1: # The LearningOnline Network
2: # TCP networking package
3: #
4: # Functions for use by content handlers:
5: #
6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
9: # plaintext(short) : plain text explanation of short term
10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
19: # set privileges in format of lonTabs/roles.tab for
20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
29: # appenv(hash) : adds hash to session environment
30: # delenv(varname) : deletes all environment entries starting with varname
31: # store(hashref,symb,courseid,udom,uname)
32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
36: # cstore(hashref,symb,courseid,udom,uname)
37: # : same as store but uses the critical interface to
38: # guarentee a store
39: # restore(symb,courseid,udom,uname)
40: # : returns hash for this symb, all args are optional
41: # if they aren't given they will be derived from the
42: # current enviroment
43: #
44: #
45: # for the next 6 functions udom and uname are optional
46: # if supplied they use udom as the domain and uname
47: # as the username for the function (supply a courseid
48: # for the uname if you want a course database)
49: # if not supplied it uses %ENV and looks at
50: # user. attribute for the values
51: #
52: # eget(namesp,arrayref,udom,uname)
53: # : returns hash with keys from array reference filled
54: # in from namesp (encrypts the return communication)
55: # get(namesp,arrayref,udom,uname)
56: # : returns hash with keys from array reference filled
57: # in from namesp
58: # dump(namesp,udom,uname) : dumps the complete namespace into a hash
59: # del(namesp,array,udom,uname) : deletes keys out of array from namesp
60: # put(namesp,hash,udom,uname) : stores hash in namesp
61: # cput(namesp,hash,udom,uname) : critical put
62: #
63: #
64: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
65: # hash
66: # coursedescription(id) : returns and caches course description for id
67: # repcopy(filename) : replicate file
68: # dirlist(url) : gets a directory listing
69: # directcondval(index) : reading condition value of single condition from
70: # state string
71: # condval(index) : value of condition index based on state
72: # EXT(name) : value of a variable
73: # symblist(map,hash) : Updates symbolic storage links
74: # symbread([filename]) : returns the data handle (filename optional)
75: # rndseed([symb,courseid,domain,uname])
76: # : returns a random seed, all arguments are optional,
77: # if they aren't sent it use the environment to derive
78: # them
79: # Note: if symb isn't sent and it can't get one from
80: # &symbread it will use the current time as it's return
81: # receipt() : returns a receipt to be given out to users
82: # getfile(filename) : returns the contents of filename, or a -1 if it can't
83: # be found, replicates and subscribes to the file
84: # filelocation(dir,file) : returns a fairly clean absolute reference to file
85: # from the directory dir
86: # hreflocation(dir,file) : same as filelocation, but for hrefs
87: # log(domain,user,home,msg) : write to permanent log for user
88: # usection(domain,user,courseid) : output of section name/number or '' for
89: # "not in course" and '-1' for "no section"
90: # userenvironment(domain,user,what) : puts out any environment parameter
91: # for a user
92: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
93: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
94: # an array of IDs
95: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
96: # an array of names
97: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
98: # returns a comma separated list of keys
99: #
100: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
101: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
102: # 11/8,11/16,11/18,11/22,11/23,12/22,
103: # 01/06,01/13,02/24,02/28,02/29,
104: # 03/01,03/02,03/06,03/07,03/13,
105: # 04/05,05/29,05/31,06/01,
106: # 06/05,06/26 Gerd Kortemeyer
107: # 06/26 Ben Tyszka
108: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
109: # 08/14 Ben Tyszka
110: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
111: # 10/04 Gerd Kortemeyer
112: # 10/04 Guy Albertelli
113: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
114: # 10/30,10/31,
115: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
116: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
117: # 05/01/01 Guy Albertelli
118: # 05/01,06/01,09/01 Gerd Kortemeyer
119: # 09/01 Guy Albertelli
120: # 09/01,10/01,11/01 Gerd Kortemeyer
121: # 02/27/01 Scott Harrison
122: # 3/2 Gerd Kortemeyer
123: # 3/15,3/19 Scott Harrison
124: # 3/19,3/20 Gerd Kortemeyer
125: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
126: # 5/26,5/28 Gerd Kortemeyer
127: # 5/30 H. K. Ng
128: # 6/1 Gerd Kortemeyer
129: # July Guy Albertelli
130: # 8/4,8/7,8/8,8/9,8/11,8/16,8/17,8/18,8/20,8/23,9/20,9/21,9/26 Gerd Kortemeyer
131:
132: package Apache::lonnet;
133:
134: use strict;
135: use Apache::File;
136: use LWP::UserAgent();
137: use HTTP::Headers;
138: use vars
139: qw(%perlvar %hostname %homecache %hostip %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache %packagetab %courselogs);
140: use IO::Socket;
141: use GDBM_File;
142: use Apache::Constants qw(:common :http);
143: use HTML::TokeParser;
144: use Fcntl qw(:flock);
145:
146: # --------------------------------------------------------------------- Logging
147:
148: sub logthis {
149: my $message=shift;
150: my $execdir=$perlvar{'lonDaemons'};
151: my $now=time;
152: my $local=localtime($now);
153: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
154: print $fh "$local ($$): $message\n";
155: return 1;
156: }
157:
158: sub logperm {
159: my $message=shift;
160: my $execdir=$perlvar{'lonDaemons'};
161: my $now=time;
162: my $local=localtime($now);
163: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
164: print $fh "$now:$message:$local\n";
165: return 1;
166: }
167:
168: # -------------------------------------------------- Non-critical communication
169: sub subreply {
170: my ($cmd,$server)=@_;
171: my $peerfile="$perlvar{'lonSockDir'}/$server";
172: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
173: Type => SOCK_STREAM,
174: Timeout => 10)
175: or return "con_lost";
176: print $client "$cmd\n";
177: my $answer=<$client>;
178: if (!$answer) { $answer="con_lost"; }
179: chomp($answer);
180: return $answer;
181: }
182:
183: sub reply {
184: my ($cmd,$server)=@_;
185: my $answer=subreply($cmd,$server);
186: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
187: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
188: &logthis("<font color=blue>WARNING:".
189: " $cmd to $server returned $answer</font>");
190: }
191: return $answer;
192: }
193:
194: # ----------------------------------------------------------- Send USR1 to lonc
195:
196: sub reconlonc {
197: my $peerfile=shift;
198: &logthis("Trying to reconnect for $peerfile");
199: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
200: if (my $fh=Apache::File->new("$loncfile")) {
201: my $loncpid=<$fh>;
202: chomp($loncpid);
203: if (kill 0 => $loncpid) {
204: &logthis("lonc at pid $loncpid responding, sending USR1");
205: kill USR1 => $loncpid;
206: sleep 1;
207: if (-e "$peerfile") { return; }
208: &logthis("$peerfile still not there, give it another try");
209: sleep 5;
210: if (-e "$peerfile") { return; }
211: &logthis(
212: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
213: } else {
214: &logthis(
215: "<font color=blue>WARNING:".
216: " lonc at pid $loncpid not responding, giving up</font>");
217: }
218: } else {
219: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
220: }
221: }
222:
223: # ------------------------------------------------------ Critical communication
224:
225: sub critical {
226: my ($cmd,$server)=@_;
227: unless ($hostname{$server}) {
228: &logthis("<font color=blue>WARNING:".
229: " Critical message to unknown server ($server)</font>");
230: return 'no_such_host';
231: }
232: my $answer=reply($cmd,$server);
233: if ($answer eq 'con_lost') {
234: my $pingreply=reply('ping',$server);
235: &reconlonc("$perlvar{'lonSockDir'}/$server");
236: my $pongreply=reply('pong',$server);
237: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
238: $answer=reply($cmd,$server);
239: if ($answer eq 'con_lost') {
240: my $now=time;
241: my $middlename=$cmd;
242: $middlename=substr($middlename,0,16);
243: $middlename=~s/\W//g;
244: my $dfilename=
245: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
246: {
247: my $dfh;
248: if ($dfh=Apache::File->new(">$dfilename")) {
249: print $dfh "$cmd\n";
250: }
251: }
252: sleep 2;
253: my $wcmd='';
254: {
255: my $dfh;
256: if ($dfh=Apache::File->new("$dfilename")) {
257: $wcmd=<$dfh>;
258: }
259: }
260: chomp($wcmd);
261: if ($wcmd eq $cmd) {
262: &logthis("<font color=blue>WARNING: ".
263: "Connection buffer $dfilename: $cmd</font>");
264: &logperm("D:$server:$cmd");
265: return 'con_delayed';
266: } else {
267: &logthis("<font color=red>CRITICAL:"
268: ." Critical connection failed: $server $cmd</font>");
269: &logperm("F:$server:$cmd");
270: return 'con_failed';
271: }
272: }
273: }
274: return $answer;
275: }
276:
277: # ---------------------------------------------------------- Append Environment
278:
279: sub appenv {
280: my %newenv=@_;
281: map {
282: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
283: &logthis("<font color=blue>WARNING: ".
284: "Attempt to modify environment ".$_." to ".$newenv{$_}
285: .'</font>');
286: delete($newenv{$_});
287: } else {
288: $ENV{$_}=$newenv{$_};
289: }
290: } keys %newenv;
291:
292: my $lockfh;
293: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
294: return 'error: '.$!;
295: }
296: unless (flock($lockfh,LOCK_EX)) {
297: &logthis("<font color=blue>WARNING: ".
298: 'Could not obtain exclusive lock in appenv: '.$!);
299: $lockfh->close();
300: return 'error: '.$!;
301: }
302:
303: my @oldenv;
304: {
305: my $fh;
306: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
307: return 'error: '.$!;
308: }
309: @oldenv=<$fh>;
310: $fh->close();
311: }
312: for (my $i=0; $i<=$#oldenv; $i++) {
313: chomp($oldenv[$i]);
314: if ($oldenv[$i] ne '') {
315: my ($name,$value)=split(/=/,$oldenv[$i]);
316: unless (defined($newenv{$name})) {
317: $newenv{$name}=$value;
318: }
319: }
320: }
321: {
322: my $fh;
323: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
324: return 'error';
325: }
326: my $newname;
327: foreach $newname (keys %newenv) {
328: print $fh "$newname=$newenv{$newname}\n";
329: }
330: $fh->close();
331: }
332:
333: $lockfh->close();
334: return 'ok';
335: }
336: # ----------------------------------------------------- Delete from Environment
337:
338: sub delenv {
339: my $delthis=shift;
340: my %newenv=();
341: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
342: &logthis("<font color=blue>WARNING: ".
343: "Attempt to delete from environment ".$delthis);
344: return 'error';
345: }
346: my @oldenv;
347: {
348: my $fh;
349: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
350: return 'error';
351: }
352: unless (flock($fh,LOCK_SH)) {
353: &logthis("<font color=blue>WARNING: ".
354: 'Could not obtain shared lock in delenv: '.$!);
355: $fh->close();
356: return 'error: '.$!;
357: }
358: @oldenv=<$fh>;
359: $fh->close();
360: }
361: {
362: my $fh;
363: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
364: return 'error';
365: }
366: unless (flock($fh,LOCK_EX)) {
367: &logthis("<font color=blue>WARNING: ".
368: 'Could not obtain exclusive lock in delenv: '.$!);
369: $fh->close();
370: return 'error: '.$!;
371: }
372: map {
373: unless ($_=~/^$delthis/) { print $fh $_; }
374: } @oldenv;
375: $fh->close();
376: }
377: return 'ok';
378: }
379:
380: # ------------------------------ Find server with least workload from spare.tab
381:
382: sub spareserver {
383: my $tryserver;
384: my $spareserver='';
385: my $lowestserver=100;
386: foreach $tryserver (keys %spareid) {
387: my $answer=reply('load',$tryserver);
388: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
389: $spareserver="http://$hostname{$tryserver}";
390: $lowestserver=$answer;
391: }
392: }
393: return $spareserver;
394: }
395:
396: # --------- Try to authenticate user from domain's lib servers (first this one)
397:
398: sub authenticate {
399: my ($uname,$upass,$udom)=@_;
400: $upass=escape($upass);
401: if (($perlvar{'lonRole'} eq 'library') &&
402: ($udom eq $perlvar{'lonDefDomain'})) {
403: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
404: if ($answer =~ /authorized/) {
405: if ($answer eq 'authorized') {
406: &logthis("User $uname at $udom authorized by local server");
407: return $perlvar{'lonHostID'};
408: }
409: if ($answer eq 'non_authorized') {
410: &logthis("User $uname at $udom rejected by local server");
411: return 'no_host';
412: }
413: }
414: }
415:
416: my $tryserver;
417: foreach $tryserver (keys %libserv) {
418: if ($hostdom{$tryserver} eq $udom) {
419: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
420: if ($answer =~ /authorized/) {
421: if ($answer eq 'authorized') {
422: &logthis("User $uname at $udom authorized by $tryserver");
423: return $tryserver;
424: }
425: if ($answer eq 'non_authorized') {
426: &logthis("User $uname at $udom rejected by $tryserver");
427: return 'no_host';
428: }
429: }
430: }
431: }
432: &logthis("User $uname at $udom could not be authenticated");
433: return 'no_host';
434: }
435:
436: # ---------------------- Find the homebase for a user from domain's lib servers
437:
438: sub homeserver {
439: my ($uname,$udom)=@_;
440:
441: my $index="$uname:$udom";
442: if ($homecache{$index}) { return "$homecache{$index}"; }
443:
444: my $tryserver;
445: foreach $tryserver (keys %libserv) {
446: if ($hostdom{$tryserver} eq $udom) {
447: my $answer=reply("home:$udom:$uname",$tryserver);
448: if ($answer eq 'found') {
449: $homecache{$index}=$tryserver;
450: return $tryserver;
451: }
452: }
453: }
454: return 'no_host';
455: }
456:
457: # ------------------------------------- Find the usernames behind a list of IDs
458:
459: sub idget {
460: my ($udom,@ids)=@_;
461: my %returnhash=();
462:
463: my $tryserver;
464: foreach $tryserver (keys %libserv) {
465: if ($hostdom{$tryserver} eq $udom) {
466: my $idlist=join('&',@ids);
467: $idlist=~tr/A-Z/a-z/;
468: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
469: my @answer=();
470: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
471: @answer=split(/\&/,$reply);
472: } ;
473: my $i;
474: for ($i=0;$i<=$#ids;$i++) {
475: if ($answer[$i]) {
476: $returnhash{$ids[$i]}=$answer[$i];
477: }
478: }
479: }
480: }
481: return %returnhash;
482: }
483:
484: # ------------------------------------- Find the IDs behind a list of usernames
485:
486: sub idrget {
487: my ($udom,@unames)=@_;
488: my %returnhash=();
489: map {
490: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
491: } @unames;
492: return %returnhash;
493: }
494:
495: # ------------------------------- Store away a list of names and associated IDs
496:
497: sub idput {
498: my ($udom,%ids)=@_;
499: my %servers=();
500: map {
501: my $uhom=&homeserver($_,$udom);
502: if ($uhom ne 'no_host') {
503: my $id=&escape($ids{$_});
504: $id=~tr/A-Z/a-z/;
505: my $unam=&escape($_);
506: if ($servers{$uhom}) {
507: $servers{$uhom}.='&'.$id.'='.$unam;
508: } else {
509: $servers{$uhom}=$id.'='.$unam;
510: }
511: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
512: }
513: } keys %ids;
514: map {
515: &critical('idput:'.$udom.':'.$servers{$_},$_);
516: } keys %servers;
517: }
518:
519: # ------------------------------------- Find the section of student in a course
520:
521: sub usection {
522: my ($udom,$unam,$courseid)=@_;
523: $courseid=~s/\_/\//g;
524: $courseid=~s/^(\w)/\/$1/;
525: map {
526: my ($key,$value)=split(/\=/,$_);
527: $key=&unescape($key);
528: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
529: my $section=$1;
530: if ($key eq $courseid.'_st') { $section=''; }
531: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
532: my $now=time;
533: my $notactive=0;
534: if ($start) {
535: if ($now<$start) { $notactive=1; }
536: }
537: if ($end) {
538: if ($now>$end) { $notactive=1; }
539: }
540: unless ($notactive) { return $section; }
541: }
542: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
543: &homeserver($unam,$udom)));
544: return '-1';
545: }
546:
547: # ------------------------------------- Read an entry from a user's environment
548:
549: sub userenvironment {
550: my ($udom,$unam,@what)=@_;
551: my %returnhash=();
552: my @answer=split(/\&/,
553: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
554: &homeserver($unam,$udom)));
555: my $i;
556: for ($i=0;$i<=$#what;$i++) {
557: $returnhash{$what[$i]}=&unescape($answer[$i]);
558: }
559: return %returnhash;
560: }
561:
562: # ----------------------------- Subscribe to a resource, return URL if possible
563:
564: sub subscribe {
565: my $fname=shift;
566: my $author=$fname;
567: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
568: my ($udom,$uname)=split(/\//,$author);
569: my $home=homeserver($uname,$udom);
570: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
571: return 'not_found';
572: }
573: my $answer=reply("sub:$fname",$home);
574: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
575: $answer.=' by '.$home;
576: }
577: return $answer;
578: }
579:
580: # -------------------------------------------------------------- Replicate file
581:
582: sub repcopy {
583: my $filename=shift;
584: $filename=~s/\/+/\//g;
585: my $transname="$filename.in.transfer";
586: if ((-e $filename) || (-e $transname)) { return OK; }
587: my $remoteurl=subscribe($filename);
588: if ($remoteurl =~ /^con_lost by/) {
589: &logthis("Subscribe returned $remoteurl: $filename");
590: return HTTP_SERVICE_UNAVAILABLE;
591: } elsif ($remoteurl eq 'not_found') {
592: &logthis("Subscribe returned not_found: $filename");
593: return HTTP_NOT_FOUND;
594: } elsif ($remoteurl =~ /^rejected by/) {
595: &logthis("Subscribe returned $remoteurl: $filename");
596: return FORBIDDEN;
597: } elsif ($remoteurl eq 'directory') {
598: return OK;
599: } else {
600: my @parts=split(/\//,$filename);
601: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
602: if ($path ne "$perlvar{'lonDocRoot'}/res") {
603: &logthis("Malconfiguration for replication: $filename");
604: return HTTP_BAD_REQUEST;
605: }
606: my $count;
607: for ($count=5;$count<$#parts;$count++) {
608: $path.="/$parts[$count]";
609: if ((-e $path)!=1) {
610: mkdir($path,0777);
611: }
612: }
613: my $ua=new LWP::UserAgent;
614: my $request=new HTTP::Request('GET',"$remoteurl");
615: my $response=$ua->request($request,$transname);
616: if ($response->is_error()) {
617: unlink($transname);
618: my $message=$response->status_line;
619: &logthis("<font color=blue>WARNING:"
620: ." LWP get: $message: $filename</font>");
621: return HTTP_SERVICE_UNAVAILABLE;
622: } else {
623: if ($remoteurl!~/\.meta$/) {
624: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
625: my $mresponse=$ua->request($mrequest,$filename.'.meta');
626: if ($mresponse->is_error()) {
627: unlink($filename.'.meta');
628: &logthis(
629: "<font color=yellow>INFO: No metadata: $filename</font>");
630: }
631: }
632: rename($transname,$filename);
633: return OK;
634: }
635: }
636: }
637:
638: # --------------------------------------------------------- Server Side Include
639:
640: sub ssi {
641:
642: my ($fn,%form)=@_;
643:
644: my $ua=new LWP::UserAgent;
645:
646: my $request;
647:
648: if (%form) {
649: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
650: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
651: } else {
652: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
653: }
654:
655: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
656: my $response=$ua->request($request);
657:
658: return $response->content;
659: }
660:
661: # ------------------------------------------------------------------------- Log
662:
663: sub log {
664: my ($dom,$nam,$hom,$what)=@_;
665: return critical("log:$dom:$nam:$what",$hom);
666: }
667:
668: # ------------------------------------------------------------------ Course Log
669:
670: sub flushcourselogs {
671: &logthis('Flushing course log buffers');
672: map {
673: my $crsid=$_;
674: if (&reply('log:'.$ENV{'course.'.$crsid.'.domain'}.':'.
675: $ENV{'course.'.$crsid.'.num'}.':'.
676: &escape($courselogs{$crsid}),
677: $ENV{'course.'.$crsid.'.home'}) eq 'ok') {
678: delete $courselogs{$crsid};
679: } else {
680: &logthis('Failed to flush log buffer for '.$crsid);
681: if (length($courselogs{$crsid})>40000) {
682: &logthis("<font color=blue>WARNING: Buffer for ".$crsid.
683: " exceeded maximum size, deleting.</font>");
684: delete $courselogs{$crsid};
685: }
686: }
687: } keys %courselogs;
688: }
689:
690: sub courselog {
691: my $what=shift;
692: $what=time.':'.$what;
693: unless ($ENV{'request.course.id'}) { return ''; }
694: if (defined $courselogs{$ENV{'request.course.id'}}) {
695: $courselogs{$ENV{'request.course.id'}}.='&'.$what;
696: } else {
697: $courselogs{$ENV{'request.course.id'}}.=$what;
698: }
699: if (length($courselogs{$ENV{'request.course.id'}})>4048) {
700: &flushcourselogs();
701: }
702: }
703:
704: sub courseacclog {
705: my $fnsymb=shift;
706: unless ($ENV{'request.course.id'}) { return ''; }
707: my $what=$fnsymb.':'.$ENV{'user.name'}.':'.$ENV{'user.domain'};
708: if ($what=~/(problem|exam|quiz|assess|survey|form)$/) {
709: map {
710: if ($_=~/^form\.(.*)/) {
711: $what.=':'.$1.'='.$ENV{$_};
712: }
713: } keys %ENV;
714: }
715: &courselog($what);
716: }
717:
718: # ----------------------------------------------------------- Check out an item
719:
720: sub checkout {
721: my ($symb,$tuname,$tudom,$tcrsid)=@_;
722: my $now=time;
723: my $lonhost=$perlvar{'lonHostID'};
724: my $infostr=&escape(
725: $tuname.'&'.
726: $tudom.'&'.
727: $tcrsid.'&'.
728: $symb.'&'.
729: $now.'&'.$ENV{'REMOTE_ADDR'});
730: my $token=&reply('tmpput:'.$infostr,$lonhost);
731: if ($token=~/^error\:/) {
732: &logthis("<font color=blue>WARNING: ".
733: "Checkout tmpput failed ".$tudom.' - '.$tuname.' - '.$symb.
734: "</font>");
735: return '';
736: }
737:
738: $token=~s/^(\d+)\_.*\_(\d+)$/$1\*$2\*$lonhost/;
739: $token=~tr/a-z/A-Z/;
740:
741: my %infohash=('resource.0.outtoken' => $token,
742: 'resource.0.checkouttime' => $now,
743: 'resource.0.outremote' => $ENV{'REMOTE_ADDR'});
744:
745: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
746: return '';
747: } else {
748: &logthis("<font color=blue>WARNING: ".
749: "Checkout cstore failed ".$tudom.' - '.$tuname.' - '.$symb.
750: "</font>");
751: }
752:
753: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
754: &escape('Checkout '.$infostr.' - '.
755: $token)) ne 'ok') {
756: return '';
757: } else {
758: &logthis("<font color=blue>WARNING: ".
759: "Checkout log failed ".$tudom.' - '.$tuname.' - '.$symb.
760: "</font>");
761: }
762: return $token;
763: }
764:
765: # ------------------------------------------------------------ Check in an item
766:
767: sub checkin {
768: my $token=shift;
769: my $now=time;
770: my ($ta,$tb,$lonhost)=split(/\*/,$token);
771: $lonhost=~tr/A-Z/a-z/;
772: my $dtoken=$ta.'_'.$hostip{$lonhost}.'_'.$tb;
773: $dtoken=~s/\W/\_/g;
774: my ($tuname,$tudom,$tcrsid,$symb,$chtim,$rmaddr)=
775: split(/\&/,&unescape(&reply('tmpget:'.$dtoken,$lonhost)));
776:
777: unless (($tuname) && ($tudom)) {
778: &logthis('Check in '.$token.' ('.$dtoken.') failed');
779: return '';
780: }
781:
782: unless (&allowed('mgr',$tcrsid)) {
783: &logthis('Check in '.$token.' ('.$dtoken.') unauthorized: '.
784: $ENV{'user.name'}.' - '.$ENV{'user.domain'});
785: return '';
786: }
787:
788: my %infohash=('resource.0.intoken' => $token,
789: 'resource.0.checkintime' => $now,
790: 'resource.0.inremote' => $ENV{'REMOTE_ADDR'});
791:
792: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
793: return '';
794: }
795:
796: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
797: &escape('Checkin - '.$token)) ne 'ok') {
798: return '';
799: }
800:
801: return ($symb,$tuname,$tudom,$tcrsid);
802: }
803:
804: # --------------------------------------------- Set Expire Date for Spreadsheet
805:
806: sub expirespread {
807: my ($uname,$udom,$stype,$usymb)=@_;
808: my $cid=$ENV{'request.course.id'};
809: if ($cid) {
810: my $now=time;
811: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
812: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
813: $ENV{'course.'.$cid.'.num'}.
814: ':nohist_expirationdates:'.
815: &escape($key).'='.$now,
816: $ENV{'course.'.$cid.'.home'})
817: }
818: return 'ok';
819: }
820:
821: # ----------------------------------------------------- Devalidate Spreadsheets
822:
823: sub devalidate {
824: my $symb=shift;
825: my $cid=$ENV{'request.course.id'};
826: if ($cid) {
827: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
828: my $status=
829: &del('nohist_calculatedsheet',
830: [$key.'studentcalc'],
831: $ENV{'course.'.$cid.'.domain'},
832: $ENV{'course.'.$cid.'.num'})
833: .' '.
834: &del('nohist_calculatedsheets_'.$cid,
835: [$key.'assesscalc:'.$symb]);
836: unless ($status eq 'ok ok') {
837: &logthis('Could not devalidate spreadsheet '.
838: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
839: $symb.': '.$status);
840: }
841: }
842: }
843:
844: # ----------------------------------------------------------------------- Store
845:
846: sub store {
847: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
848: my $home='';
849:
850: if ($stuname) {
851: $home=&homeserver($stuname,$domain);
852: }
853:
854: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
855:
856: &devalidate($symb);
857:
858: $symb=escape($symb);
859: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
860: if (!$domain) { $domain=$ENV{'user.domain'}; }
861: if (!$stuname) { $stuname=$ENV{'user.name'}; }
862: if (!$home) { $home=$ENV{'user.home'}; }
863: my $namevalue='';
864: map {
865: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
866: } keys %$storehash;
867: $namevalue=~s/\&$//;
868: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
869: }
870:
871: # -------------------------------------------------------------- Critical Store
872:
873: sub cstore {
874: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
875: my $home='';
876:
877: if ($stuname) {
878: $home=&homeserver($stuname,$domain);
879: }
880:
881: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
882:
883: &devalidate($symb);
884:
885: $symb=escape($symb);
886: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
887: if (!$domain) { $domain=$ENV{'user.domain'}; }
888: if (!$stuname) { $stuname=$ENV{'user.name'}; }
889: if (!$home) { $home=$ENV{'user.home'}; }
890:
891: my $namevalue='';
892: map {
893: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
894: } keys %$storehash;
895: $namevalue=~s/\&$//;
896: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
897: }
898:
899: # --------------------------------------------------------------------- Restore
900:
901: sub restore {
902: my ($symb,$namespace,$domain,$stuname) = @_;
903: my $home='';
904:
905: if ($stuname) {
906: $home=&homeserver($stuname,$domain);
907: }
908:
909: if (!$symb) {
910: unless ($symb=escape(&symbread())) { return ''; }
911: } else {
912: $symb=&escape($symb);
913: }
914: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
915: if (!$domain) { $domain=$ENV{'user.domain'}; }
916: if (!$stuname) { $stuname=$ENV{'user.name'}; }
917: if (!$home) { $home=$ENV{'user.home'}; }
918: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
919:
920: my %returnhash=();
921: map {
922: my ($name,$value)=split(/\=/,$_);
923: $returnhash{&unescape($name)}=&unescape($value);
924: } split(/\&/,$answer);
925: my $version;
926: for ($version=1;$version<=$returnhash{'version'};$version++) {
927: map {
928: $returnhash{$_}=$returnhash{$version.':'.$_};
929: } split(/\:/,$returnhash{$version.':keys'});
930: }
931: return %returnhash;
932: }
933:
934: # ---------------------------------------------------------- Course Description
935:
936: sub coursedescription {
937: my $courseid=shift;
938: $courseid=~s/^\///;
939: $courseid=~s/\_/\//g;
940: my ($cdomain,$cnum)=split(/\//,$courseid);
941: my $chome=&homeserver($cnum,$cdomain);
942: if ($chome ne 'no_host') {
943: my %returnhash=&dump('environment',$cdomain,$cnum);
944: if (!exists($returnhash{'con_lost'})) {
945: my $normalid=$cdomain.'_'.$cnum;
946: my %envhash=();
947: $returnhash{'home'}= $chome;
948: $returnhash{'domain'} = $cdomain;
949: $returnhash{'num'} = $cnum;
950: while (my ($name,$value) = each %returnhash) {
951: $envhash{'course.'.$normalid.'.'.$name}=$value;
952: }
953: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
954: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
955: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
956: $envhash{'course.'.$normalid.'.last_cache'}=time;
957: $envhash{'course.'.$normalid.'.home'}=$chome;
958: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
959: $envhash{'course.'.$normalid.'.num'}=$cnum;
960: &appenv(%envhash);
961: return %returnhash;
962: }
963: }
964: return ();
965: }
966:
967: # -------------------------------------------------------- Get user privileges
968:
969: sub rolesinit {
970: my ($domain,$username,$authhost)=@_;
971: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
972: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
973: my %allroles=();
974: my %thesepriv=();
975: my $now=time;
976: my $userroles="user.login.time=$now\n";
977: my $thesestr;
978:
979: if ($rolesdump ne '') {
980: map {
981: if ($_!~/^rolesdef\&/) {
982: my ($area,$role)=split(/=/,$_);
983: $area=~s/\_\w\w$//;
984: my ($trole,$tend,$tstart)=split(/_/,$role);
985: $userroles.='user.role.'.$trole.'.'.$area.'='.
986: $tstart.'.'.$tend."\n";
987: if ($tend!=0) {
988: if ($tend<$now) {
989: $trole='';
990: }
991: }
992: if ($tstart!=0) {
993: if ($tstart>$now) {
994: $trole='';
995: }
996: }
997: if (($area ne '') && ($trole ne '')) {
998: my $spec=$trole.'.'.$area;
999: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
1000: if ($trole =~ /^cr\//) {
1001: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
1002: my $homsvr=homeserver($rauthor,$rdomain);
1003: if ($hostname{$homsvr} ne '') {
1004: my $roledef=
1005: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
1006: $homsvr);
1007: if (($roledef ne 'con_lost') && ($roledef ne '')) {
1008: my ($syspriv,$dompriv,$coursepriv)=
1009: split(/\_/,unescape($roledef));
1010: $allroles{'cm./'}.=':'.$syspriv;
1011: $allroles{$spec.'./'}.=':'.$syspriv;
1012: if ($tdomain ne '') {
1013: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
1014: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
1015: if ($trest ne '') {
1016: $allroles{'cm.'.$area}.=':'.$coursepriv;
1017: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
1018: }
1019: }
1020: }
1021: }
1022: } else {
1023: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
1024: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
1025: if ($tdomain ne '') {
1026: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1027: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1028: if ($trest ne '') {
1029: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
1030: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
1031: }
1032: }
1033: }
1034: }
1035: }
1036: } split(/&/,$rolesdump);
1037: my $adv=0;
1038: my $author=0;
1039: map {
1040: %thesepriv=();
1041: if (($_!~/^st/) && ($_!~/^ta/) && ($_!~/^cm/)) { $adv=1; }
1042: if (($_=~/^au/) || ($_=~/^ca/)) { $author=1; }
1043: map {
1044: if ($_ ne '') {
1045: my ($privilege,$restrictions)=split(/&/,$_);
1046: if ($restrictions eq '') {
1047: $thesepriv{$privilege}='F';
1048: } else {
1049: if ($thesepriv{$privilege} ne 'F') {
1050: $thesepriv{$privilege}.=$restrictions;
1051: }
1052: }
1053: }
1054: } split(/:/,$allroles{$_});
1055: $thesestr='';
1056: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
1057: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
1058: } keys %allroles;
1059: $userroles.='user.adv='.$adv."\n".
1060: 'user.author='.$author."\n";
1061: $ENV{'user.adv'}=$adv;
1062: }
1063: return $userroles;
1064: }
1065:
1066: # --------------------------------------------------------------- get interface
1067:
1068: sub get {
1069: my ($namespace,$storearr,$udomain,$uname)=@_;
1070: my $items='';
1071: map {
1072: $items.=escape($_).'&';
1073: } @$storearr;
1074: $items=~s/\&$//;
1075: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1076: if (!$uname) { $uname=$ENV{'user.name'}; }
1077: my $uhome=&homeserver($uname,$udomain);
1078:
1079: my $rep=&reply("get:$udomain:$uname:$namespace:$items",$uhome);
1080: my @pairs=split(/\&/,$rep);
1081: my %returnhash=();
1082: my $i=0;
1083: map {
1084: $returnhash{$_}=unescape($pairs[$i]);
1085: $i++;
1086: } @$storearr;
1087: return %returnhash;
1088: }
1089:
1090: # --------------------------------------------------------------- del interface
1091:
1092: sub del {
1093: my ($namespace,$storearr,$udomain,$uname)=@_;
1094: my $items='';
1095: map {
1096: $items.=escape($_).'&';
1097: } @$storearr;
1098: $items=~s/\&$//;
1099: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1100: if (!$uname) { $uname=$ENV{'user.name'}; }
1101: my $uhome=&homeserver($uname,$udomain);
1102:
1103: return &reply("del:$udomain:$uname:$namespace:$items",$uhome);
1104: }
1105:
1106: # -------------------------------------------------------------- dump interface
1107:
1108: sub dump {
1109: my ($namespace,$udomain,$uname)=@_;
1110: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1111: if (!$uname) { $uname=$ENV{'user.name'}; }
1112: my $uhome=&homeserver($uname,$udomain);
1113: my $rep=reply("dump:$udomain:$uname:$namespace",$uhome);
1114: my @pairs=split(/\&/,$rep);
1115: my %returnhash=();
1116: map {
1117: my ($key,$value)=split(/=/,$_);
1118: $returnhash{unescape($key)}=unescape($value);
1119: } @pairs;
1120: return %returnhash;
1121: }
1122:
1123: # --------------------------------------------------------------- put interface
1124:
1125: sub put {
1126: my ($namespace,$storehash,$udomain,$uname)=@_;
1127: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1128: if (!$uname) { $uname=$ENV{'user.name'}; }
1129: my $uhome=&homeserver($uname,$udomain);
1130: my $items='';
1131: map {
1132: $items.=&escape($_).'='.&escape($$storehash{$_}).'&';
1133: } keys %$storehash;
1134: $items=~s/\&$//;
1135: return &reply("put:$udomain:$uname:$namespace:$items",$uhome);
1136: }
1137:
1138: # ------------------------------------------------------ critical put interface
1139:
1140: sub cput {
1141: my ($namespace,$storehash,$udomain,$uname)=@_;
1142: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1143: if (!$uname) { $uname=$ENV{'user.name'}; }
1144: my $uhome=&homeserver($uname,$udomain);
1145: my $items='';
1146: map {
1147: $items.=escape($_).'='.escape($$storehash{$_}).'&';
1148: } keys %$storehash;
1149: $items=~s/\&$//;
1150: return &critical("put:$udomain:$uname:$namespace:$items",$uhome);
1151: }
1152:
1153: # -------------------------------------------------------------- eget interface
1154:
1155: sub eget {
1156: my ($namespace,$storearr,$udomain,$uname)=@_;
1157: my $items='';
1158: map {
1159: $items.=escape($_).'&';
1160: } @$storearr;
1161: $items=~s/\&$//;
1162: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1163: if (!$uname) { $uname=$ENV{'user.name'}; }
1164: my $uhome=&homeserver($uname,$udomain);
1165: my $rep=&reply("eget:$udomain:$uname:$namespace:$items",$uhome);
1166: my @pairs=split(/\&/,$rep);
1167: my %returnhash=();
1168: my $i=0;
1169: map {
1170: $returnhash{$_}=unescape($pairs[$i]);
1171: $i++;
1172: } @$storearr;
1173: return %returnhash;
1174: }
1175:
1176: # ------------------------------------------------- Check for a user privilege
1177:
1178: sub allowed {
1179: my ($priv,$uri)=@_;
1180:
1181: my $orguri=$uri;
1182: $uri=&declutter($uri);
1183:
1184: # Free bre access to adm and meta resources
1185:
1186: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1187: return 'F';
1188: }
1189:
1190: # Free bre to public access
1191:
1192: if ($priv eq 'bre') {
1193: if (&metadata($uri,'copyright') eq 'public') { return 'F'; }
1194: }
1195:
1196: my $thisallowed='';
1197: my $statecond=0;
1198: my $courseprivid='';
1199:
1200: # Course
1201:
1202: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1203: $thisallowed.=$1;
1204: }
1205:
1206: # Domain
1207:
1208: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1209: =~/$priv\&([^\:]*)/) {
1210: $thisallowed.=$1;
1211: }
1212:
1213: # Course: uri itself is a course
1214: my $courseuri=$uri;
1215: $courseuri=~s/\_(\d)/\/$1/;
1216: $courseuri=~s/^([^\/])/\/$1/;
1217:
1218: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1219: =~/$priv\&([^\:]*)/) {
1220: $thisallowed.=$1;
1221: }
1222:
1223: # Full access at system, domain or course-wide level? Exit.
1224:
1225: if ($thisallowed=~/F/) {
1226: return 'F';
1227: }
1228:
1229: # If this is generating or modifying users, exit with special codes
1230:
1231: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
1232: return $thisallowed;
1233: }
1234: #
1235: # Gathered so far: system, domain and course wide privileges
1236: #
1237: # Course: See if uri or referer is an individual resource that is part of
1238: # the course
1239:
1240: if ($ENV{'request.course.id'}) {
1241: $courseprivid=$ENV{'request.course.id'};
1242: if ($ENV{'request.course.sec'}) {
1243: $courseprivid.='/'.$ENV{'request.course.sec'};
1244: }
1245: $courseprivid=~s/\_/\//;
1246: my $checkreferer=1;
1247: my @uriparts=split(/\//,$uri);
1248: my $filename=$uriparts[$#uriparts];
1249: my $pathname=$uri;
1250: $pathname=~s/\/$filename$//;
1251: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1252: /\&$filename\:([\d\|]+)\&/) {
1253: $statecond=$1;
1254: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1255: =~/$priv\&([^\:]*)/) {
1256: $thisallowed.=$1;
1257: $checkreferer=0;
1258: }
1259: }
1260:
1261: if ($checkreferer) {
1262: my $refuri=$ENV{'httpref.'.$orguri};
1263:
1264: unless ($refuri) {
1265: map {
1266: if ($_=~/^httpref\..*\*/) {
1267: my $pattern=$_;
1268: $pattern=~s/^httpref\.\/res\///;
1269: $pattern=~s/\*/\[\^\/\]\+/g;
1270: $pattern=~s/\//\\\//g;
1271: if ($orguri=~/$pattern/) {
1272: $refuri=$ENV{$_};
1273: }
1274: }
1275: } keys %ENV;
1276: }
1277: if ($refuri) {
1278: $refuri=&declutter($refuri);
1279: my @uriparts=split(/\//,$refuri);
1280: my $filename=$uriparts[$#uriparts];
1281: my $pathname=$refuri;
1282: $pathname=~s/\/$filename$//;
1283: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1284: /\&$filename\:([\d\|]+)\&/) {
1285: my $refstatecond=$1;
1286: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1287: =~/$priv\&([^\:]*)/) {
1288: $thisallowed.=$1;
1289: $uri=$refuri;
1290: $statecond=$refstatecond;
1291: }
1292: }
1293: }
1294: }
1295: }
1296:
1297: #
1298: # Gathered now: all privileges that could apply, and condition number
1299: #
1300: #
1301: # Full or no access?
1302: #
1303:
1304: if ($thisallowed=~/F/) {
1305: return 'F';
1306: }
1307:
1308: unless ($thisallowed) {
1309: return '';
1310: }
1311:
1312: # Restrictions exist, deal with them
1313: #
1314: # C:according to course preferences
1315: # R:according to resource settings
1316: # L:unless locked
1317: # X:according to user session state
1318: #
1319:
1320: # Possibly locked functionality, check all courses
1321: # Locks might take effect only after 10 minutes cache expiration for other
1322: # courses, and 2 minutes for current course
1323:
1324: my $envkey;
1325: if ($thisallowed=~/L/) {
1326: foreach $envkey (keys %ENV) {
1327: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1328: my $courseid=$2;
1329: my $roleid=$1.'.'.$2;
1330: $courseid=~s/^\///;
1331: my $expiretime=600;
1332: if ($ENV{'request.role'} eq $roleid) {
1333: $expiretime=120;
1334: }
1335: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1336: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1337: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1338: &coursedescription($courseid);
1339: }
1340: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1341: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1342: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1343: &log($ENV{'user.domain'},$ENV{'user.name'},
1344: $ENV{'user.host'},
1345: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1346: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1347: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1348: return '';
1349: }
1350: }
1351: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1352: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1353: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1354: &log($ENV{'user.domain'},$ENV{'user.name'},
1355: $ENV{'user.host'},
1356: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1357: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1358: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1359: return '';
1360: }
1361: }
1362: }
1363: }
1364: }
1365:
1366: #
1367: # Rest of the restrictions depend on selected course
1368: #
1369:
1370: unless ($ENV{'request.course.id'}) {
1371: return '1';
1372: }
1373:
1374: #
1375: # Now user is definitely in a course
1376: #
1377:
1378:
1379: # Course preferences
1380:
1381: if ($thisallowed=~/C/) {
1382: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1383: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1384: =~/\,$rolecode\,/) {
1385: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1386: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1387: $ENV{'request.course.id'});
1388: return '';
1389: }
1390: }
1391:
1392: # Resource preferences
1393:
1394: if ($thisallowed=~/R/) {
1395: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1396: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1397: if (-e $filename) {
1398: my @content;
1399: {
1400: my $fh=Apache::File->new($filename);
1401: @content=<$fh>;
1402: }
1403: if (join('',@content)=~
1404: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1405: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1406: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1407: return '';
1408:
1409: }
1410: }
1411: }
1412:
1413: # Restricted by state?
1414:
1415: if ($thisallowed=~/X/) {
1416: if (&condval($statecond)) {
1417: return '2';
1418: } else {
1419: return '';
1420: }
1421: }
1422:
1423: return 'F';
1424: }
1425:
1426: # ----------------------------------------------------------------- Define Role
1427:
1428: sub definerole {
1429: if (allowed('mcr','/')) {
1430: my ($rolename,$sysrole,$domrole,$courole)=@_;
1431: map {
1432: my ($crole,$cqual)=split(/\&/,$_);
1433: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1434: if ($pr{'cr:s'}=~/$crole\&/) {
1435: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1436: return "refused:s:$crole&$cqual";
1437: }
1438: }
1439: } split('/',$sysrole);
1440: map {
1441: my ($crole,$cqual)=split(/\&/,$_);
1442: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1443: if ($pr{'cr:d'}=~/$crole\&/) {
1444: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1445: return "refused:d:$crole&$cqual";
1446: }
1447: }
1448: } split('/',$domrole);
1449: map {
1450: my ($crole,$cqual)=split(/\&/,$_);
1451: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1452: if ($pr{'cr:c'}=~/$crole\&/) {
1453: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1454: return "refused:c:$crole&$cqual";
1455: }
1456: }
1457: } split('/',$courole);
1458: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1459: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1460: "rolesdef_$rolename=".
1461: escape($sysrole.'_'.$domrole.'_'.$courole);
1462: return reply($command,$ENV{'user.home'});
1463: } else {
1464: return 'refused';
1465: }
1466: }
1467:
1468: # ---------------- Make a metadata query against the network of library servers
1469:
1470: sub metadata_query {
1471: my ($query,$custom,$customshow)=@_;
1472: # need to put in a library server loop here and return a hash
1473: my %rhash;
1474: for my $server (keys %libserv) {
1475: unless ($custom or $customshow) {
1476: my $reply=&reply("querysend:".&escape($query),$server);
1477: $rhash{$server}=$reply;
1478: }
1479: else {
1480: my $reply=&reply("querysend:".&escape($query).':'.
1481: &escape($custom).':'.&escape($customshow),
1482: $server);
1483: $rhash{$server}=$reply;
1484: }
1485: }
1486: return \%rhash;
1487: }
1488:
1489: # ------------------------------------------------------------------ Plain Text
1490:
1491: sub plaintext {
1492: my $short=shift;
1493: return $prp{$short};
1494: }
1495:
1496: # ------------------------------------------------------------------ Plain Text
1497:
1498: sub fileembstyle {
1499: my $ending=shift;
1500: return $fe{$ending};
1501: }
1502:
1503: # ------------------------------------------------------------ Description Text
1504:
1505: sub filedescription {
1506: my $ending=shift;
1507: return $fd{$ending};
1508: }
1509:
1510: # ----------------------------------------------------------------- Assign Role
1511:
1512: sub assignrole {
1513: my ($udom,$uname,$url,$role,$end,$start)=@_;
1514: my $mrole;
1515: if ($role =~ /^cr\//) {
1516: unless (&allowed('ccr',$url)) {
1517: &logthis('Refused custom assignrole: '.
1518: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1519: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1520: return 'refused';
1521: }
1522: $mrole='cr';
1523: } else {
1524: my $cwosec=$url;
1525: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1526: unless (&allowed('c'.$role,$cwosec)) {
1527: &logthis('Refused assignrole: '.
1528: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1529: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1530: return 'refused';
1531: }
1532: $mrole=$role;
1533: }
1534: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1535: "$udom:$uname:$url".'_'."$mrole=$role";
1536: if ($end) { $command.='_'.$end; }
1537: if ($start) {
1538: if ($end) {
1539: $command.='_'.$start;
1540: } else {
1541: $command.='_0_'.$start;
1542: }
1543: }
1544: return &reply($command,&homeserver($uname,$udom));
1545: }
1546:
1547: # --------------------------------------------------------------- Modify a user
1548:
1549:
1550: sub modifyuser {
1551: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1552: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1553: $umode.', '.$first.', '.$middle.', '.
1554: $last.', '.$gene.' by '.
1555: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1556: my $uhome=&homeserver($uname,$udom);
1557: # ----------------------------------------------------------------- Create User
1558: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1559: my $unhome='';
1560: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1561: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1562: } else {
1563: my $tryserver;
1564: my $loadm=10000000;
1565: foreach $tryserver (keys %libserv) {
1566: if ($hostdom{$tryserver} eq $udom) {
1567: my $answer=reply('load',$tryserver);
1568: if (($answer=~/\d+/) && ($answer<$loadm)) {
1569: $loadm=$answer;
1570: $unhome=$tryserver;
1571: }
1572: }
1573: }
1574: }
1575: if (($unhome eq '') || ($unhome eq 'no_host')) {
1576: return 'error: find home';
1577: }
1578: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1579: &escape($upass),$unhome);
1580: unless ($reply eq 'ok') {
1581: return 'error: '.$reply;
1582: }
1583: $uhome=&homeserver($uname,$udom);
1584: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1585: return 'error: verify home';
1586: }
1587: }
1588: # ---------------------------------------------------------------------- Add ID
1589: if ($uid) {
1590: $uid=~tr/A-Z/a-z/;
1591: my %uidhash=&idrget($udom,$uname);
1592: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1593: unless ($uid eq $uidhash{$uname}) {
1594: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1595: }
1596: } else {
1597: &idput($udom,($uname => $uid));
1598: }
1599: }
1600: # -------------------------------------------------------------- Add names, etc
1601: my %names=&get('environment',
1602: ['firstname','middlename','lastname','generation'],
1603: $udom,$uname);
1604: if ($first) { $names{'firstname'} = $first; }
1605: if ($middle) { $names{'middlename'} = $middle; }
1606: if ($last) { $names{'lastname'} = $last; }
1607: if ($gene) { $names{'generation'} = $gene; }
1608: my $reply = &put('environment', \%names, $udom,$uname);
1609: if ($reply ne 'ok') { return 'error: '.$reply; }
1610: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1611: $umode.', '.$first.', '.$middle.', '.
1612: $last.', '.$gene.' by '.
1613: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1614: return 'ok';
1615: }
1616:
1617: # -------------------------------------------------------------- Modify student
1618:
1619: sub modifystudent {
1620: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1621: $end,$start)=@_;
1622: my $cid='';
1623: unless ($cid=$ENV{'request.course.id'}) {
1624: return 'not_in_class';
1625: }
1626: # --------------------------------------------------------------- Make the user
1627: my $reply=&modifyuser
1628: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1629: unless ($reply eq 'ok') { return $reply; }
1630: my $uhome=&homeserver($uname,$udom);
1631: if (($uhome eq '') || ($uhome eq 'no_host')) {
1632: return 'error: no such user';
1633: }
1634: # -------------------------------------------------- Add student to course list
1635: my $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1636: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1637: &escape($uname.':'.$udom).'='.
1638: &escape($end.':'.$start),
1639: $ENV{'course.'.$cid.'.home'});
1640: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1641: return 'error: '.$reply;
1642: }
1643: # ---------------------------------------------------- Add student role to user
1644: my $uurl='/'.$cid;
1645: $uurl=~s/\_/\//g;
1646: if ($usec) {
1647: $uurl.='/'.$usec;
1648: }
1649: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1650: }
1651:
1652: # ------------------------------------------------- Write to course preferences
1653:
1654: sub writecoursepref {
1655: my ($courseid,%prefs)=@_;
1656: $courseid=~s/^\///;
1657: $courseid=~s/\_/\//g;
1658: my ($cdomain,$cnum)=split(/\//,$courseid);
1659: my $chome=homeserver($cnum,$cdomain);
1660: if (($chome eq '') || ($chome eq 'no_host')) {
1661: return 'error: no such course';
1662: }
1663: my $cstring='';
1664: map {
1665: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1666: } keys %prefs;
1667: $cstring=~s/\&$//;
1668: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1669: }
1670:
1671: # ---------------------------------------------------------- Make/modify course
1672:
1673: sub createcourse {
1674: my ($udom,$description,$url)=@_;
1675: $url=&declutter($url);
1676: my $cid='';
1677: unless (&allowed('ccc',$ENV{'user.domain'})) {
1678: return 'refused';
1679: }
1680: unless ($udom eq $ENV{'user.domain'}) {
1681: return 'refused';
1682: }
1683: # ------------------------------------------------------------------- Create ID
1684: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1685: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1686: # ----------------------------------------------- Make sure that does not exist
1687: my $uhome=&homeserver($uname,$udom);
1688: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1689: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1690: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1691: $uhome=&homeserver($uname,$udom);
1692: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1693: return 'error: unable to generate unique course-ID';
1694: }
1695: }
1696: # ------------------------------------------------------------- Make the course
1697: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1698: $ENV{'user.home'});
1699: unless ($reply eq 'ok') { return 'error: '.$reply; }
1700: my $uhome=&homeserver($uname,$udom);
1701: if (($uhome eq '') || ($uhome eq 'no_host')) {
1702: return 'error: no such course';
1703: }
1704: &writecoursepref($udom.'_'.$uname,
1705: ('description' => $description,
1706: 'url' => $url));
1707: return '/'.$udom.'/'.$uname;
1708: }
1709:
1710: # ---------------------------------------------------------- Assign Custom Role
1711:
1712: sub assigncustomrole {
1713: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1714: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1715: $end,$start);
1716: }
1717:
1718: # ----------------------------------------------------------------- Revoke Role
1719:
1720: sub revokerole {
1721: my ($udom,$uname,$url,$role)=@_;
1722: my $now=time;
1723: return &assignrole($udom,$uname,$url,$role,$now);
1724: }
1725:
1726: # ---------------------------------------------------------- Revoke Custom Role
1727:
1728: sub revokecustomrole {
1729: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1730: my $now=time;
1731: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1732: }
1733:
1734: # ------------------------------------------------------------ Directory lister
1735:
1736: sub dirlist {
1737: my $uri=shift;
1738: $uri=~s/^\///;
1739: $uri=~s/\/$//;
1740: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1741: if ($udom) {
1742: if ($uname) {
1743: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1744: homeserver($uname,$udom));
1745: return split(/:/,$listing);
1746: } else {
1747: my $tryserver;
1748: my %allusers=();
1749: foreach $tryserver (keys %libserv) {
1750: if ($hostdom{$tryserver} eq $udom) {
1751: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1752: $tryserver);
1753: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1754: && ($listing ne 'con_lost')) {
1755: map {
1756: my ($entry,@stat)=split(/&/,$_);
1757: $allusers{$entry}=1;
1758: } split(/:/,$listing);
1759: }
1760: }
1761: }
1762: my $alluserstr='';
1763: map {
1764: $alluserstr.=$_.'&user:';
1765: } sort keys %allusers;
1766: $alluserstr=~s/:$//;
1767: return split(/:/,$alluserstr);
1768: }
1769: } else {
1770: my $tryserver;
1771: my %alldom=();
1772: foreach $tryserver (keys %libserv) {
1773: $alldom{$hostdom{$tryserver}}=1;
1774: }
1775: my $alldomstr='';
1776: map {
1777: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1778: } sort keys %alldom;
1779: $alldomstr=~s/:$//;
1780: return split(/:/,$alldomstr);
1781: }
1782: }
1783:
1784: # -------------------------------------------------------- Value of a Condition
1785:
1786: sub directcondval {
1787: my $number=shift;
1788: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1789: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1790: } else {
1791: return 2;
1792: }
1793: }
1794:
1795: sub condval {
1796: my $condidx=shift;
1797: my $result=0;
1798: my $allpathcond='';
1799: map {
1800: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1801: $allpathcond.=
1802: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1803: }
1804: } split(/\|/,$condidx);
1805: $allpathcond=~s/\|$//;
1806: if ($ENV{'request.course.id'}) {
1807: if ($allpathcond) {
1808: my $operand='|';
1809: my @stack;
1810: map {
1811: if ($_ eq '(') {
1812: push @stack,($operand,$result)
1813: } elsif ($_ eq ')') {
1814: my $before=pop @stack;
1815: if (pop @stack eq '&') {
1816: $result=$result>$before?$before:$result;
1817: } else {
1818: $result=$result>$before?$result:$before;
1819: }
1820: } elsif (($_ eq '&') || ($_ eq '|')) {
1821: $operand=$_;
1822: } else {
1823: my $new=directcondval($_);
1824: if ($operand eq '&') {
1825: $result=$result>$new?$new:$result;
1826: } else {
1827: $result=$result>$new?$result:$new;
1828: }
1829: }
1830: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1831: }
1832: }
1833: return $result;
1834: }
1835:
1836: # --------------------------------------------------------- Value of a Variable
1837:
1838: sub EXT {
1839: my ($varname,$symbparm)=@_;
1840: unless ($varname) { return ''; }
1841: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1842: my $rest;
1843: if ($therest[0]) {
1844: $rest=join('.',@therest);
1845: } else {
1846: $rest='';
1847: }
1848: my $qualifierrest=$qualifier;
1849: if ($rest) { $qualifierrest.='.'.$rest; }
1850: my $spacequalifierrest=$space;
1851: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1852: if ($realm eq 'user') {
1853: # --------------------------------------------------------------- user.resource
1854: if ($space eq 'resource') {
1855: my %restored=&restore();
1856: return $restored{$qualifierrest};
1857: # ----------------------------------------------------------------- user.access
1858: } elsif ($space eq 'access') {
1859: return &allowed($qualifier,$rest);
1860: # ------------------------------------------ user.preferences, user.environment
1861: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1862: return $ENV{join('.',('environment',$qualifierrest))};
1863: # ----------------------------------------------------------------- user.course
1864: } elsif ($space eq 'course') {
1865: return $ENV{join('.',('request.course',$qualifier))};
1866: # ------------------------------------------------------------------- user.role
1867: } elsif ($space eq 'role') {
1868: my ($role,$where)=split(/\./,$ENV{'request.role'});
1869: if ($qualifier eq 'value') {
1870: return $role;
1871: } elsif ($qualifier eq 'extent') {
1872: return $where;
1873: }
1874: # ----------------------------------------------------------------- user.domain
1875: } elsif ($space eq 'domain') {
1876: return $ENV{'user.domain'};
1877: # ------------------------------------------------------------------- user.name
1878: } elsif ($space eq 'name') {
1879: return $ENV{'user.name'};
1880: # ---------------------------------------------------- Any other user namespace
1881: } else {
1882: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1883: my %reply=&get($space,[$item]);
1884: return $reply{$item};
1885: }
1886: } elsif ($realm eq 'request') {
1887: # ------------------------------------------------------------- request.browser
1888: if ($space eq 'browser') {
1889: return $ENV{'browser.'.$qualifier};
1890: # ------------------------------------------------------------ request.filename
1891: } else {
1892: return $ENV{'request.'.$spacequalifierrest};
1893: }
1894: } elsif ($realm eq 'course') {
1895: # ---------------------------------------------------------- course.description
1896: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1897: $spacequalifierrest};
1898: } elsif ($realm eq 'resource') {
1899: if ($ENV{'request.course.id'}) {
1900:
1901: # print '<br>'.$space.' - '.$qualifier.' - '.$spacequalifierrest;
1902:
1903:
1904: # ----------------------------------------------------- Cascading lookup scheme
1905: my $symbp;
1906: if ($symbparm) {
1907: $symbp=$symbparm;
1908: } else {
1909: $symbp=&symbread();
1910: }
1911: my $mapp=(split(/\_\_\_/,$symbp))[0];
1912:
1913: my $symbparm=$symbp.'.'.$spacequalifierrest;
1914: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1915:
1916: my $seclevel=
1917: $ENV{'request.course.id'}.'.['.
1918: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1919: my $seclevelr=
1920: $ENV{'request.course.id'}.'.['.
1921: $ENV{'request.course.sec'}.'].'.$symbparm;
1922: my $seclevelm=
1923: $ENV{'request.course.id'}.'.['.
1924: $ENV{'request.course.sec'}.'].'.$mapparm;
1925:
1926: my $courselevel=
1927: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1928: my $courselevelr=
1929: $ENV{'request.course.id'}.'.'.$symbparm;
1930: my $courselevelm=
1931: $ENV{'request.course.id'}.'.'.$mapparm;
1932:
1933: # ----------------------------------------------------------- first, check user
1934: my %resourcedata=get('resourcedata',
1935: [$courselevelr,$courselevelm,$courselevel]);
1936: if (($resourcedata{$courselevelr}!~/^error\:/) &&
1937: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1938:
1939: if ($resourcedata{$courselevelr}) {
1940: return $resourcedata{$courselevelr}; }
1941: if ($resourcedata{$courselevelm}) {
1942: return $resourcedata{$courselevelm}; }
1943: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1944:
1945: } else {
1946: if ($resourcedata{$courselevelr}!~/No such file/) {
1947: &logthis("<font color=blue>WARNING:".
1948: " Trying to get resource data for ".$ENV{'user.name'}." at "
1949: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1950: "</font>");
1951: }
1952: }
1953:
1954: # -------------------------------------------------------- second, check course
1955:
1956: my $reply=&reply('get:'.
1957: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
1958: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1959: ':resourcedata:'.
1960: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
1961: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
1962: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
1963: if ($reply!~/^error\:/) {
1964: map {
1965: if ($_) { return &unescape($_); }
1966: } split(/\&/,$reply);
1967: }
1968: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
1969: &logthis("<font color=blue>WARNING:".
1970: " Getting ".$reply." asking for ".$varname." for ".
1971: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1972: ' at '.
1973: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
1974: ' from '.
1975: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
1976: "</font>");
1977: }
1978: # ------------------------------------------------------ third, check map parms
1979: my %parmhash=();
1980: my $thisparm='';
1981: if (tie(%parmhash,'GDBM_File',
1982: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
1983: $thisparm=$parmhash{$symbparm};
1984: untie(%parmhash);
1985: }
1986: if ($thisparm) { return $thisparm; }
1987: }
1988:
1989: # --------------------------------------------- last, look in resource metadata
1990:
1991: $spacequalifierrest=~s/\./\_/;
1992: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
1993: if ($metadata) { return $metadata; }
1994: $metadata=&metadata($ENV{'request.filename'},
1995: 'parameter_'.$spacequalifierrest);
1996: if ($metadata) { return $metadata; }
1997:
1998: # ------------------------------------------------------------------ Cascade up
1999:
2000: unless ($space eq '0') {
2001: my ($part,$id)=split(/\_/,$space);
2002: if ($id) {
2003: my $partgeneral=&EXT('resource.'.$part.'.'.$qualifierrest,
2004: $symbparm);
2005: if ($partgeneral) { return $partgeneral; }
2006: } else {
2007: my $resourcegeneral=&EXT('resource.0.'.$qualifierrest,
2008: $symbparm);
2009: if ($resourcegeneral) { return $resourcegeneral; }
2010: }
2011: }
2012:
2013: # ---------------------------------------------------- Any other user namespace
2014: } elsif ($realm eq 'environment') {
2015: # ----------------------------------------------------------------- environment
2016: return $ENV{'environment.'.$spacequalifierrest};
2017: } elsif ($realm eq 'system') {
2018: # ----------------------------------------------------------------- system.time
2019: if ($space eq 'time') {
2020: return time;
2021: }
2022: }
2023: return '';
2024: }
2025:
2026: # ---------------------------------------------------------------- Get metadata
2027:
2028: sub metadata {
2029: my ($uri,$what)=@_;
2030:
2031: $uri=&declutter($uri);
2032: my $filename=$uri;
2033: $uri=~s/\.meta$//;
2034: unless ($metacache{$uri.':keys'}) {
2035: my %metathesekeys=();
2036: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
2037: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
2038: my $parser=HTML::TokeParser->new(\$metastring);
2039: my $token;
2040: undef %metathesekeys;
2041: while ($token=$parser->get_token) {
2042: if ($token->[0] eq 'S') {
2043: if (defined($token->[2]->{'package'})) {
2044: my $package=$token->[2]->{'package'};
2045: my $keyroot='';
2046: if (defined($token->[2]->{'part'})) {
2047: $keyroot.='_'.$token->[2]->{'part'};
2048: }
2049: if (defined($token->[2]->{'id'})) {
2050: $keyroot.='_'.$token->[2]->{'id'};
2051: }
2052: if ($metacache{$uri.':packages'}) {
2053: $metacache{$uri.':packages'}.=','.$package.$keyroot;
2054: } else {
2055: $metacache{$uri.':packages'}=$package.$keyroot;
2056: }
2057: map {
2058: if ($_=~/^$package\&/) {
2059: my ($pack,$name,$subp)=split(/\&/,$_);
2060: my $value=$packagetab{$_};
2061: my $part=$keyroot;
2062: $part=~s/^\_//;
2063: if ($subp eq 'display') {
2064: $value.=' [Part: '.$part.']';
2065: }
2066: my $unikey='parameter'.$keyroot.'_'.$name;
2067: $metathesekeys{$unikey}=1;
2068: $metacache{$uri.':'.$unikey.'.part'}=$part;
2069: unless
2070: (defined($metacache{$uri.':'.$unikey.'.'.$subp})) {
2071: $metacache{$uri.':'.$unikey.'.'.$subp}=$value;
2072: }
2073: }
2074: } keys %packagetab;
2075: } else {
2076: my $entry=$token->[1];
2077: my $unikey=$entry;
2078: if (defined($token->[2]->{'part'})) {
2079: $unikey.='_'.$token->[2]->{'part'};
2080: }
2081: if (defined($token->[2]->{'id'})) {
2082: $unikey.='_'.$token->[2]->{'id'};
2083: }
2084: if (defined($token->[2]->{'name'})) {
2085: $unikey.='_'.$token->[2]->{'name'};
2086: }
2087: $metathesekeys{$unikey}=1;
2088: map {
2089: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
2090: } @{$token->[3]};
2091: unless (
2092: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
2093: ) { $metacache{$uri.':'.$unikey}=
2094: $metacache{$uri.':'.$unikey.'.default'};
2095: }
2096: }
2097: }
2098: }
2099: $metacache{$uri.':keys'}=join(',',keys %metathesekeys);
2100: }
2101: return $metacache{$uri.':'.$what};
2102: }
2103:
2104: # ------------------------------------------------- Update symbolic store links
2105:
2106: sub symblist {
2107: my ($mapname,%newhash)=@_;
2108: $mapname=declutter($mapname);
2109: my %hash;
2110: if (($ENV{'request.course.fn'}) && (%newhash)) {
2111: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2112: &GDBM_WRCREAT,0640)) {
2113: map {
2114: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
2115: } keys %newhash;
2116: if (untie(%hash)) {
2117: return 'ok';
2118: }
2119: }
2120: }
2121: return 'error';
2122: }
2123:
2124: # ------------------------------------------------------ Return symb list entry
2125:
2126: sub symbread {
2127: my $thisfn=shift;
2128: unless ($thisfn) {
2129: $thisfn=$ENV{'request.filename'};
2130: }
2131: $thisfn=declutter($thisfn);
2132: my %hash;
2133: my %bighash;
2134: my $syval='';
2135: if (($ENV{'request.course.fn'}) && ($thisfn)) {
2136: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2137: &GDBM_READER,0640)) {
2138: $syval=$hash{$thisfn};
2139: untie(%hash);
2140: }
2141: # ---------------------------------------------------------- There was an entry
2142: if ($syval) {
2143: unless ($syval=~/\_\d+$/) {
2144: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
2145: &appenv('request.ambiguous' => $thisfn);
2146: return '';
2147: }
2148: $syval.=$1;
2149: }
2150: } else {
2151: # ------------------------------------------------------- Was not in symb table
2152: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
2153: &GDBM_READER,0640)) {
2154: # ---------------------------------------------- Get ID(s) for current resource
2155: my $ids=$bighash{'ids_/res/'.$thisfn};
2156: unless ($ids) {
2157: $ids=$bighash{'ids_/'.$thisfn};
2158: }
2159: if ($ids) {
2160: # ------------------------------------------------------------------- Has ID(s)
2161: my @possibilities=split(/\,/,$ids);
2162: if ($#possibilities==0) {
2163: # ----------------------------------------------- There is only one possibility
2164: my ($mapid,$resid)=split(/\./,$ids);
2165: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
2166: } else {
2167: # ------------------------------------------ There is more than one possibility
2168: my $realpossible=0;
2169: map {
2170: my $file=$bighash{'src_'.$_};
2171: if (&allowed('bre',$file)) {
2172: my ($mapid,$resid)=split(/\./,$_);
2173: if ($bighash{'map_type_'.$mapid} ne 'page') {
2174: $realpossible++;
2175: $syval=declutter($bighash{'map_id_'.$mapid}).
2176: '___'.$resid;
2177: }
2178: }
2179: } @possibilities;
2180: if ($realpossible!=1) { $syval=''; }
2181: }
2182: }
2183: untie(%bighash)
2184: }
2185: }
2186: if ($syval) {
2187: return $syval.'___'.$thisfn;
2188: }
2189: }
2190: &appenv('request.ambiguous' => $thisfn);
2191: return '';
2192: }
2193:
2194: # ---------------------------------------------------------- Return random seed
2195:
2196: sub numval {
2197: my $txt=shift;
2198: $txt=~tr/A-J/0-9/;
2199: $txt=~tr/a-j/0-9/;
2200: $txt=~tr/K-T/0-9/;
2201: $txt=~tr/k-t/0-9/;
2202: $txt=~tr/U-Z/0-5/;
2203: $txt=~tr/u-z/0-5/;
2204: $txt=~s/\D//g;
2205: return int($txt);
2206: }
2207:
2208: sub rndseed {
2209: my ($symb,$courseid,$domain,$username)=@_;
2210: if (!$symb) {
2211: unless ($symb=&symbread()) { return time; }
2212: }
2213: if (!$courseid) { $courseid=$ENV{'request.course.id'};}
2214: if (!$domain) {$domain=$ENV{'user.domain'};}
2215: if (!$username) {$username=$ENV{'user.name'};}
2216: {
2217: use integer;
2218: my $symbchck=unpack("%32C*",$symb) << 27;
2219: my $symbseed=numval($symb) << 22;
2220: my $namechck=unpack("%32C*",$username) << 17;
2221: my $nameseed=numval($username) << 12;
2222: my $domainseed=unpack("%32C*",$domain) << 7;
2223: my $courseseed=unpack("%32C*",$courseid);
2224: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
2225: #uncommenting these lines can break things!
2226: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
2227: #&Apache::lonxml::debug("rndseed :$num:$symb");
2228: return $num;
2229: }
2230: }
2231:
2232: sub ireceipt {
2233: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
2234: my $cuname=unpack("%32C*",$funame);
2235: my $cudom=unpack("%32C*",$fudom);
2236: my $cucourseid=unpack("%32C*",$fucourseid);
2237: my $cusymb=unpack("%32C*",$fusymb);
2238: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
2239: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
2240: ($cunique%$cuname+
2241: $cunique%$cudom+
2242: $cusymb%$cuname+
2243: $cusymb%$cudom+
2244: $cucourseid%$cuname+
2245: $cucourseid%$cudom);
2246: }
2247:
2248: sub receipt {
2249: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2250: $ENV{'request.course.id'},&symbread());
2251: }
2252:
2253: # ------------------------------------------------------------ Serves up a file
2254: # returns either the contents of the file or a -1
2255: sub getfile {
2256: my $file=shift;
2257: &repcopy($file);
2258: if (! -e $file ) { return -1; };
2259: my $fh=Apache::File->new($file);
2260: my $a='';
2261: while (<$fh>) { $a .=$_; }
2262: return $a
2263: }
2264:
2265: sub filelocation {
2266: my ($dir,$file) = @_;
2267: my $location;
2268: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
2269: if ($file=~m:^/~:) { # is a contruction space reference
2270: $location = $file;
2271: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
2272: } else {
2273: $file=~s/^$perlvar{'lonDocRoot'}//;
2274: $file=~s:^/*res::;
2275: if ( !( $file =~ m:^/:) ) {
2276: $location = $dir. '/'.$file;
2277: } else {
2278: $location = '/home/httpd/html/res'.$file;
2279: }
2280: }
2281: $location=~s://+:/:g; # remove duplicate /
2282: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2283: return $location;
2284: }
2285:
2286: sub hreflocation {
2287: my ($dir,$file)=@_;
2288: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2289: my $finalpath=filelocation($dir,$file);
2290: $finalpath=~s/^\/home\/httpd\/html//;
2291: return $finalpath;
2292: } else {
2293: return $file;
2294: }
2295: }
2296:
2297: # ------------------------------------------------------------- Declutters URLs
2298:
2299: sub declutter {
2300: my $thisfn=shift;
2301: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2302: $thisfn=~s/^\///;
2303: $thisfn=~s/^res\///;
2304: return $thisfn;
2305: }
2306:
2307: # -------------------------------------------------------- Escape Special Chars
2308:
2309: sub escape {
2310: my $str=shift;
2311: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2312: return $str;
2313: }
2314:
2315: # ----------------------------------------------------- Un-Escape Special Chars
2316:
2317: sub unescape {
2318: my $str=shift;
2319: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2320: return $str;
2321: }
2322:
2323: # ================================================================ Main Program
2324:
2325: sub BEGIN {
2326: if ($readit ne 'done') {
2327: # ------------------------------------------------------------ Read access.conf
2328: {
2329: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2330:
2331: while (my $configline=<$config>) {
2332: if ($configline =~ /PerlSetVar/) {
2333: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
2334: chomp($varvalue);
2335: $perlvar{$varname}=$varvalue;
2336: }
2337: }
2338: }
2339:
2340: # ------------------------------------------------------------- Read hosts file
2341: {
2342: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2343:
2344: while (my $configline=<$config>) {
2345: chomp($configline);
2346: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2347: $hostname{$id}=$name;
2348: $hostdom{$id}=$domain;
2349: $hostip{$id}=$ip;
2350: if ($role eq 'library') { $libserv{$id}=$name; }
2351: }
2352: }
2353:
2354: # ------------------------------------------------------ Read spare server file
2355: {
2356: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2357:
2358: while (my $configline=<$config>) {
2359: chomp($configline);
2360: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2361: $spareid{$configline}=1;
2362: }
2363: }
2364: }
2365: # ------------------------------------------------------------ Read permissions
2366: {
2367: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2368:
2369: while (my $configline=<$config>) {
2370: chomp($configline);
2371: my ($role,$perm)=split(/ /,$configline);
2372: if ($perm ne '') { $pr{$role}=$perm; }
2373: }
2374: }
2375:
2376: # -------------------------------------------- Read plain texts for permissions
2377: {
2378: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2379:
2380: while (my $configline=<$config>) {
2381: chomp($configline);
2382: my ($short,$plain)=split(/:/,$configline);
2383: if ($plain ne '') { $prp{$short}=$plain; }
2384: }
2385: }
2386:
2387: # ---------------------------------------------------------- Read package table
2388: {
2389: my $config=Apache::File->new("$perlvar{'lonTabDir'}/packages.tab");
2390:
2391: while (my $configline=<$config>) {
2392: chomp($configline);
2393: my ($short,$plain)=split(/:/,$configline);
2394: my ($pack,$name)=split(/\&/,$short);
2395: if ($plain ne '') {
2396: $packagetab{$pack.'&'.$name.'&name'}=$name;
2397: $packagetab{$short}=$plain;
2398: }
2399: }
2400: }
2401:
2402: # ------------------------------------------------------------- Read file types
2403: {
2404: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2405:
2406: while (my $configline=<$config>) {
2407: chomp($configline);
2408: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2409: if ($descr[0] ne '') {
2410: $fe{$ending}=$emb;
2411: $fd{$ending}=join(' ',@descr);
2412: }
2413: }
2414: }
2415:
2416: %metacache=();
2417:
2418: $readit='done';
2419: &logthis('<font color=yellow>INFO: Read configuration</font>');
2420: }
2421: }
2422: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to lonnet.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / lonnet / perl