCK_EX)) {
362: &logthis("<font color=blue>WARNING: ".
363: 'Could not obtain exclusive lock in delenv: '.$!);
364: $fh->close();
365: return 'error: '.$!;
366: }
367: map {
368: unless ($_=~/^$delthis/) { print $fh $_; }
369: } @oldenv;
370: $fh->close();
371: }
372: return 'ok';
373: }
374:
375: # ------------------------------ Find server with least workload from spare.tab
376:
377: sub spareserver {
378: my $tryserver;
379: my $spareserver='';
380: my $lowestserver=100;
381: foreach $tryserver (keys %spareid) {
382: my $answer=reply('load',$tryserver);
383: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
384: $spareserver="http://$hostname{$tryserver}";
385: $lowestserver=$answer;
386: }
387: }
388: return $spareserver;
389: }
390:
391: # --------- Try to authenticate user from domain's lib servers (first this one)
392:
393: sub authenticate {
394: my ($uname,$upass,$udom)=@_;
395: $upass=escape($upass);
396: if (($perlvar{'lonRole'} eq 'library') &&
397: ($udom eq $perlvar{'lonDefDomain'})) {
398: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
399: if ($answer =~ /authorized/) {
400: if ($answer eq 'authorized') {
401: &logthis("User $uname at $udom authorized by local server");
402: return $perlvar{'lonHostID'};
403: }
404: if ($answer eq 'non_authorized') {
405: &logthis("User $uname at $udom rejected by local server");
406: return 'no_host';
407: }
408: }
409: }
410:
411: my $tryserver;
412: foreach $tryserver (keys %libserv) {
413: if ($hostdom{$tryserver} eq $udom) {
414: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
415: if ($answer =~ /authorized/) {
416: if ($answer eq 'authorized') {
417: &logthis("User $uname at $udom authorized by $tryserver");
418: return $tryserver;
419: }
420: if ($answer eq 'non_authorized') {
421: &logthis("User $uname at $udom rejected by $tryserver");
422: return 'no_host';
423: }
424: }
425: }
426: }
427: &logthis("User $uname at $udom could not be authenticated");
428: return 'no_host';
429: }
430:
431: # ---------------------- Find the homebase for a user from domain's lib servers
432:
433: sub homeserver {
434: my ($uname,$udom)=@_;
435:
436: my $index="$uname:$udom";
437: if ($homecache{$index}) { return "$homecache{$index}"; }
438:
439: my $tryserver;
440: foreach $tryserver (keys %libserv) {
441: if ($hostdom{$tryserver} eq $udom) {
442: my $answer=reply("home:$udom:$uname",$tryserver);
443: if ($answer eq 'found') {
444: $homecache{$index}=$tryserver;
445: return $tryserver;
446: }
447: }
448: }
449: return 'no_host';
450: }
451:
452: # ------------------------------------- Find the usernames behind a list of IDs
453:
454: sub idget {
455: my ($udom,@ids)=@_;
456: my %returnhash=();
457:
458: my $tryserver;
459: foreach $tryserver (keys %libserv) {
460: if ($hostdom{$tryserver} eq $udom) {
461: my $idlist=join('&',@ids);
462: $idlist=~tr/A-Z/a-z/;
463: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
464: my @answer=();
465: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
466: @answer=split(/\&/,$reply);
467: } ;
468: my $i;
469: for ($i=0;$i<=$#ids;$i++) {
470: if ($answer[$i]) {
471: $returnhash{$ids[$i]}=$answer[$i];
472: }
473: }
474: }
475: }
476: return %returnhash;
477: }
478:
479: # ------------------------------------- Find the IDs behind a list of usernames
480:
481: sub idrget {
482: my ($udom,@unames)=@_;
483: my %returnhash=();
484: map {
485: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
486: } @unames;
487: return %returnhash;
488: }
489:
490: # ------------------------------- Store away a list of names and associated IDs
491:
492: sub idput {
493: my ($udom,%ids)=@_;
494: my %servers=();
495: map {
496: my $uhom=&homeserver($_,$udom);
497: if ($uhom ne 'no_host') {
498: my $id=&escape($ids{$_});
499: $id=~tr/A-Z/a-z/;
500: my $unam=&escape($_);
501: if ($servers{$uhom}) {
502: $servers{$uhom}.='&'.$id.'='.$unam;
503: } else {
504: $servers{$uhom}=$id.'='.$unam;
505: }
506: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
507: }
508: } keys %ids;
509: map {
510: &critical('idput:'.$udom.':'.$servers{$_},$_);
511: } keys %servers;
512: }
513:
514: # ------------------------------------- Find the section of student in a course
515:
516: sub usection {
517: my ($udom,$unam,$courseid)=@_;
518: $courseid=~s/\_/\//g;
519: $courseid=~s/^(\w)/\/$1/;
520: map {
521: my ($key,$value)=split(/\=/,$_);
522: $key=&unescape($key);
523: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
524: my $section=$1;
525: if ($key eq $courseid.'_st') { $section=''; }
526: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
527: my $now=time;
528: my $notactive=0;
529: if ($start) {
530: if ($now<$start) { $notactive=1; }
531: }
532: if ($end) {
533: if ($now>$end) { $notactive=1; }
534: }
535: unless ($notactive) { return $section; }
536: }
537: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
538: &homeserver($unam,$udom)));
539: return '-1';
540: }
541:
542: # ------------------------------------- Read an entry from a user's environment
543:
544: sub userenvironment {
545: my ($udom,$unam,@what)=@_;
546: my %returnhash=();
547: my @answer=split(/\&/,
548: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
549: &homeserver($unam,$udom)));
550: my $i;
551: for ($i=0;$i<=$#what;$i++) {
552: $returnhash{$what[$i]}=&unescape($answer[$i]);
553: }
554: return %returnhash;
555: }
556:
557: # ----------------------------- Subscribe to a resource, return URL if possible
558:
559: sub subscribe {
560: my $fname=shift;
561: my $author=$fname;
562: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
563: my ($udom,$uname)=split(/\//,$author);
564: my $home=homeserver($uname,$udom);
565: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
566: return 'not_found';
567: }
568: my $answer=reply("sub:$fname",$home);
569: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
570: $answer.=' by '.$home;
571: }
572: return $answer;
573: }
574:
575: # -------------------------------------------------------------- Replicate file
576:
577: sub repcopy {
578: my $filename=shift;
579: $filename=~s/\/+/\//g;
580: my $transname="$filename.in.transfer";
581: if ((-e $filename) || (-e $transname)) { return OK; }
582: my $remoteurl=subscribe($filename);
583: if ($remoteurl =~ /^con_lost by/) {
584: &logthis("Subscribe returned $remoteurl: $filename");
585: return HTTP_SERVICE_UNAVAILABLE;
586: } elsif ($remoteurl eq 'not_found') {
587: &logthis("Subscribe returned not_found: $filename");
588: return HTTP_NOT_FOUND;
589: } elsif ($remoteurl =~ /^rejected by/) {
590: &logthis("Subscribe returned $remoteurl: $filename");
591: return FORBIDDEN;
592: } elsif ($remoteurl eq 'directory') {
593: return OK;
594: } else {
595: my @parts=split(/\//,$filename);
596: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
597: if ($path ne "$perlvar{'lonDocRoot'}/res") {
598: &logthis("Malconfiguration for replication: $filename");
599: return HTTP_BAD_REQUEST;
600: }
601: my $count;
602: for ($count=5;$count<$#parts;$count++) {
603: $path.="/$parts[$count]";
604: if ((-e $path)!=1) {
605: mkdir($path,0777);
606: }
607: }
608: my $ua=new LWP::UserAgent;
609: my $request=new HTTP::Request('GET',"$remoteurl");
610: my $response=$ua->request($request,$transname);
611: if ($response->is_error()) {
612: unlink($transname);
613: my $message=$response->status_line;
614: &logthis("<font color=blue>WARNING:"
615: ." LWP get: $message: $filename</font>");
616: return HTTP_SERVICE_UNAVAILABLE;
617: } else {
618: if ($remoteurl!~/\.meta$/) {
619: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
620: my $mresponse=$ua->request($mrequest,$filename.'.meta');
621: if ($mresponse->is_error()) {
622: unlink($filename.'.meta');
623: &logthis(
624: "<font color=yellow>INFO: No metadata: $filename</font>");
625: }
626: }
627: rename($transname,$filename);
628: return OK;
629: }
630: }
631: }
632:
633: # --------------------------------------------------------- Server Side Include
634:
635: sub ssi {
636:
637: my ($fn,%form)=@_;
638:
639: my $ua=new LWP::UserAgent;
640:
641: my $request;
642:
643: if (%form) {
644: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
645: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
646: } else {
647: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
648: }
649:
650: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
651: my $response=$ua->request($request);
652:
653: return $response->content;
654: }
655:
656: # ------------------------------------------------------------------------- Log
657:
658: sub log {
659: my ($dom,$nam,$hom,$what)=@_;
660: return critical("log:$dom:$nam:$what",$hom);
661: }
662:
663: # ----------------------------------------------------------- Check out an item
664:
665: sub checkout {
666: my ($symb,$tuname,$tudom,$tcrsid)=@_;
667: my $now=time;
668: my $lonhost=$perlvar{'lonHostID'};
669: my $infostr=&escape(
670: $tuname.'&'.
671: $tudom.'&'.
672: $tcrsid.'&'.
673: $symb.'&'.
674: $now.'&'.$ENV{'REMOTE_ADDR'});
675: my $token=&reply('tmpput:'.$infostr,$lonhost);
676: if ($token=~/^error\:/) {
677: &logthis("<font color=blue>WARNING: ".
678: "Checkout tmpput failed ".$tudom.' - '.$tuname.' - '.$symb.
679: "</font>");
680: return '';
681: }
682:
683: $token=~s/^(\d+)\_.*\_(\d+)$/$1\*$2\*$lonhost/;
684: $token=~tr/a-z/A-Z/;
685:
686: my %infohash=('resource.0.outtoken' => $token,
687: 'resource.0.checkouttime' => $now,
688: 'resource.0.outremote' => $ENV{'REMOTE_ADDR'});
689:
690: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
691: return '';
692: } else {
693: &logthis("<font color=blue>WARNING: ".
694: "Checkout cstore failed ".$tudom.' - '.$tuname.' - '.$symb.
695: "</font>");
696: }
697:
698: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
699: &escape('Checkout '.$infostr.' - '.
700: $token)) ne 'ok') {
701: return '';
702: } else {
703: &logthis("<font color=blue>WARNING: ".
704: "Checkout log failed ".$tudom.' - '.$tuname.' - '.$symb.
705: "</font>");
706: }
707: return $token;
708: }
709:
710: # ------------------------------------------------------------ Check in an item
711:
712: sub checkin {
713: my $token=shift;
714: my $now=time;
715: my ($ta,$tb,$lonhost)=split(/\*/,$token);
716: $lonhost=~tr/A-Z/a-z/;
717: my $dtoken=$ta.'_'.$hostip{$lonhost}.'_'.$tb;
718: $dtoken=~s/\W/\_/g;
719: my ($tuname,$tudom,$tcrsid,$symb,$chtim,$rmaddr)=
720: split(/\&/,&unescape(&reply('tmpget:'.$dtoken,$lonhost)));
721:
722: unless (($tuname) && ($tudom)) {
723: &logthis('Check in '.$token.' ('.$dtoken.') failed');
724: return '';
725: }
726:
727: unless (&allowed('mgr',$tcrsid)) {
728: &logthis('Check in '.$token.' ('.$dtoken.') unauthorized: '.
729: $ENV{'user.name'}.' - '.$ENV{'user.domain'});
730: return '';
731: }
732:
733: my %infohash=('resource.0.intoken' => $token,
734: 'resource.0.checkintime' => $now,
735: 'resource.0.inremote' => $ENV{'REMOTE_ADDR'});
736:
737: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
738: return '';
739: }
740:
741: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
742: &escape('Checkin - '.$token)) ne 'ok') {
743: return '';
744: }
745:
746: return ($symb,$tuname,$tudom,$tcrsid);
747: }
748:
749: # --------------------------------------------- Set Expire Date for Spreadsheet
750:
751: sub expirespread {
752: my ($uname,$udom,$stype,$usymb)=@_;
753: my $cid=$ENV{'request.course.id'};
754: if ($cid) {
755: my $now=time;
756: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
757: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
758: $ENV{'course.'.$cid.'.num'}.
759: ':nohist_expirationdates:'.
760: &escape($key).'='.$now,
761: $ENV{'course.'.$cid.'.home'})
762: }
763: return 'ok';
764: }
765:
766: # ----------------------------------------------------- Devalidate Spreadsheets
767:
768: sub devalidate {
769: my $symb=shift;
770: my $cid=$ENV{'request.course.id'};
771: if ($cid) {
772: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
773: my $status=
774: &del('nohist_calculatedsheet',
775: [$key.'studentcalc'],
776: $ENV{'course.'.$cid.'.domain'},
777: $ENV{'course.'.$cid.'.num'})
778: .' '.
779: &del('nohist_calculatedsheets_'.$cid,
780: [$key.'assesscalc:'.$symb]);
781: unless ($status eq 'ok ok') {
782: &logthis('Could not devalidate spreadsheet '.
783: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
784: $symb.': '.$status);
785: }
786: }
787: }
788:
789: # ----------------------------------------------------------------------- Store
790:
791: sub store {
792: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
793: my $home='';
794:
795: if ($stuname) {
796: $home=&homeserver($stuname,$domain);
797: }
798:
799: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
800:
801: &devalidate($symb);
802:
803: $symb=escape($symb);
804: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
805: if (!$domain) { $domain=$ENV{'user.domain'}; }
806: if (!$stuname) { $stuname=$ENV{'user.name'}; }
807: if (!$home) { $home=$ENV{'user.home'}; }
808: my $namevalue='';
809: map {
810: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
811: } keys %$storehash;
812: $namevalue=~s/\&$//;
813: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
814: }
815:
816: # -------------------------------------------------------------- Critical Store
817:
818: sub cstore {
819: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
820: my $home='';
821:
822: if ($stuname) {
823: $home=&homeserver($stuname,$domain);
824: }
825:
826: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
827:
828: &devalidate($symb);
829:
830: $symb=escape($symb);
831: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
832: if (!$domain) { $domain=$ENV{'user.domain'}; }
833: if (!$stuname) { $stuname=$ENV{'user.name'}; }
834: if (!$home) { $home=$ENV{'user.home'}; }
835:
836: my $namevalue='';
837: map {
838: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
839: } keys %$storehash;
840: $namevalue=~s/\&$//;
841: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
842: }
843:
844: # --------------------------------------------------------------------- Restore
845:
846: sub restore {
847: my ($symb,$namespace,$domain,$stuname) = @_;
848: my $home='';
849:
850: if ($stuname) {
851: $home=&homeserver($stuname,$domain);
852: }
853:
854: if (!$symb) {
855: unless ($symb=escape(&symbread())) { return ''; }
856: } else {
857: $symb=&escape($symb);
858: }
859: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
860: if (!$domain) { $domain=$ENV{'user.domain'}; }
861: if (!$stuname) { $stuname=$ENV{'user.name'}; }
862: if (!$home) { $home=$ENV{'user.home'}; }
863: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
864:
865: my %returnhash=();
866: map {
867: my ($name,$value)=split(/\=/,$_);
868: $returnhash{&unescape($name)}=&unescape($value);
869: } split(/\&/,$answer);
870: my $version;
871: for ($version=1;$version<=$returnhash{'version'};$version++) {
872: map {
873: $returnhash{$_}=$returnhash{$version.':'.$_};
874: } split(/\:/,$returnhash{$version.':keys'});
875: }
876: return %returnhash;
877: }
878:
879: # ---------------------------------------------------------- Course Description
880:
881: sub coursedescription {
882: my $courseid=shift;
883: $courseid=~s/^\///;
884: $courseid=~s/\_/\//g;
885: my ($cdomain,$cnum)=split(/\//,$courseid);
886: my $chome=&homeserver($cnum,$cdomain);
887: if ($chome ne 'no_host') {
888: my %returnhash=&dump('environment',$cdomain,$cnum);
889: if (!exists($returnhash{'con_lost'})) {
890: my $normalid=$cdomain.'_'.$cnum;
891: my %envhash=();
892: $returnhash{'home'}= $chome;
893: $returnhash{'domain'} = $cdomain;
894: $returnhash{'num'} = $cnum;
895: while (my ($name,$value) = each %returnhash) {
896: $envhash{'course.'.$normalid.'.'.$name}=$value;
897: }
898: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
899: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
900: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
901: $envhash{'course.'.$normalid.'.last_cache'}=time;
902: $envhash{'course.'.$normalid.'.home'}=$chome;
903: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
904: $envhash{'course.'.$normalid.'.num'}=$cnum;
905: &appenv(%envhash);
906: return %returnhash;
907: }
908: }
909: return ();
910: }
911:
912: # -------------------------------------------------------- Get user privileges
913:
914: sub rolesinit {
915: my ($domain,$username,$authhost)=@_;
916: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
917: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
918: my %allroles=();
919: my %thesepriv=();
920: my $now=time;
921: my $userroles="user.login.time=$now\n";
922: my $thesestr;
923:
924: if ($rolesdump ne '') {
925: map {
926: if ($_!~/^rolesdef\&/) {
927: my ($area,$role)=split(/=/,$_);
928: $area=~s/\_\w\w$//;
929: my ($trole,$tend,$tstart)=split(/_/,$role);
930: $userroles.='user.role.'.$trole.'.'.$area.'='.
931: $tstart.'.'.$tend."\n";
932: if ($tend!=0) {
933: if ($tend<$now) {
934: $trole='';
935: }
936: }
937: if ($tstart!=0) {
938: if ($tstart>$now) {
939: $trole='';
940: }
941: }
942: if (($area ne '') && ($trole ne '')) {
943: my $spec=$trole.'.'.$area;
944: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
945: if ($trole =~ /^cr\//) {
946: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
947: my $homsvr=homeserver($rauthor,$rdomain);
948: if ($hostname{$homsvr} ne '') {
949: my $roledef=
950: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
951: $homsvr);
952: if (($roledef ne 'con_lost') && ($roledef ne '')) {
953: my ($syspriv,$dompriv,$coursepriv)=
954: split(/\_/,unescape($roledef));
955: $allroles{'cm./'}.=':'.$syspriv;
956: $allroles{$spec.'./'}.=':'.$syspriv;
957: if ($tdomain ne '') {
958: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
959: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
960: if ($trest ne '') {
961: $allroles{'cm.'.$area}.=':'.$coursepriv;
962: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
963: }
964: }
965: }
966: }
967: } else {
968: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
969: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
970: if ($tdomain ne '') {
971: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
972: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
973: if ($trest ne '') {
974: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
975: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
976: }
977: }
978: }
979: }
980: }
981: } split(/&/,$rolesdump);
982: my $adv=0;
983: my $author=0;
984: map {
985: %thesepriv=();
986: if (($_!~/^st/) && ($_!~/^ta/) && ($_!~/^cm/)) { $adv=1; }
987: if (($_=~/^au/) || ($_=~/^ca/)) { $author=1; }
988: map {
989: if ($_ ne '') {
990: my ($privilege,$restrictions)=split(/&/,$_);
991: if ($restrictions eq '') {
992: $thesepriv{$privilege}='F';
993: } else {
994: if ($thesepriv{$privilege} ne 'F') {
995: $thesepriv{$privilege}.=$restrictions;
996: }
997: }
998: }
999: } split(/:/,$allroles{$_});
1000: $thesestr='';
1001: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
1002: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
1003: } keys %allroles;
1004: $userroles.='user.adv='.$adv."\n".
1005: 'user.author='.$author."\n";
1006: $ENV{'user.adv'}=$adv;
1007: }
1008: return $userroles;
1009: }
1010:
1011: # --------------------------------------------------------------- get interface
1012:
1013: sub get {
1014: my ($namespace,$storearr,$udomain,$uname)=@_;
1015: my $items='';
1016: map {
1017: $items.=escape($_).'&';
1018: } @$storearr;
1019: $items=~s/\&$//;
1020: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1021: if (!$uname) { $uname=$ENV{'user.name'}; }
1022: my $uhome=&homeserver($uname,$udomain);
1023:
1024: my $rep=&reply("get:$udomain:$uname:$namespace:$items",$uhome);
1025: my @pairs=split(/\&/,$rep);
1026: my %returnhash=();
1027: my $i=0;
1028: map {
1029: $returnhash{$_}=unescape($pairs[$i]);
1030: $i++;
1031: } @$storearr;
1032: return %returnhash;
1033: }
1034:
1035: # --------------------------------------------------------------- del interface
1036:
1037: sub del {
1038: my ($namespace,$storearr,$udomain,$uname)=@_;
1039: my $items='';
1040: map {
1041: $items.=escape($_).'&';
1042: } @$storearr;
1043: $items=~s/\&$//;
1044: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1045: if (!$uname) { $uname=$ENV{'user.name'}; }
1046: my $uhome=&homeserver($uname,$udomain);
1047:
1048: return &reply("del:$udomain:$uname:$namespace:$items",$uhome);
1049: }
1050:
1051: # -------------------------------------------------------------- dump interface
1052:
1053: sub dump {
1054: my ($namespace,$udomain,$uname)=@_;
1055: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1056: if (!$uname) { $uname=$ENV{'user.name'}; }
1057: my $uhome=&homeserver($uname,$udomain);
1058: my $rep=reply("dump:$udomain:$uname:$namespace",$uhome);
1059: my @pairs=split(/\&/,$rep);
1060: my %returnhash=();
1061: map {
1062: my ($key,$value)=split(/=/,$_);
1063: $returnhash{unescape($key)}=unescape($value);
1064: } @pairs;
1065: return %returnhash;
1066: }
1067:
1068: # --------------------------------------------------------------- put interface
1069:
1070: sub put {
1071: my ($namespace,$storehash,$udomain,$uname)=@_;
1072: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1073: if (!$uname) { $uname=$ENV{'user.name'}; }
1074: my $uhome=&homeserver($uname,$udomain);
1075: my $items='';
1076: map {
1077: $items.=&escape($_).'='.&escape($$storehash{$_}).'&';
1078: } keys %$storehash;
1079: $items=~s/\&$//;
1080: return &reply("put:$udomain:$uname:$namespace:$items",$uhome);
1081: }
1082:
1083: # ------------------------------------------------------ critical put interface
1084:
1085: sub cput {
1086: my ($namespace,$storehash,$udomain,$uname)=@_;
1087: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1088: if (!$uname) { $uname=$ENV{'user.name'}; }
1089: my $uhome=&homeserver($uname,$udomain);
1090: my $items='';
1091: map {
1092: $items.=escape($_).'='.escape($$storehash{$_}).'&';
1093: } keys %$storehash;
1094: $items=~s/\&$//;
1095: return &critical("put:$udomain:$uname:$namespace:$items",$uhome);
1096: }
1097:
1098: # -------------------------------------------------------------- eget interface
1099:
1100: sub eget {
1101: my ($namespace,$storearr,$udomain,$uname)=@_;
1102: my $items='';
1103: map {
1104: $items.=escape($_).'&';
1105: } @$storearr;
1106: $items=~s/\&$//;
1107: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1108: if (!$uname) { $uname=$ENV{'user.name'}; }
1109: my $uhome=&homeserver($uname,$udomain);
1110: my $rep=&reply("eget:$udomain:$uname:$namespace:$items",$uhome);
1111: my @pairs=split(/\&/,$rep);
1112: my %returnhash=();
1113: my $i=0;
1114: map {
1115: $returnhash{$_}=unescape($pairs[$i]);
1116: $i++;
1117: } @$storearr;
1118: return %returnhash;
1119: }
1120:
1121: # ------------------------------------------------- Check for a user privilege
1122:
1123: sub allowed {
1124: my ($priv,$uri)=@_;
1125:
1126: my $orguri=$uri;
1127: $uri=&declutter($uri);
1128:
1129: # Free bre access to adm and meta resources
1130:
1131: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1132: return 'F';
1133: }
1134:
1135: my $thisallowed='';
1136: my $statecond=0;
1137: my $courseprivid='';
1138:
1139: # Course
1140:
1141: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1142: $thisallowed.=$1;
1143: }
1144:
1145: # Domain
1146:
1147: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1148: =~/$priv\&([^\:]*)/) {
1149: $thisallowed.=$1;
1150: }
1151:
1152: # Course: uri itself is a course
1153: my $courseuri=$uri;
1154: $courseuri=~s/\_(\d)/\/$1/;
1155: $courseuri=~s/^([^\/])/\/$1/;
1156:
1157: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1158: =~/$priv\&([^\:]*)/) {
1159: $thisallowed.=$1;
1160: }
1161:
1162: # Full access at system, domain or course-wide level? Exit.
1163:
1164: if ($thisallowed=~/F/) {
1165: return 'F';
1166: }
1167:
1168: # If this is generating or modifying users, exit with special codes
1169:
1170: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
1171: return $thisallowed;
1172: }
1173: #
1174: # Gathered so far: system, domain and course wide privileges
1175: #
1176: # Course: See if uri or referer is an individual resource that is part of
1177: # the course
1178:
1179: if ($ENV{'request.course.id'}) {
1180: $courseprivid=$ENV{'request.course.id'};
1181: if ($ENV{'request.course.sec'}) {
1182: $courseprivid.='/'.$ENV{'request.course.sec'};
1183: }
1184: $courseprivid=~s/\_/\//;
1185: my $checkreferer=1;
1186: my @uriparts=split(/\//,$uri);
1187: my $filename=$uriparts[$#uriparts];
1188: my $pathname=$uri;
1189: $pathname=~s/\/$filename$//;
1190: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1191: /\&$filename\:([\d\|]+)\&/) {
1192: $statecond=$1;
1193: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1194: =~/$priv\&([^\:]*)/) {
1195: $thisallowed.=$1;
1196: $checkreferer=0;
1197: }
1198: }
1199:
1200: if ($checkreferer) {
1201: my $refuri=$ENV{'httpref.'.$orguri};
1202:
1203: unless ($refuri) {
1204: map {
1205: if ($_=~/^httpref\..*\*/) {
1206: my $pattern=$_;
1207: $pattern=~s/\*/\[\^\/\]\+/g;
1208: $pattern=~s/\//\\\//g;
1209: if ($orguri=~/$pattern/) {
1210: $refuri=$ENV{$_};
1211: }
1212: }
1213: } keys %ENV;
1214: }
1215: if ($refuri) {
1216: $refuri=&declutter($refuri);
1217: my @uriparts=split(/\//,$refuri);
1218: my $filename=$uriparts[$#uriparts];
1219: my $pathname=$refuri;
1220: $pathname=~s/\/$filename$//;
1221: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1222: /\&$filename\:([\d\|]+)\&/) {
1223: my $refstatecond=$1;
1224: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1225: =~/$priv\&([^\:]*)/) {
1226: $thisallowed.=$1;
1227: $uri=$refuri;
1228: $statecond=$refstatecond;
1229: }
1230: }
1231: }
1232: }
1233: }
1234:
1235: #
1236: # Gathered now: all privileges that could apply, and condition number
1237: #
1238: #
1239: # Full or no access?
1240: #
1241:
1242: if ($thisallowed=~/F/) {
1243: return 'F';
1244: }
1245:
1246: unless ($thisallowed) {
1247: return '';
1248: }
1249:
1250: # Restrictions exist, deal with them
1251: #
1252: # C:according to course preferences
1253: # R:according to resource settings
1254: # L:unless locked
1255: # X:according to user session state
1256: #
1257:
1258: # Possibly locked functionality, check all courses
1259: # Locks might take effect only after 10 minutes cache expiration for other
1260: # courses, and 2 minutes for current course
1261:
1262: my $envkey;
1263: if ($thisallowed=~/L/) {
1264: foreach $envkey (keys %ENV) {
1265: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1266: my $courseid=$2;
1267: my $roleid=$1.'.'.$2;
1268: $courseid=~s/^\///;
1269: my $expiretime=600;
1270: if ($ENV{'request.role'} eq $roleid) {
1271: $expiretime=120;
1272: }
1273: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1274: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1275: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1276: &coursedescription($courseid);
1277: }
1278: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1279: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1280: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1281: &log($ENV{'user.domain'},$ENV{'user.name'},
1282: $ENV{'user.host'},
1283: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1284: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1285: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1286: return '';
1287: }
1288: }
1289: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1290: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1291: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1292: &log($ENV{'user.domain'},$ENV{'user.name'},
1293: $ENV{'user.host'},
1294: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1295: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1296: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1297: return '';
1298: }
1299: }
1300: }
1301: }
1302: }
1303:
1304: #
1305: # Rest of the restrictions depend on selected course
1306: #
1307:
1308: unless ($ENV{'request.course.id'}) {
1309: return '1';
1310: }
1311:
1312: #
1313: # Now user is definitely in a course
1314: #
1315:
1316:
1317: # Course preferences
1318:
1319: if ($thisallowed=~/C/) {
1320: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1321: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1322: =~/\,$rolecode\,/) {
1323: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1324: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1325: $ENV{'request.course.id'});
1326: return '';
1327: }
1328: }
1329:
1330: # Resource preferences
1331:
1332: if ($thisallowed=~/R/) {
1333: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1334: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1335: if (-e $filename) {
1336: my @content;
1337: {
1338: my $fh=Apache::File->new($filename);
1339: @content=<$fh>;
1340: }
1341: if (join('',@content)=~
1342: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1343: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1344: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1345: return '';
1346:
1347: }
1348: }
1349: }
1350:
1351: # Restricted by state?
1352:
1353: if ($thisallowed=~/X/) {
1354: if (&condval($statecond)) {
1355: return '2';
1356: } else {
1357: return '';
1358: }
1359: }
1360:
1361: return 'F';
1362: }
1363:
1364: # ----------------------------------------------------------------- Define Role
1365:
1366: sub definerole {
1367: if (allowed('mcr','/')) {
1368: my ($rolename,$sysrole,$domrole,$courole)=@_;
1369: map {
1370: my ($crole,$cqual)=split(/\&/,$_);
1371: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1372: if ($pr{'cr:s'}=~/$crole\&/) {
1373: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1374: return "refused:s:$crole&$cqual";
1375: }
1376: }
1377: } split('/',$sysrole);
1378: map {
1379: my ($crole,$cqual)=split(/\&/,$_);
1380: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1381: if ($pr{'cr:d'}=~/$crole\&/) {
1382: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1383: return "refused:d:$crole&$cqual";
1384: }
1385: }
1386: } split('/',$domrole);
1387: map {
1388: my ($crole,$cqual)=split(/\&/,$_);
1389: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1390: if ($pr{'cr:c'}=~/$crole\&/) {
1391: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1392: return "refused:c:$crole&$cqual";
1393: }
1394: }
1395: } split('/',$courole);
1396: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1397: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1398: "rolesdef_$rolename=".
1399: escape($sysrole.'_'.$domrole.'_'.$courole);
1400: return reply($command,$ENV{'user.home'});
1401: } else {
1402: return 'refused';
1403: }
1404: }
1405:
1406: # ---------------- Make a metadata query against the network of library servers
1407:
1408: sub metadata_query {
1409: my ($query,$custom,$customshow)=@_;
1410: # need to put in a library server loop here and return a hash
1411: my %rhash;
1412: for my $server (keys %libserv) {
1413: unless ($custom or $customshow) {
1414: my $reply=&reply("querysend:".&escape($query),$server);
1415: $rhash{$server}=$reply;
1416: }
1417: else {
1418: my $reply=&reply("querysend:".&escape($query).':'.
1419: &escape($custom).':'.&escape($customshow),
1420: $server);
1421: $rhash{$server}=$reply;
1422: }
1423: }
1424: return \%rhash;
1425: }
1426:
1427: # ------------------------------------------------------------------ Plain Text
1428:
1429: sub plaintext {
1430: my $short=shift;
1431: return $prp{$short};
1432: }
1433:
1434: # ------------------------------------------------------------------ Plain Text
1435:
1436: sub fileembstyle {
1437: my $ending=shift;
1438: return $fe{$ending};
1439: }
1440:
1441: # ------------------------------------------------------------ Description Text
1442:
1443: sub filedescription {
1444: my $ending=shift;
1445: return $fd{$ending};
1446: }
1447:
1448: # ----------------------------------------------------------------- Assign Role
1449:
1450: sub assignrole {
1451: my ($udom,$uname,$url,$role,$end,$start)=@_;
1452: my $mrole;
1453: if ($role =~ /^cr\//) {
1454: unless (&allowed('ccr',$url)) {
1455: &logthis('Refused custom assignrole: '.
1456: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1457: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1458: return 'refused';
1459: }
1460: $mrole='cr';
1461: } else {
1462: my $cwosec=$url;
1463: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1464: unless (&allowed('c'.$role,$cwosec)) {
1465: &logthis('Refused assignrole: '.
1466: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1467: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1468: return 'refused';
1469: }
1470: $mrole=$role;
1471: }
1472: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1473: "$udom:$uname:$url".'_'."$mrole=$role";
1474: if ($end) { $command.='_'.$end; }
1475: if ($start) {
1476: if ($end) {
1477: $command.='_'.$start;
1478: } else {
1479: $command.='_0_'.$start;
1480: }
1481: }
1482: return &reply($command,&homeserver($uname,$udom));
1483: }
1484:
1485: # --------------------------------------------------------------- Modify a user
1486:
1487:
1488: sub modifyuser {
1489: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1490: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1491: $umode.', '.$first.', '.$middle.', '.
1492: $last.', '.$gene.' by '.
1493: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1494: my $uhome=&homeserver($uname,$udom);
1495: # ----------------------------------------------------------------- Create User
1496: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1497: my $unhome='';
1498: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1499: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1500: } else {
1501: my $tryserver;
1502: my $loadm=10000000;
1503: foreach $tryserver (keys %libserv) {
1504: if ($hostdom{$tryserver} eq $udom) {
1505: my $answer=reply('load',$tryserver);
1506: if (($answer=~/\d+/) && ($answer<$loadm)) {
1507: $loadm=$answer;
1508: $unhome=$tryserver;
1509: }
1510: }
1511: }
1512: }
1513: if (($unhome eq '') || ($unhome eq 'no_host')) {
1514: return 'error: find home';
1515: }
1516: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1517: &escape($upass),$unhome);
1518: unless ($reply eq 'ok') {
1519: return 'error: '.$reply;
1520: }
1521: $uhome=&homeserver($uname,$udom);
1522: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1523: return 'error: verify home';
1524: }
1525: }
1526: # ---------------------------------------------------------------------- Add ID
1527: if ($uid) {
1528: $uid=~tr/A-Z/a-z/;
1529: my %uidhash=&idrget($udom,$uname);
1530: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1531: unless ($uid eq $uidhash{$uname}) {
1532: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1533: }
1534: } else {
1535: &idput($udom,($uname => $uid));
1536: }
1537: }
1538: # -------------------------------------------------------------- Add names, etc
1539: my %names=&get('environment',
1540: ['firstname','middlename','lastname','generation'],
1541: $udom,$uname);
1542: if ($first) { $names{'firstname'} = $first; }
1543: if ($middle) { $names{'middlename'} = $middle; }
1544: if ($last) { $names{'lastname'} = $last; }
1545: if ($gene) { $names{'generation'} = $gene; }
1546: my $reply = &put('environment', \%names, $udom,$uname);
1547: if ($reply ne 'ok') { return 'error: '.$reply; }
1548: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1549: $umode.', '.$first.', '.$middle.', '.
1550: $last.', '.$gene.' by '.
1551: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1552: return 'ok';
1553: }
1554:
1555: # -------------------------------------------------------------- Modify student
1556:
1557: sub modifystudent {
1558: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1559: $end,$start)=@_;
1560: my $cid='';
1561: unless ($cid=$ENV{'request.course.id'}) {
1562: return 'not_in_class';
1563: }
1564: # --------------------------------------------------------------- Make the user
1565: my $reply=&modifyuser
1566: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1567: unless ($reply eq 'ok') { return $reply; }
1568: my $uhome=&homeserver($uname,$udom);
1569: if (($uhome eq '') || ($uhome eq 'no_host')) {
1570: return 'error: no such user';
1571: }
1572: # -------------------------------------------------- Add student to course list
1573: my $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1574: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1575: &escape($uname.':'.$udom).'='.
1576: &escape($end.':'.$start),
1577: $ENV{'course.'.$cid.'.home'});
1578: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1579: return 'error: '.$reply;
1580: }
1581: # ---------------------------------------------------- Add student role to user
1582: my $uurl='/'.$cid;
1583: $uurl=~s/\_/\//g;
1584: if ($usec) {
1585: $uurl.='/'.$usec;
1586: }
1587: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1588: }
1589:
1590: # ------------------------------------------------- Write to course preferences
1591:
1592: sub writecoursepref {
1593: my ($courseid,%prefs)=@_;
1594: $courseid=~s/^\///;
1595: $courseid=~s/\_/\//g;
1596: my ($cdomain,$cnum)=split(/\//,$courseid);
1597: my $chome=homeserver($cnum,$cdomain);
1598: if (($chome eq '') || ($chome eq 'no_host')) {
1599: return 'error: no such course';
1600: }
1601: my $cstring='';
1602: map {
1603: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1604: } keys %prefs;
1605: $cstring=~s/\&$//;
1606: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1607: }
1608:
1609: # ---------------------------------------------------------- Make/modify course
1610:
1611: sub createcourse {
1612: my ($udom,$description,$url)=@_;
1613: $url=&declutter($url);
1614: my $cid='';
1615: unless (&allowed('ccc',$ENV{'user.domain'})) {
1616: return 'refused';
1617: }
1618: unless ($udom eq $ENV{'user.domain'}) {
1619: return 'refused';
1620: }
1621: # ------------------------------------------------------------------- Create ID
1622: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1623: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1624: # ----------------------------------------------- Make sure that does not exist
1625: my $uhome=&homeserver($uname,$udom);
1626: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1627: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1628: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1629: $uhome=&homeserver($uname,$udom);
1630: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1631: return 'error: unable to generate unique course-ID';
1632: }
1633: }
1634: # ------------------------------------------------------------- Make the course
1635: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1636: $ENV{'user.home'});
1637: unless ($reply eq 'ok') { return 'error: '.$reply; }
1638: my $uhome=&homeserver($uname,$udom);
1639: if (($uhome eq '') || ($uhome eq 'no_host')) {
1640: return 'error: no such course';
1641: }
1642: &writecoursepref($udom.'_'.$uname,
1643: ('description' => $description,
1644: 'url' => $url));
1645: return '/'.$udom.'/'.$uname;
1646: }
1647:
1648: # ---------------------------------------------------------- Assign Custom Role
1649:
1650: sub assigncustomrole {
1651: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1652: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1653: $end,$start);
1654: }
1655:
1656: # ----------------------------------------------------------------- Revoke Role
1657:
1658: sub revokerole {
1659: my ($udom,$uname,$url,$role)=@_;
1660: my $now=time;
1661: return &assignrole($udom,$uname,$url,$role,$now);
1662: }
1663:
1664: # ---------------------------------------------------------- Revoke Custom Role
1665:
1666: sub revokecustomrole {
1667: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1668: my $now=time;
1669: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1670: }
1671:
1672: # ------------------------------------------------------------ Directory lister
1673:
1674: sub dirlist {
1675: my $uri=shift;
1676: $uri=~s/^\///;
1677: $uri=~s/\/$//;
1678: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1679: if ($udom) {
1680: if ($uname) {
1681: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1682: homeserver($uname,$udom));
1683: return split(/:/,$listing);
1684: } else {
1685: my $tryserver;
1686: my %allusers=();
1687: foreach $tryserver (keys %libserv) {
1688: if ($hostdom{$tryserver} eq $udom) {
1689: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1690: $tryserver);
1691: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1692: && ($listing ne 'con_lost')) {
1693: map {
1694: my ($entry,@stat)=split(/&/,$_);
1695: $allusers{$entry}=1;
1696: } split(/:/,$listing);
1697: }
1698: }
1699: }
1700: my $alluserstr='';
1701: map {
1702: $alluserstr.=$_.'&user:';
1703: } sort keys %allusers;
1704: $alluserstr=~s/:$//;
1705: return split(/:/,$alluserstr);
1706: }
1707: } else {
1708: my $tryserver;
1709: my %alldom=();
1710: foreach $tryserver (keys %libserv) {
1711: $alldom{$hostdom{$tryserver}}=1;
1712: }
1713: my $alldomstr='';
1714: map {
1715: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1716: } sort keys %alldom;
1717: $alldomstr=~s/:$//;
1718: return split(/:/,$alldomstr);
1719: }
1720: }
1721:
1722: # -------------------------------------------------------- Value of a Condition
1723:
1724: sub directcondval {
1725: my $number=shift;
1726: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1727: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1728: } else {
1729: return 2;
1730: }
1731: }
1732:
1733: sub condval {
1734: my $condidx=shift;
1735: my $result=0;
1736: my $allpathcond='';
1737: map {
1738: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1739: $allpathcond.=
1740: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1741: }
1742: } split(/\|/,$condidx);
1743: $allpathcond=~s/\|$//;
1744: if ($ENV{'request.course.id'}) {
1745: if ($allpathcond) {
1746: my $operand='|';
1747: my @stack;
1748: map {
1749: if ($_ eq '(') {
1750: push @stack,($operand,$result)
1751: } elsif ($_ eq ')') {
1752: my $before=pop @stack;
1753: if (pop @stack eq '&') {
1754: $result=$result>$before?$before:$result;
1755: } else {
1756: $result=$result>$before?$result:$before;
1757: }
1758: } elsif (($_ eq '&') || ($_ eq '|')) {
1759: $operand=$_;
1760: } else {
1761: my $new=directcondval($_);
1762: if ($operand eq '&') {
1763: $result=$result>$new?$new:$result;
1764: } else {
1765: $result=$result>$new?$result:$new;
1766: }
1767: }
1768: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1769: }
1770: }
1771: return $result;
1772: }
1773:
1774: # --------------------------------------------------------- Value of a Variable
1775:
1776: sub EXT {
1777: my ($varname,$symbparm)=@_;
1778: unless ($varname) { return ''; }
1779: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1780: my $rest;
1781: if ($therest[0]) {
1782: $rest=join('.',@therest);
1783: } else {
1784: $rest='';
1785: }
1786: my $qualifierrest=$qualifier;
1787: if ($rest) { $qualifierrest.='.'.$rest; }
1788: my $spacequalifierrest=$space;
1789: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1790: if ($realm eq 'user') {
1791: # --------------------------------------------------------------- user.resource
1792: if ($space eq 'resource') {
1793: my %restored=&restore();
1794: return $restored{$qualifierrest};
1795: # ----------------------------------------------------------------- user.access
1796: } elsif ($space eq 'access') {
1797: return &allowed($qualifier,$rest);
1798: # ------------------------------------------ user.preferences, user.environment
1799: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1800: return $ENV{join('.',('environment',$qualifierrest))};
1801: # ----------------------------------------------------------------- user.course
1802: } elsif ($space eq 'course') {
1803: return $ENV{join('.',('request.course',$qualifier))};
1804: # ------------------------------------------------------------------- user.role
1805: } elsif ($space eq 'role') {
1806: my ($role,$where)=split(/\./,$ENV{'request.role'});
1807: if ($qualifier eq 'value') {
1808: return $role;
1809: } elsif ($qualifier eq 'extent') {
1810: return $where;
1811: }
1812: # ----------------------------------------------------------------- user.domain
1813: } elsif ($space eq 'domain') {
1814: return $ENV{'user.domain'};
1815: # ------------------------------------------------------------------- user.name
1816: } elsif ($space eq 'name') {
1817: return $ENV{'user.name'};
1818: # ---------------------------------------------------- Any other user namespace
1819: } else {
1820: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1821: my %reply=&get($space,[$item]);
1822: return $reply{$item};
1823: }
1824: } elsif ($realm eq 'request') {
1825: # ------------------------------------------------------------- request.browser
1826: if ($space eq 'browser') {
1827: return $ENV{'browser.'.$qualifier};
1828: # ------------------------------------------------------------ request.filename
1829: } else {
1830: return $ENV{'request.'.$spacequalifierrest};
1831: }
1832: } elsif ($realm eq 'course') {
1833: # ---------------------------------------------------------- course.description
1834: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1835: $spacequalifierrest};
1836: } elsif ($realm eq 'resource') {
1837: if ($ENV{'request.course.id'}) {
1838:
1839: # print '<br>'.$space.' - '.$qualifier.' - '.$spacequalifierrest;
1840:
1841:
1842: # ----------------------------------------------------- Cascading lookup scheme
1843: my $symbp;
1844: if ($symbparm) {
1845: $symbp=$symbparm;
1846: } else {
1847: $symbp=&symbread();
1848: }
1849: my $mapp=(split(/\_\_\_/,$symbp))[0];
1850:
1851: my $symbparm=$symbp.'.'.$spacequalifierrest;
1852: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1853:
1854: my $seclevel=
1855: $ENV{'request.course.id'}.'.['.
1856: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1857: my $seclevelr=
1858: $ENV{'request.course.id'}.'.['.
1859: $ENV{'request.course.sec'}.'].'.$symbparm;
1860: my $seclevelm=
1861: $ENV{'request.course.id'}.'.['.
1862: $ENV{'request.course.sec'}.'].'.$mapparm;
1863:
1864: my $courselevel=
1865: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1866: my $courselevelr=
1867: $ENV{'request.course.id'}.'.'.$symbparm;
1868: my $courselevelm=
1869: $ENV{'request.course.id'}.'.'.$mapparm;
1870:
1871: # ----------------------------------------------------------- first, check user
1872: my %resourcedata=get('resourcedata',
1873: [$courselevelr,$courselevelm,$courselevel]);
1874: if (($resourcedata{$courselevelr}!~/^error\:/) &&
1875: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1876:
1877: if ($resourcedata{$courselevelr}) {
1878: return $resourcedata{$courselevelr}; }
1879: if ($resourcedata{$courselevelm}) {
1880: return $resourcedata{$courselevelm}; }
1881: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1882:
1883: } else {
1884: if ($resourcedata{$courselevelr}!~/No such file/) {
1885: &logthis("<font color=blue>WARNING:".
1886: " Trying to get resource data for ".$ENV{'user.name'}." at "
1887: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1888: "</font>");
1889: }
1890: }
1891:
1892: # -------------------------------------------------------- second, check course
1893:
1894: my $reply=&reply('get:'.
1895: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
1896: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1897: ':resourcedata:'.
1898: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
1899: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
1900: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
1901: if ($reply!~/^error\:/) {
1902: map {
1903: if ($_) { return &unescape($_); }
1904: } split(/\&/,$reply);
1905: }
1906: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
1907: &logthis("<font color=blue>WARNING:".
1908: " Getting ".$reply." asking for ".$varname." for ".
1909: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1910: ' at '.
1911: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
1912: ' from '.
1913: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
1914: "</font>");
1915: }
1916: # ------------------------------------------------------ third, check map parms
1917: my %parmhash=();
1918: my $thisparm='';
1919: if (tie(%parmhash,'GDBM_File',
1920: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
1921: $thisparm=$parmhash{$symbparm};
1922: untie(%parmhash);
1923: }
1924: if ($thisparm) { return $thisparm; }
1925: }
1926:
1927: # --------------------------------------------- last, look in resource metadata
1928:
1929: $spacequalifierrest=~s/\./\_/;
1930: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
1931: if ($metadata) { return $metadata; }
1932: $metadata=&metadata($ENV{'request.filename'},
1933: 'parameter_'.$spacequalifierrest);
1934: if ($metadata) { return $metadata; }
1935:
1936: # ------------------------------------------------------------------ Cascade up
1937:
1938: unless ($space eq '0') {
1939: my ($part,$id)=split(/\_/,$space);
1940: if ($id) {
1941: my $partgeneral=&EXT('resource.'.$part.'.'.$qualifierrest,
1942: $symbparm);
1943: if ($partgeneral) { return $partgeneral; }
1944: } else {
1945: my $resourcegeneral=&EXT('resource.0.'.$qualifierrest,
1946: $symbparm);
1947: if ($resourcegeneral) { return $resourcegeneral; }
1948: }
1949: }
1950:
1951: # ---------------------------------------------------- Any other user namespace
1952: } elsif ($realm eq 'environment') {
1953: # ----------------------------------------------------------------- environment
1954: return $ENV{'environment.'.$spacequalifierrest};
1955: } elsif ($realm eq 'system') {
1956: # ----------------------------------------------------------------- system.time
1957: if ($space eq 'time') {
1958: return time;
1959: }
1960: }
1961: return '';
1962: }
1963:
1964: # ---------------------------------------------------------------- Get metadata
1965:
1966: sub metadata {
1967: my ($uri,$what)=@_;
1968:
1969: $uri=&declutter($uri);
1970: my $filename=$uri;
1971: $uri=~s/\.meta$//;
1972: unless ($metacache{$uri.':keys'}) {
1973: my %metathesekeys=();
1974: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
1975: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
1976: my $parser=HTML::TokeParser->new(\$metastring);
1977: my $token;
1978: undef %metathesekeys;
1979: while ($token=$parser->get_token) {
1980: if ($token->[0] eq 'S') {
1981: if (defined($token->[2]->{'package'})) {
1982: my $package=$token->[2]->{'package'};
1983: my $keyroot='';
1984: if (defined($token->[2]->{'part'})) {
1985: $keyroot.='_'.$token->[2]->{'part'};
1986: }
1987: if (defined($token->[2]->{'id'})) {
1988: $keyroot.='_'.$token->[2]->{'id'};
1989: }
1990: if ($metacache{$uri.':packages'}) {
1991: $metacache{$uri.':packages'}.=','.$package.$keyroot;
1992: } else {
1993: $metacache{$uri.':packages'}=$package.$keyroot;
1994: }
1995: map {
1996: if ($_=~/^$package\&/) {
1997: my ($pack,$name,$subp)=split(/\&/,$_);
1998: my $value=$packagetab{$_};
1999: my $part=$keyroot;
2000: $part=~s/^\_//;
2001: if ($subp eq 'display') {
2002: $value.=' [Part: '.$part.']';
2003: }
2004: my $unikey='parameter'.$keyroot.'_'.$name;
2005: $metathesekeys{$unikey}=1;
2006: $metacache{$uri.':'.$unikey.'.part'}=$part;
2007: unless
2008: (defined($metacache{$uri.':'.$unikey.'.'.$subp})) {
2009: $metacache{$uri.':'.$unikey.'.'.$subp}=$value;
2010: }
2011: }
2012: } keys %packagetab;
2013: } else {
2014: my $entry=$token->[1];
2015: my $unikey=$entry;
2016: if (defined($token->[2]->{'part'})) {
2017: $unikey.='_'.$token->[2]->{'part'};
2018: }
2019: if (defined($token->[2]->{'id'})) {
2020: $unikey.='_'.$token->[2]->{'id'};
2021: }
2022: if (defined($token->[2]->{'name'})) {
2023: $unikey.='_'.$token->[2]->{'name'};
2024: }
2025: $metathesekeys{$unikey}=1;
2026: map {
2027: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
2028: } @{$token->[3]};
2029: unless (
2030: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
2031: ) { $metacache{$uri.':'.$unikey}=
2032: $metacache{$uri.':'.$unikey.'.default'};
2033: }
2034: }
2035: }
2036: }
2037: $metacache{$uri.':keys'}=join(',',keys %metathesekeys);
2038: }
2039: return $metacache{$uri.':'.$what};
2040: }
2041:
2042: # ------------------------------------------------- Update symbolic store links
2043:
2044: sub symblist {
2045: my ($mapname,%newhash)=@_;
2046: $mapname=declutter($mapname);
2047: my %hash;
2048: if (($ENV{'request.course.fn'}) && (%newhash)) {
2049: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2050: &GDBM_WRCREAT,0640)) {
2051: map {
2052: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
2053: } keys %newhash;
2054: if (untie(%hash)) {
2055: return 'ok';
2056: }
2057: }
2058: }
2059: return 'error';
2060: }
2061:
2062: # ------------------------------------------------------ Return symb list entry
2063:
2064: sub symbread {
2065: my $thisfn=shift;
2066: unless ($thisfn) {
2067: $thisfn=$ENV{'request.filename'};
2068: }
2069: $thisfn=declutter($thisfn);
2070: my %hash;
2071: my %bighash;
2072: my $syval='';
2073: if (($ENV{'request.course.fn'}) && ($thisfn)) {
2074: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2075: &GDBM_READER,0640)) {
2076: $syval=$hash{$thisfn};
2077: untie(%hash);
2078: }
2079: # ---------------------------------------------------------- There was an entry
2080: if ($syval) {
2081: unless ($syval=~/\_\d+$/) {
2082: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
2083: &appenv('request.ambiguous' => $thisfn);
2084: return '';
2085: }
2086: $syval.=$1;
2087: }
2088: } else {
2089: # ------------------------------------------------------- Was not in symb table
2090: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
2091: &GDBM_READER,0640)) {
2092: # ---------------------------------------------- Get ID(s) for current resource
2093: my $ids=$bighash{'ids_/res/'.$thisfn};
2094: unless ($ids) {
2095: $ids=$bighash{'ids_/'.$thisfn};
2096: }
2097: if ($ids) {
2098: # ------------------------------------------------------------------- Has ID(s)
2099: my @possibilities=split(/\,/,$ids);
2100: if ($#possibilities==0) {
2101: # ----------------------------------------------- There is only one possibility
2102: my ($mapid,$resid)=split(/\./,$ids);
2103: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
2104: } else {
2105: # ------------------------------------------ There is more than one possibility
2106: my $realpossible=0;
2107: map {
2108: my $file=$bighash{'src_'.$_};
2109: if (&allowed('bre',$file)) {
2110: my ($mapid,$resid)=split(/\./,$_);
2111: if ($bighash{'map_type_'.$mapid} ne 'page') {
2112: $realpossible++;
2113: $syval=declutter($bighash{'map_id_'.$mapid}).
2114: '___'.$resid;
2115: }
2116: }
2117: } @possibilities;
2118: if ($realpossible!=1) { $syval=''; }
2119: }
2120: }
2121: untie(%bighash)
2122: }
2123: }
2124: if ($syval) {
2125: return $syval.'___'.$thisfn;
2126: }
2127: }
2128: &appenv('request.ambiguous' => $thisfn);
2129: return '';
2130: }
2131:
2132: # ---------------------------------------------------------- Return random seed
2133:
2134: sub numval {
2135: my $txt=shift;
2136: $txt=~tr/A-J/0-9/;
2137: $txt=~tr/a-j/0-9/;
2138: $txt=~tr/K-T/0-9/;
2139: $txt=~tr/k-t/0-9/;
2140: $txt=~tr/U-Z/0-5/;
2141: $txt=~tr/u-z/0-5/;
2142: $txt=~s/\D//g;
2143: return int($txt);
2144: }
2145:
2146: sub rndseed {
2147: my $symb;
2148: unless ($symb=&symbread()) { return time; }
2149: {
2150: use integer;
2151: my $symbchck=unpack("%32C*",$symb) << 27;
2152: my $symbseed=numval($symb) << 22;
2153: my $namechck=unpack("%32C*",$ENV{'user.name'}) << 17;
2154: my $nameseed=numval($ENV{'user.name'}) << 12;
2155: my $domainseed=unpack("%32C*",$ENV{'user.domain'}) << 7;
2156: my $courseseed=unpack("%32C*",$ENV{'request.course.id'});
2157: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
2158: #uncommenting these lines can break things!
2159: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
2160: #&Apache::lonxml::debug("rndseed :$num:$symb");
2161: return $num;
2162: }
2163: }
2164:
2165: sub ireceipt {
2166: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
2167: my $cuname=unpack("%32C*",$funame);
2168: my $cudom=unpack("%32C*",$fudom);
2169: my $cucourseid=unpack("%32C*",$fucourseid);
2170: my $cusymb=unpack("%32C*",$fusymb);
2171: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
2172: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
2173: ($cunique%$cuname+
2174: $cunique%$cudom+
2175: $cusymb%$cuname+
2176: $cusymb%$cudom+
2177: $cucourseid%$cuname+
2178: $cucourseid%$cudom);
2179: }
2180:
2181: sub receipt {
2182: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2183: $ENV{'request.course.id'},&symbread());
2184: }
2185:
2186: # ------------------------------------------------------------ Serves up a file
2187: # returns either the contents of the file or a -1
2188: sub getfile {
2189: my $file=shift;
2190: &repcopy($file);
2191: if (! -e $file ) { return -1; };
2192: my $fh=Apache::File->new($file);
2193: my $a='';
2194: while (<$fh>) { $a .=$_; }
2195: return $a
2196: }
2197:
2198: sub filelocation {
2199: my ($dir,$file) = @_;
2200: my $location;
2201: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
2202: if ($file=~m:^/~:) { # is a contruction space reference
2203: $location = $file;
2204: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
2205: } else {
2206: $file=~s/^$perlvar{'lonDocRoot'}//;
2207: $file=~s:^/*res::;
2208: if ( !( $file =~ m:^/:) ) {
2209: $location = $dir. '/'.$file;
2210: } else {
2211: $location = '/home/httpd/html/res'.$file;
2212: }
2213: }
2214: $location=~s://+:/:g; # remove duplicate /
2215: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2216: return $location;
2217: }
2218:
2219: sub hreflocation {
2220: my ($dir,$file)=@_;
2221: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2222: my $finalpath=filelocation($dir,$file);
2223: $finalpath=~s/^\/home\/httpd\/html//;
2224: return $finalpath;
2225: } else {
2226: return $file;
2227: }
2228: }
2229:
2230: # ------------------------------------------------------------- Declutters URLs
2231:
2232: sub declutter {
2233: my $thisfn=shift;
2234: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2235: $thisfn=~s/^\///;
2236: $thisfn=~s/^res\///;
2237: return $thisfn;
2238: }
2239:
2240: # -------------------------------------------------------- Escape Special Chars
2241:
2242: sub escape {
2243: my $str=shift;
2244: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2245: return $str;
2246: }
2247:
2248: # ----------------------------------------------------- Un-Escape Special Chars
2249:
2250: sub unescape {
2251: my $str=shift;
2252: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2253: return $str;
2254: }
2255:
2256: # ================================================================ Main Program
2257:
2258: sub BEGIN {
2259: if ($readit ne 'done') {
2260: # ------------------------------------------------------------ Read access.conf
2261: {
2262: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2263:
2264: while (my $configline=<$config>) {
2265: if ($configline =~ /PerlSetVar/) {
2266: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
2267: chomp($varvalue);
2268: $perlvar{$varname}=$varvalue;
2269: }
2270: }
2271: }
2272:
2273: # ------------------------------------------------------------- Read hosts file
2274: {
2275: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2276:
2277: while (my $configline=<$config>) {
2278: chomp($configline);
2279: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2280: $hostname{$id}=$name;
2281: $hostdom{$id}=$domain;
2282: $hostip{$id}=$ip;
2283: if ($role eq 'library') { $libserv{$id}=$name; }
2284: }
2285: }
2286:
2287: # ------------------------------------------------------ Read spare server file
2288: {
2289: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2290:
2291: while (my $configline=<$config>) {
2292: chomp($configline);
2293: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2294: $spareid{$configline}=1;
2295: }
2296: }
2297: }
2298: # ------------------------------------------------------------ Read permissions
2299: {
2300: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2301:
2302: while (my $configline=<$config>) {
2303: chomp($configline);
2304: my ($role,$perm)=split(/ /,$configline);
2305: if ($perm ne '') { $pr{$role}=$perm; }
2306: }
2307: }
2308:
2309: # -------------------------------------------- Read plain texts for permissions
2310: {
2311: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2312:
2313: while (my $configline=<$config>) {
2314: chomp($configline);
2315: my ($short,$plain)=split(/:/,$configline);
2316: if ($plain ne '') { $prp{$short}=$plain; }
2317: }
2318: }
2319:
2320: # ---------------------------------------------------------- Read package table
2321: {
2322: my $config=Apache::File->new("$perlvar{'lonTabDir'}/packages.tab");
2323:
2324: while (my $configline=<$config>) {
2325: chomp($configline);
2326: my ($short,$plain)=split(/:/,$configline);
2327: my ($pack,$name)=split(/\&/,$short);
2328: if ($plain ne '') {
2329: $packagetab{$pack.'&'.$name.'&name'}=$name;
2330: $packagetab{$short}=$plain;
2331: }
2332: }
2333: }
2334:
2335: # ------------------------------------------------------------- Read file types
2336: {
2337: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2338:
2339: while (my $configline=<$config>) {
2340: chomp($configline);
2341: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2342: if ($descr[0] ne '') {
2343: $fe{$ending}=$emb;
2344: $fd{$ending}=join(' ',@descr);
2345: }
2346: }
2347: }
2348:
2349: %metacache=();
2350:
2351: $readit='done';
2352: &logthis('<font color=yellow>INFO: Read configuration</font>');
2353: }
2354: }
2355: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to lonnet.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / lonnet / perl