1: # The LearningOnline Network
2: # TCP networking package
3: #
4: # Functions for use by content handlers:
5: #
6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
9: # plaintext(short) : plain text explanation of short term
10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
19: # set privileges in format of lonTabs/roles.tab for
20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
29: # appenv(hash) : adds hash to session environment
30: # delenv(varname) : deletes all environment entries starting with varname
31: # store(hashref,symb,courseid,udom,uname)
32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
36: # cstore(hashref,symb,courseid,udom,uname)
37: # : same as store but uses the critical interface to
38: # guarentee a store
39: # restore(symb,courseid,udom,uname)
40: # : returns hash for this symb, all args are optional
41: # if they aren't given they will be derived from the
42: # current enviroment
43: #
44: #
45: # for the next 6 functions udom and uname are optional
46: # if supplied they use udom as the domain and uname
47: # as the username for the function (supply a courseid
48: # for the uname if you want a course database)
49: # if not supplied it uses %ENV and looks at
50: # user. attribute for the values
51: #
52: # eget(namesp,arrayref,udom,uname)
53: # : returns hash with keys from array reference filled
54: # in from namesp (encrypts the return communication)
55: # get(namesp,arrayref,udom,uname)
56: # : returns hash with keys from array reference filled
57: # in from namesp
58: # dump(namesp,udom,uname) : dumps the complete namespace into a hash
59: # del(namesp,array,udom,uname) : deletes keys out of array from namesp
60: # put(namesp,hash,udom,uname) : stores hash in namesp
61: # cput(namesp,hash,udom,uname) : critical put
62: #
63: #
64: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
65: # hash
66: # coursedescription(id) : returns and caches course description for id
67: # repcopy(filename) : replicate file
68: # dirlist(url) : gets a directory listing
69: # directcondval(index) : reading condition value of single condition from
70: # state string
71: # condval(index) : value of condition index based on state
72: # EXT(name) : value of a variable
73: # symblist(map,hash) : Updates symbolic storage links
74: # symbread([filename]) : returns the data handle (filename optional)
75: # rndseed([symb,courseid,domain,uname])
76: # : returns a random seed, all arguments are optional,
77: # if they aren't sent it use the environment to derive
78: # them
79: # Note: if symb isn't sent and it can't get one from
80: # &symbread it will use the current time as it's return
81: # receipt() : returns a receipt to be given out to users
82: # getfile(filename) : returns the contents of filename, or a -1 if it can't
83: # be found, replicates and subscribes to the file
84: # filelocation(dir,file) : returns a fairly clean absolute reference to file
85: # from the directory dir
86: # hreflocation(dir,file) : same as filelocation, but for hrefs
87: # log(domain,user,home,msg) : write to permanent log for user
88: # usection(domain,user,courseid) : output of section name/number or '' for
89: # "not in course" and '-1' for "no section"
90: # userenvironment(domain,user,what) : puts out any environment parameter
91: # for a user
92: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
93: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
94: # an array of IDs
95: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
96: # an array of names
97: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
98: # returns a comma separated list of keys
99: #
100: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
101: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
102: # 11/8,11/16,11/18,11/22,11/23,12/22,
103: # 01/06,01/13,02/24,02/28,02/29,
104: # 03/01,03/02,03/06,03/07,03/13,
105: # 04/05,05/29,05/31,06/01,
106: # 06/05,06/26 Gerd Kortemeyer
107: # 06/26 Ben Tyszka
108: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
109: # 08/14 Ben Tyszka
110: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
111: # 10/04 Gerd Kortemeyer
112: # 10/04 Guy Albertelli
113: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
114: # 10/30,10/31,
115: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
116: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
117: # 05/01/01 Guy Albertelli
118: # 05/01,06/01,09/01 Gerd Kortemeyer
119: # 09/01 Guy Albertelli
120: # 09/01,10/01,11/01 Gerd Kortemeyer
121: # 02/27/01 Scott Harrison
122: # 3/2 Gerd Kortemeyer
123: # 3/15,3/19 Scott Harrison
124: # 3/19,3/20 Gerd Kortemeyer
125: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
126: # 5/26,5/28 Gerd Kortemeyer
127: # 5/30 H. K. Ng
128: # 6/1 Gerd Kortemeyer
129: # July Guy Albertelli
130: # 8/4,8/7,8/8,8/9,8/11,8/16,8/17,8/18,8/20,8/23,9/20,9/21,9/26,
131: # 10/2 Gerd Kortemeyer
132:
133: package Apache::lonnet;
134:
135: use strict;
136: use Apache::File;
137: use LWP::UserAgent();
138: use HTTP::Headers;
139: use vars
140: qw(%perlvar %hostname %homecache %hostip %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache %packagetab %courselogs);
141: use IO::Socket;
142: use GDBM_File;
143: use Apache::Constants qw(:common :http);
144: use HTML::TokeParser;
145: use Fcntl qw(:flock);
146:
147: # --------------------------------------------------------------------- Logging
148:
149: sub logthis {
150: my $message=shift;
151: my $execdir=$perlvar{'lonDaemons'};
152: my $now=time;
153: my $local=localtime($now);
154: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
155: print $fh "$local ($$): $message\n";
156: return 1;
157: }
158:
159: sub logperm {
160: my $message=shift;
161: my $execdir=$perlvar{'lonDaemons'};
162: my $now=time;
163: my $local=localtime($now);
164: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
165: print $fh "$now:$message:$local\n";
166: return 1;
167: }
168:
169: # -------------------------------------------------- Non-critical communication
170: sub subreply {
171: my ($cmd,$server)=@_;
172: my $peerfile="$perlvar{'lonSockDir'}/$server";
173: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
174: Type => SOCK_STREAM,
175: Timeout => 10)
176: or return "con_lost";
177: print $client "$cmd\n";
178: my $answer=<$client>;
179: if (!$answer) { $answer="con_lost"; }
180: chomp($answer);
181: return $answer;
182: }
183:
184: sub reply {
185: my ($cmd,$server)=@_;
186: my $answer=subreply($cmd,$server);
187: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
188: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
189: &logthis("<font color=blue>WARNING:".
190: " $cmd to $server returned $answer</font>");
191: }
192: return $answer;
193: }
194:
195: # ----------------------------------------------------------- Send USR1 to lonc
196:
197: sub reconlonc {
198: my $peerfile=shift;
199: &logthis("Trying to reconnect for $peerfile");
200: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
201: if (my $fh=Apache::File->new("$loncfile")) {
202: my $loncpid=<$fh>;
203: chomp($loncpid);
204: if (kill 0 => $loncpid) {
205: &logthis("lonc at pid $loncpid responding, sending USR1");
206: kill USR1 => $loncpid;
207: sleep 1;
208: if (-e "$peerfile") { return; }
209: &logthis("$peerfile still not there, give it another try");
210: sleep 5;
211: if (-e "$peerfile") { return; }
212: &logthis(
213: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
214: } else {
215: &logthis(
216: "<font color=blue>WARNING:".
217: " lonc at pid $loncpid not responding, giving up</font>");
218: }
219: } else {
220: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
221: }
222: }
223:
224: # ------------------------------------------------------ Critical communication
225:
226: sub critical {
227: my ($cmd,$server)=@_;
228: unless ($hostname{$server}) {
229: &logthis("<font color=blue>WARNING:".
230: " Critical message to unknown server ($server)</font>");
231: return 'no_such_host';
232: }
233: my $answer=reply($cmd,$server);
234: if ($answer eq 'con_lost') {
235: my $pingreply=reply('ping',$server);
236: &reconlonc("$perlvar{'lonSockDir'}/$server");
237: my $pongreply=reply('pong',$server);
238: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
239: $answer=reply($cmd,$server);
240: if ($answer eq 'con_lost') {
241: my $now=time;
242: my $middlename=$cmd;
243: $middlename=substr($middlename,0,16);
244: $middlename=~s/\W//g;
245: my $dfilename=
246: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
247: {
248: my $dfh;
249: if ($dfh=Apache::File->new(">$dfilename")) {
250: print $dfh "$cmd\n";
251: }
252: }
253: sleep 2;
254: my $wcmd='';
255: {
256: my $dfh;
257: if ($dfh=Apache::File->new("$dfilename")) {
258: $wcmd=<$dfh>;
259: }
260: }
261: chomp($wcmd);
262: if ($wcmd eq $cmd) {
263: &logthis("<font color=blue>WARNING: ".
264: "Connection buffer $dfilename: $cmd</font>");
265: &logperm("D:$server:$cmd");
266: return 'con_delayed';
267: } else {
268: &logthis("<font color=red>CRITICAL:"
269: ." Critical connection failed: $server $cmd</font>");
270: &logperm("F:$server:$cmd");
271: return 'con_failed';
272: }
273: }
274: }
275: return $answer;
276: }
277:
278: # ---------------------------------------------------------- Append Environment
279:
280: sub appenv {
281: my %newenv=@_;
282: map {
283: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
284: &logthis("<font color=blue>WARNING: ".
285: "Attempt to modify environment ".$_." to ".$newenv{$_}
286: .'</font>');
287: delete($newenv{$_});
288: } else {
289: $ENV{$_}=$newenv{$_};
290: }
291: } keys %newenv;
292:
293: my $lockfh;
294: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
295: return 'error: '.$!;
296: }
297: unless (flock($lockfh,LOCK_EX)) {
298: &logthis("<font color=blue>WARNING: ".
299: 'Could not obtain exclusive lock in appenv: '.$!);
300: $lockfh->close();
301: return 'error: '.$!;
302: }
303:
304: my @oldenv;
305: {
306: my $fh;
307: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
308: return 'error: '.$!;
309: }
310: @oldenv=<$fh>;
311: $fh->close();
312: }
313: for (my $i=0; $i<=$#oldenv; $i++) {
314: chomp($oldenv[$i]);
315: if ($oldenv[$i] ne '') {
316: my ($name,$value)=split(/=/,$oldenv[$i]);
317: unless (defined($newenv{$name})) {
318: $newenv{$name}=$value;
319: }
320: }
321: }
322: {
323: my $fh;
324: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
325: return 'error';
326: }
327: my $newname;
328: foreach $newname (keys %newenv) {
329: print $fh "$newname=$newenv{$newname}\n";
330: }
331: $fh->close();
332: }
333:
334: $lockfh->close();
335: return 'ok';
336: }
337: # ----------------------------------------------------- Delete from Environment
338:
339: sub delenv {
340: my $delthis=shift;
341: my %newenv=();
342: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
343: &logthis("<font color=blue>WARNING: ".
344: "Attempt to delete from environment ".$delthis);
345: return 'error';
346: }
347: my @oldenv;
348: {
349: my $fh;
350: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
351: return 'error';
352: }
353: unless (flock($fh,LOCK_SH)) {
354: &logthis("<font color=blue>WARNING: ".
355: 'Could not obtain shared lock in delenv: '.$!);
356: $fh->close();
357: return 'error: '.$!;
358: }
359: @oldenv=<$fh>;
360: $fh->close();
361: }
362: {
363: my $fh;
364: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
365: return 'error';
366: }
367: unless (flock($fh,LOCK_EX)) {
368: &logthis("<font color=blue>WARNING: ".
369: 'Could not obtain exclusive lock in delenv: '.$!);
370: $fh->close();
371: return 'error: '.$!;
372: }
373: map {
374: unless ($_=~/^$delthis/) { print $fh $_; }
375: } @oldenv;
376: $fh->close();
377: }
378: return 'ok';
379: }
380:
381: # ------------------------------ Find server with least workload from spare.tab
382:
383: sub spareserver {
384: my $tryserver;
385: my $spareserver='';
386: my $lowestserver=100;
387: foreach $tryserver (keys %spareid) {
388: my $answer=reply('load',$tryserver);
389: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
390: $spareserver="http://$hostname{$tryserver}";
391: $lowestserver=$answer;
392: }
393: }
394: return $spareserver;
395: }
396:
397: # --------- Try to authenticate user from domain's lib servers (first this one)
398:
399: sub authenticate {
400: my ($uname,$upass,$udom)=@_;
401: $upass=escape($upass);
402: if (($perlvar{'lonRole'} eq 'library') &&
403: ($udom eq $perlvar{'lonDefDomain'})) {
404: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
405: if ($answer =~ /authorized/) {
406: if ($answer eq 'authorized') {
407: &logthis("User $uname at $udom authorized by local server");
408: return $perlvar{'lonHostID'};
409: }
410: if ($answer eq 'non_authorized') {
411: &logthis("User $uname at $udom rejected by local server");
412: return 'no_host';
413: }
414: }
415: }
416:
417: my $tryserver;
418: foreach $tryserver (keys %libserv) {
419: if ($hostdom{$tryserver} eq $udom) {
420: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
421: if ($answer =~ /authorized/) {
422: if ($answer eq 'authorized') {
423: &logthis("User $uname at $udom authorized by $tryserver");
424: return $tryserver;
425: }
426: if ($answer eq 'non_authorized') {
427: &logthis("User $uname at $udom rejected by $tryserver");
428: return 'no_host';
429: }
430: }
431: }
432: }
433: &logthis("User $uname at $udom could not be authenticated");
434: return 'no_host';
435: }
436:
437: # ---------------------- Find the homebase for a user from domain's lib servers
438:
439: sub homeserver {
440: my ($uname,$udom)=@_;
441:
442: my $index="$uname:$udom";
443: if ($homecache{$index}) { return "$homecache{$index}"; }
444:
445: my $tryserver;
446: foreach $tryserver (keys %libserv) {
447: if ($hostdom{$tryserver} eq $udom) {
448: my $answer=reply("home:$udom:$uname",$tryserver);
449: if ($answer eq 'found') {
450: $homecache{$index}=$tryserver;
451: return $tryserver;
452: }
453: }
454: }
455: return 'no_host';
456: }
457:
458: # ------------------------------------- Find the usernames behind a list of IDs
459:
460: sub idget {
461: my ($udom,@ids)=@_;
462: my %returnhash=();
463:
464: my $tryserver;
465: foreach $tryserver (keys %libserv) {
466: if ($hostdom{$tryserver} eq $udom) {
467: my $idlist=join('&',@ids);
468: $idlist=~tr/A-Z/a-z/;
469: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
470: my @answer=();
471: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
472: @answer=split(/\&/,$reply);
473: } ;
474: my $i;
475: for ($i=0;$i<=$#ids;$i++) {
476: if ($answer[$i]) {
477: $returnhash{$ids[$i]}=$answer[$i];
478: }
479: }
480: }
481: }
482: return %returnhash;
483: }
484:
485: # ------------------------------------- Find the IDs behind a list of usernames
486:
487: sub idrget {
488: my ($udom,@unames)=@_;
489: my %returnhash=();
490: map {
491: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
492: } @unames;
493: return %returnhash;
494: }
495:
496: # ------------------------------- Store away a list of names and associated IDs
497:
498: sub idput {
499: my ($udom,%ids)=@_;
500: my %servers=();
501: map {
502: my $uhom=&homeserver($_,$udom);
503: if ($uhom ne 'no_host') {
504: my $id=&escape($ids{$_});
505: $id=~tr/A-Z/a-z/;
506: my $unam=&escape($_);
507: if ($servers{$uhom}) {
508: $servers{$uhom}.='&'.$id.'='.$unam;
509: } else {
510: $servers{$uhom}=$id.'='.$unam;
511: }
512: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
513: }
514: } keys %ids;
515: map {
516: &critical('idput:'.$udom.':'.$servers{$_},$_);
517: } keys %servers;
518: }
519:
520: # ------------------------------------- Find the section of student in a course
521:
522: sub usection {
523: my ($udom,$unam,$courseid)=@_;
524: $courseid=~s/\_/\//g;
525: $courseid=~s/^(\w)/\/$1/;
526: map {
527: my ($key,$value)=split(/\=/,$_);
528: $key=&unescape($key);
529: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
530: my $section=$1;
531: if ($key eq $courseid.'_st') { $section=''; }
532: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
533: my $now=time;
534: my $notactive=0;
535: if ($start) {
536: if ($now<$start) { $notactive=1; }
537: }
538: if ($end) {
539: if ($now>$end) { $notactive=1; }
540: }
541: unless ($notactive) { return $section; }
542: }
543: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
544: &homeserver($unam,$udom)));
545: return '-1';
546: }
547:
548: # ------------------------------------- Read an entry from a user's environment
549:
550: sub userenvironment {
551: my ($udom,$unam,@what)=@_;
552: my %returnhash=();
553: my @answer=split(/\&/,
554: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
555: &homeserver($unam,$udom)));
556: my $i;
557: for ($i=0;$i<=$#what;$i++) {
558: $returnhash{$what[$i]}=&unescape($answer[$i]);
559: }
560: return %returnhash;
561: }
562:
563: # ----------------------------- Subscribe to a resource, return URL if possible
564:
565: sub subscribe {
566: my $fname=shift;
567: my $author=$fname;
568: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
569: my ($udom,$uname)=split(/\//,$author);
570: my $home=homeserver($uname,$udom);
571: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
572: return 'not_found';
573: }
574: my $answer=reply("sub:$fname",$home);
575: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
576: $answer.=' by '.$home;
577: }
578: return $answer;
579: }
580:
581: # -------------------------------------------------------------- Replicate file
582:
583: sub repcopy {
584: my $filename=shift;
585: $filename=~s/\/+/\//g;
586: my $transname="$filename.in.transfer";
587: if ((-e $filename) || (-e $transname)) { return OK; }
588: my $remoteurl=subscribe($filename);
589: if ($remoteurl =~ /^con_lost by/) {
590: &logthis("Subscribe returned $remoteurl: $filename");
591: return HTTP_SERVICE_UNAVAILABLE;
592: } elsif ($remoteurl eq 'not_found') {
593: &logthis("Subscribe returned not_found: $filename");
594: return HTTP_NOT_FOUND;
595: } elsif ($remoteurl =~ /^rejected by/) {
596: &logthis("Subscribe returned $remoteurl: $filename");
597: return FORBIDDEN;
598: } elsif ($remoteurl eq 'directory') {
599: return OK;
600: } else {
601: my @parts=split(/\//,$filename);
602: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
603: if ($path ne "$perlvar{'lonDocRoot'}/res") {
604: &logthis("Malconfiguration for replication: $filename");
605: return HTTP_BAD_REQUEST;
606: }
607: my $count;
608: for ($count=5;$count<$#parts;$count++) {
609: $path.="/$parts[$count]";
610: if ((-e $path)!=1) {
611: mkdir($path,0777);
612: }
613: }
614: my $ua=new LWP::UserAgent;
615: my $request=new HTTP::Request('GET',"$remoteurl");
616: my $response=$ua->request($request,$transname);
617: if ($response->is_error()) {
618: unlink($transname);
619: my $message=$response->status_line;
620: &logthis("<font color=blue>WARNING:"
621: ." LWP get: $message: $filename</font>");
622: return HTTP_SERVICE_UNAVAILABLE;
623: } else {
624: if ($remoteurl!~/\.meta$/) {
625: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
626: my $mresponse=$ua->request($mrequest,$filename.'.meta');
627: if ($mresponse->is_error()) {
628: unlink($filename.'.meta');
629: &logthis(
630: "<font color=yellow>INFO: No metadata: $filename</font>");
631: }
632: }
633: rename($transname,$filename);
634: return OK;
635: }
636: }
637: }
638:
639: # --------------------------------------------------------- Server Side Include
640:
641: sub ssi {
642:
643: my ($fn,%form)=@_;
644:
645: my $ua=new LWP::UserAgent;
646:
647: my $request;
648:
649: if (%form) {
650: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
651: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
652: } else {
653: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
654: }
655:
656: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
657: my $response=$ua->request($request);
658:
659: return $response->content;
660: }
661:
662: # ------------------------------------------------------------------------- Log
663:
664: sub log {
665: my ($dom,$nam,$hom,$what)=@_;
666: return critical("log:$dom:$nam:$what",$hom);
667: }
668:
669: # ------------------------------------------------------------------ Course Log
670:
671: sub flushcourselogs {
672: &logthis('Flushing course log buffers');
673: map {
674: my $crsid=$_;
675: if (&reply('log:'.$ENV{'course.'.$crsid.'.domain'}.':'.
676: $ENV{'course.'.$crsid.'.num'}.':'.
677: &escape($courselogs{$crsid}),
678: $ENV{'course.'.$crsid.'.home'}) eq 'ok') {
679: delete $courselogs{$crsid};
680: } else {
681: &logthis('Failed to flush log buffer for '.$crsid);
682: if (length($courselogs{$crsid})>40000) {
683: &logthis("<font color=blue>WARNING: Buffer for ".$crsid.
684: " exceeded maximum size, deleting.</font>");
685: delete $courselogs{$crsid};
686: }
687: }
688: } keys %courselogs;
689: }
690:
691: sub courselog {
692: my $what=shift;
693: $what=time.':'.$what;
694: unless ($ENV{'request.course.id'}) { return ''; }
695: if (defined $courselogs{$ENV{'request.course.id'}}) {
696: $courselogs{$ENV{'request.course.id'}}.='&'.$what;
697: } else {
698: $courselogs{$ENV{'request.course.id'}}.=$what;
699: }
700: if (length($courselogs{$ENV{'request.course.id'}})>4048) {
701: &flushcourselogs();
702: }
703: }
704:
705: sub courseacclog {
706: my $fnsymb=shift;
707: unless ($ENV{'request.course.id'}) { return ''; }
708: my $what=$fnsymb.':'.$ENV{'user.name'}.':'.$ENV{'user.domain'};
709: if ($what=~/(problem|exam|quiz|assess|survey|form)$/) {
710: map {
711: if ($_=~/^form\.(.*)/) {
712: $what.=':'.$1.'='.$ENV{$_};
713: }
714: } keys %ENV;
715: }
716: &courselog($what);
717: }
718:
719: # ----------------------------------------------------------- Check out an item
720:
721: sub checkout {
722: my ($symb,$tuname,$tudom,$tcrsid)=@_;
723: my $now=time;
724: my $lonhost=$perlvar{'lonHostID'};
725: my $infostr=&escape(
726: $tuname.'&'.
727: $tudom.'&'.
728: $tcrsid.'&'.
729: $symb.'&'.
730: $now.'&'.$ENV{'REMOTE_ADDR'});
731: my $token=&reply('tmpput:'.$infostr,$lonhost);
732: if ($token=~/^error\:/) {
733: &logthis("<font color=blue>WARNING: ".
734: "Checkout tmpput failed ".$tudom.' - '.$tuname.' - '.$symb.
735: "</font>");
736: return '';
737: }
738:
739: $token=~s/^(\d+)\_.*\_(\d+)$/$1\*$2\*$lonhost/;
740: $token=~tr/a-z/A-Z/;
741:
742: my %infohash=('resource.0.outtoken' => $token,
743: 'resource.0.checkouttime' => $now,
744: 'resource.0.outremote' => $ENV{'REMOTE_ADDR'});
745:
746: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
747: return '';
748: } else {
749: &logthis("<font color=blue>WARNING: ".
750: "Checkout cstore failed ".$tudom.' - '.$tuname.' - '.$symb.
751: "</font>");
752: }
753:
754: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
755: &escape('Checkout '.$infostr.' - '.
756: $token)) ne 'ok') {
757: return '';
758: } else {
759: &logthis("<font color=blue>WARNING: ".
760: "Checkout log failed ".$tudom.' - '.$tuname.' - '.$symb.
761: "</font>");
762: }
763: return $token;
764: }
765:
766: # ------------------------------------------------------------ Check in an item
767:
768: sub checkin {
769: my $token=shift;
770: my $now=time;
771: my ($ta,$tb,$lonhost)=split(/\*/,$token);
772: $lonhost=~tr/A-Z/a-z/;
773: my $dtoken=$ta.'_'.$hostip{$lonhost}.'_'.$tb;
774: $dtoken=~s/\W/\_/g;
775: my ($tuname,$tudom,$tcrsid,$symb,$chtim,$rmaddr)=
776: split(/\&/,&unescape(&reply('tmpget:'.$dtoken,$lonhost)));
777:
778: unless (($tuname) && ($tudom)) {
779: &logthis('Check in '.$token.' ('.$dtoken.') failed');
780: return '';
781: }
782:
783: unless (&allowed('mgr',$tcrsid)) {
784: &logthis('Check in '.$token.' ('.$dtoken.') unauthorized: '.
785: $ENV{'user.name'}.' - '.$ENV{'user.domain'});
786: return '';
787: }
788:
789: my %infohash=('resource.0.intoken' => $token,
790: 'resource.0.checkintime' => $now,
791: 'resource.0.inremote' => $ENV{'REMOTE_ADDR'});
792:
793: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
794: return '';
795: }
796:
797: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
798: &escape('Checkin - '.$token)) ne 'ok') {
799: return '';
800: }
801:
802: return ($symb,$tuname,$tudom,$tcrsid);
803: }
804:
805: # --------------------------------------------- Set Expire Date for Spreadsheet
806:
807: sub expirespread {
808: my ($uname,$udom,$stype,$usymb)=@_;
809: my $cid=$ENV{'request.course.id'};
810: if ($cid) {
811: my $now=time;
812: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
813: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
814: $ENV{'course.'.$cid.'.num'}.
815: ':nohist_expirationdates:'.
816: &escape($key).'='.$now,
817: $ENV{'course.'.$cid.'.home'})
818: }
819: return 'ok';
820: }
821:
822: # ----------------------------------------------------- Devalidate Spreadsheets
823:
824: sub devalidate {
825: my $symb=shift;
826: my $cid=$ENV{'request.course.id'};
827: if ($cid) {
828: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
829: my $status=
830: &del('nohist_calculatedsheet',
831: [$key.'studentcalc'],
832: $ENV{'course.'.$cid.'.domain'},
833: $ENV{'course.'.$cid.'.num'})
834: .' '.
835: &del('nohist_calculatedsheets_'.$cid,
836: [$key.'assesscalc:'.$symb]);
837: unless ($status eq 'ok ok') {
838: &logthis('Could not devalidate spreadsheet '.
839: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
840: $symb.': '.$status);
841: }
842: }
843: }
844:
845: # ----------------------------------------------------------------------- Store
846:
847: sub store {
848: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
849: my $home='';
850:
851: if ($stuname) {
852: $home=&homeserver($stuname,$domain);
853: }
854:
855: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
856:
857: &devalidate($symb);
858:
859: $symb=escape($symb);
860: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
861: if (!$domain) { $domain=$ENV{'user.domain'}; }
862: if (!$stuname) { $stuname=$ENV{'user.name'}; }
863: if (!$home) { $home=$ENV{'user.home'}; }
864: my $namevalue='';
865: map {
866: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
867: } keys %$storehash;
868: $namevalue=~s/\&$//;
869: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
870: }
871:
872: # -------------------------------------------------------------- Critical Store
873:
874: sub cstore {
875: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
876: my $home='';
877:
878: if ($stuname) {
879: $home=&homeserver($stuname,$domain);
880: }
881:
882: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
883:
884: &devalidate($symb);
885:
886: $symb=escape($symb);
887: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
888: if (!$domain) { $domain=$ENV{'user.domain'}; }
889: if (!$stuname) { $stuname=$ENV{'user.name'}; }
890: if (!$home) { $home=$ENV{'user.home'}; }
891:
892: my $namevalue='';
893: map {
894: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
895: } keys %$storehash;
896: $namevalue=~s/\&$//;
897: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
898: }
899:
900: # --------------------------------------------------------------------- Restore
901:
902: sub restore {
903: my ($symb,$namespace,$domain,$stuname) = @_;
904: my $home='';
905:
906: if ($stuname) {
907: $home=&homeserver($stuname,$domain);
908: }
909:
910: if (!$symb) {
911: unless ($symb=escape(&symbread())) { return ''; }
912: } else {
913: $symb=&escape($symb);
914: }
915: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
916: if (!$domain) { $domain=$ENV{'user.domain'}; }
917: if (!$stuname) { $stuname=$ENV{'user.name'}; }
918: if (!$home) { $home=$ENV{'user.home'}; }
919: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
920:
921: my %returnhash=();
922: map {
923: my ($name,$value)=split(/\=/,$_);
924: $returnhash{&unescape($name)}=&unescape($value);
925: } split(/\&/,$answer);
926: my $version;
927: for ($version=1;$version<=$returnhash{'version'};$version++) {
928: map {
929: $returnhash{$_}=$returnhash{$version.':'.$_};
930: } split(/\:/,$returnhash{$version.':keys'});
931: }
932: return %returnhash;
933: }
934:
935: # ---------------------------------------------------------- Course Description
936:
937: sub coursedescription {
938: my $courseid=shift;
939: $courseid=~s/^\///;
940: $courseid=~s/\_/\//g;
941: my ($cdomain,$cnum)=split(/\//,$courseid);
942: my $chome=&homeserver($cnum,$cdomain);
943: if ($chome ne 'no_host') {
944: my %returnhash=&dump('environment',$cdomain,$cnum);
945: if (!exists($returnhash{'con_lost'})) {
946: my $normalid=$cdomain.'_'.$cnum;
947: my %envhash=();
948: $returnhash{'home'}= $chome;
949: $returnhash{'domain'} = $cdomain;
950: $returnhash{'num'} = $cnum;
951: while (my ($name,$value) = each %returnhash) {
952: $envhash{'course.'.$normalid.'.'.$name}=$value;
953: }
954: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
955: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
956: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
957: $envhash{'course.'.$normalid.'.last_cache'}=time;
958: $envhash{'course.'.$normalid.'.home'}=$chome;
959: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
960: $envhash{'course.'.$normalid.'.num'}=$cnum;
961: &appenv(%envhash);
962: return %returnhash;
963: }
964: }
965: return ();
966: }
967:
968: # -------------------------------------------------------- Get user privileges
969:
970: sub rolesinit {
971: my ($domain,$username,$authhost)=@_;
972: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
973: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
974: my %allroles=();
975: my %thesepriv=();
976: my $now=time;
977: my $userroles="user.login.time=$now\n";
978: my $thesestr;
979:
980: if ($rolesdump ne '') {
981: map {
982: if ($_!~/^rolesdef\&/) {
983: my ($area,$role)=split(/=/,$_);
984: $area=~s/\_\w\w$//;
985: my ($trole,$tend,$tstart)=split(/_/,$role);
986: $userroles.='user.role.'.$trole.'.'.$area.'='.
987: $tstart.'.'.$tend."\n";
988: if ($tend!=0) {
989: if ($tend<$now) {
990: $trole='';
991: }
992: }
993: if ($tstart!=0) {
994: if ($tstart>$now) {
995: $trole='';
996: }
997: }
998: if (($area ne '') && ($trole ne '')) {
999: my $spec=$trole.'.'.$area;
1000: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
1001: if ($trole =~ /^cr\//) {
1002: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
1003: my $homsvr=homeserver($rauthor,$rdomain);
1004: if ($hostname{$homsvr} ne '') {
1005: my $roledef=
1006: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
1007: $homsvr);
1008: if (($roledef ne 'con_lost') && ($roledef ne '')) {
1009: my ($syspriv,$dompriv,$coursepriv)=
1010: split(/\_/,unescape($roledef));
1011: $allroles{'cm./'}.=':'.$syspriv;
1012: $allroles{$spec.'./'}.=':'.$syspriv;
1013: if ($tdomain ne '') {
1014: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
1015: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
1016: if ($trest ne '') {
1017: $allroles{'cm.'.$area}.=':'.$coursepriv;
1018: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
1019: }
1020: }
1021: }
1022: }
1023: } else {
1024: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
1025: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
1026: if ($tdomain ne '') {
1027: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1028: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1029: if ($trest ne '') {
1030: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
1031: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
1032: }
1033: }
1034: }
1035: }
1036: }
1037: } split(/&/,$rolesdump);
1038: my $adv=0;
1039: my $author=0;
1040: map {
1041: %thesepriv=();
1042: if (($_!~/^st/) && ($_!~/^ta/) && ($_!~/^cm/)) { $adv=1; }
1043: if (($_=~/^au/) || ($_=~/^ca/)) { $author=1; }
1044: map {
1045: if ($_ ne '') {
1046: my ($privilege,$restrictions)=split(/&/,$_);
1047: if ($restrictions eq '') {
1048: $thesepriv{$privilege}='F';
1049: } else {
1050: if ($thesepriv{$privilege} ne 'F') {
1051: $thesepriv{$privilege}.=$restrictions;
1052: }
1053: }
1054: }
1055: } split(/:/,$allroles{$_});
1056: $thesestr='';
1057: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
1058: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
1059: } keys %allroles;
1060: $userroles.='user.adv='.$adv."\n".
1061: 'user.author='.$author."\n";
1062: $ENV{'user.adv'}=$adv;
1063: }
1064: return $userroles;
1065: }
1066:
1067: # --------------------------------------------------------------- get interface
1068:
1069: sub get {
1070: my ($namespace,$storearr,$udomain,$uname)=@_;
1071: my $items='';
1072: map {
1073: $items.=escape($_).'&';
1074: } @$storearr;
1075: $items=~s/\&$//;
1076: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1077: if (!$uname) { $uname=$ENV{'user.name'}; }
1078: my $uhome=&homeserver($uname,$udomain);
1079:
1080: my $rep=&reply("get:$udomain:$uname:$namespace:$items",$uhome);
1081: my @pairs=split(/\&/,$rep);
1082: my %returnhash=();
1083: my $i=0;
1084: map {
1085: $returnhash{$_}=unescape($pairs[$i]);
1086: $i++;
1087: } @$storearr;
1088: return %returnhash;
1089: }
1090:
1091: # --------------------------------------------------------------- del interface
1092:
1093: sub del {
1094: my ($namespace,$storearr,$udomain,$uname)=@_;
1095: my $items='';
1096: map {
1097: $items.=escape($_).'&';
1098: } @$storearr;
1099: $items=~s/\&$//;
1100: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1101: if (!$uname) { $uname=$ENV{'user.name'}; }
1102: my $uhome=&homeserver($uname,$udomain);
1103:
1104: return &reply("del:$udomain:$uname:$namespace:$items",$uhome);
1105: }
1106:
1107: # -------------------------------------------------------------- dump interface
1108:
1109: sub dump {
1110: my ($namespace,$udomain,$uname)=@_;
1111: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1112: if (!$uname) { $uname=$ENV{'user.name'}; }
1113: my $uhome=&homeserver($uname,$udomain);
1114: my $rep=reply("dump:$udomain:$uname:$namespace",$uhome);
1115: my @pairs=split(/\&/,$rep);
1116: my %returnhash=();
1117: map {
1118: my ($key,$value)=split(/=/,$_);
1119: $returnhash{unescape($key)}=unescape($value);
1120: } @pairs;
1121: return %returnhash;
1122: }
1123:
1124: # --------------------------------------------------------------- put interface
1125:
1126: sub put {
1127: my ($namespace,$storehash,$udomain,$uname)=@_;
1128: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1129: if (!$uname) { $uname=$ENV{'user.name'}; }
1130: my $uhome=&homeserver($uname,$udomain);
1131: my $items='';
1132: map {
1133: $items.=&escape($_).'='.&escape($$storehash{$_}).'&';
1134: } keys %$storehash;
1135: $items=~s/\&$//;
1136: return &reply("put:$udomain:$uname:$namespace:$items",$uhome);
1137: }
1138:
1139: # ------------------------------------------------------ critical put interface
1140:
1141: sub cput {
1142: my ($namespace,$storehash,$udomain,$uname)=@_;
1143: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1144: if (!$uname) { $uname=$ENV{'user.name'}; }
1145: my $uhome=&homeserver($uname,$udomain);
1146: my $items='';
1147: map {
1148: $items.=escape($_).'='.escape($$storehash{$_}).'&';
1149: } keys %$storehash;
1150: $items=~s/\&$//;
1151: return &critical("put:$udomain:$uname:$namespace:$items",$uhome);
1152: }
1153:
1154: # -------------------------------------------------------------- eget interface
1155:
1156: sub eget {
1157: my ($namespace,$storearr,$udomain,$uname)=@_;
1158: my $items='';
1159: map {
1160: $items.=escape($_).'&';
1161: } @$storearr;
1162: $items=~s/\&$//;
1163: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1164: if (!$uname) { $uname=$ENV{'user.name'}; }
1165: my $uhome=&homeserver($uname,$udomain);
1166: my $rep=&reply("eget:$udomain:$uname:$namespace:$items",$uhome);
1167: my @pairs=split(/\&/,$rep);
1168: my %returnhash=();
1169: my $i=0;
1170: map {
1171: $returnhash{$_}=unescape($pairs[$i]);
1172: $i++;
1173: } @$storearr;
1174: return %returnhash;
1175: }
1176:
1177: # ------------------------------------------------- Check for a user privilege
1178:
1179: sub allowed {
1180: my ($priv,$uri)=@_;
1181:
1182: my $orguri=$uri;
1183: $uri=&declutter($uri);
1184:
1185: # Free bre access to adm and meta resources
1186:
1187: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1188: return 'F';
1189: }
1190:
1191: # Free bre to public access
1192:
1193: if ($priv eq 'bre') {
1194: if (&metadata($uri,'copyright') eq 'public') { return 'F'; }
1195: }
1196:
1197: my $thisallowed='';
1198: my $statecond=0;
1199: my $courseprivid='';
1200:
1201: # Course
1202:
1203: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1204: $thisallowed.=$1;
1205: }
1206:
1207: # Domain
1208:
1209: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1210: =~/$priv\&([^\:]*)/) {
1211: $thisallowed.=$1;
1212: }
1213:
1214: # Course: uri itself is a course
1215: my $courseuri=$uri;
1216: $courseuri=~s/\_(\d)/\/$1/;
1217: $courseuri=~s/^([^\/])/\/$1/;
1218:
1219: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1220: =~/$priv\&([^\:]*)/) {
1221: $thisallowed.=$1;
1222: }
1223:
1224: # Full access at system, domain or course-wide level? Exit.
1225:
1226: if ($thisallowed=~/F/) {
1227: return 'F';
1228: }
1229:
1230: # If this is generating or modifying users, exit with special codes
1231:
1232: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
1233: return $thisallowed;
1234: }
1235: #
1236: # Gathered so far: system, domain and course wide privileges
1237: #
1238: # Course: See if uri or referer is an individual resource that is part of
1239: # the course
1240:
1241: if ($ENV{'request.course.id'}) {
1242: $courseprivid=$ENV{'request.course.id'};
1243: if ($ENV{'request.course.sec'}) {
1244: $courseprivid.='/'.$ENV{'request.course.sec'};
1245: }
1246: $courseprivid=~s/\_/\//;
1247: my $checkreferer=1;
1248: my @uriparts=split(/\//,$uri);
1249: my $filename=$uriparts[$#uriparts];
1250: my $pathname=$uri;
1251: $pathname=~s/\/$filename$//;
1252: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1253: /\&$filename\:([\d\|]+)\&/) {
1254: $statecond=$1;
1255: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1256: =~/$priv\&([^\:]*)/) {
1257: $thisallowed.=$1;
1258: $checkreferer=0;
1259: }
1260: }
1261:
1262: if ($checkreferer) {
1263: my $refuri=$ENV{'httpref.'.$orguri};
1264:
1265: unless ($refuri) {
1266: map {
1267: if ($_=~/^httpref\..*\*/) {
1268: my $pattern=$_;
1269: $pattern=~s/^httpref\.\/res\///;
1270: $pattern=~s/\*/\[\^\/\]\+/g;
1271: $pattern=~s/\//\\\//g;
1272: if ($orguri=~/$pattern/) {
1273: $refuri=$ENV{$_};
1274: }
1275: }
1276: } keys %ENV;
1277: }
1278: if ($refuri) {
1279: $refuri=&declutter($refuri);
1280: my @uriparts=split(/\//,$refuri);
1281: my $filename=$uriparts[$#uriparts];
1282: my $pathname=$refuri;
1283: $pathname=~s/\/$filename$//;
1284: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1285: /\&$filename\:([\d\|]+)\&/) {
1286: my $refstatecond=$1;
1287: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1288: =~/$priv\&([^\:]*)/) {
1289: $thisallowed.=$1;
1290: $uri=$refuri;
1291: $statecond=$refstatecond;
1292: }
1293: }
1294: }
1295: }
1296: }
1297:
1298: #
1299: # Gathered now: all privileges that could apply, and condition number
1300: #
1301: #
1302: # Full or no access?
1303: #
1304:
1305: if ($thisallowed=~/F/) {
1306: return 'F';
1307: }
1308:
1309: unless ($thisallowed) {
1310: return '';
1311: }
1312:
1313: # Restrictions exist, deal with them
1314: #
1315: # C:according to course preferences
1316: # R:according to resource settings
1317: # L:unless locked
1318: # X:according to user session state
1319: #
1320:
1321: # Possibly locked functionality, check all courses
1322: # Locks might take effect only after 10 minutes cache expiration for other
1323: # courses, and 2 minutes for current course
1324:
1325: my $envkey;
1326: if ($thisallowed=~/L/) {
1327: foreach $envkey (keys %ENV) {
1328: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1329: my $courseid=$2;
1330: my $roleid=$1.'.'.$2;
1331: $courseid=~s/^\///;
1332: my $expiretime=600;
1333: if ($ENV{'request.role'} eq $roleid) {
1334: $expiretime=120;
1335: }
1336: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1337: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1338: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1339: &coursedescription($courseid);
1340: }
1341: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1342: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1343: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1344: &log($ENV{'user.domain'},$ENV{'user.name'},
1345: $ENV{'user.host'},
1346: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1347: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1348: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1349: return '';
1350: }
1351: }
1352: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1353: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1354: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1355: &log($ENV{'user.domain'},$ENV{'user.name'},
1356: $ENV{'user.host'},
1357: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1358: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1359: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1360: return '';
1361: }
1362: }
1363: }
1364: }
1365: }
1366:
1367: #
1368: # Rest of the restrictions depend on selected course
1369: #
1370:
1371: unless ($ENV{'request.course.id'}) {
1372: return '1';
1373: }
1374:
1375: #
1376: # Now user is definitely in a course
1377: #
1378:
1379:
1380: # Course preferences
1381:
1382: if ($thisallowed=~/C/) {
1383: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1384: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1385: =~/\,$rolecode\,/) {
1386: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1387: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1388: $ENV{'request.course.id'});
1389: return '';
1390: }
1391: }
1392:
1393: # Resource preferences
1394:
1395: if ($thisallowed=~/R/) {
1396: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1397: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1398: if (-e $filename) {
1399: my @content;
1400: {
1401: my $fh=Apache::File->new($filename);
1402: @content=<$fh>;
1403: }
1404: if (join('',@content)=~
1405: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1406: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1407: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1408: return '';
1409:
1410: }
1411: }
1412: }
1413:
1414: # Restricted by state?
1415:
1416: if ($thisallowed=~/X/) {
1417: if (&condval($statecond)) {
1418: return '2';
1419: } else {
1420: return '';
1421: }
1422: }
1423:
1424: return 'F';
1425: }
1426:
1427: # ----------------------------------------------------------------- Define Role
1428:
1429: sub definerole {
1430: if (allowed('mcr','/')) {
1431: my ($rolename,$sysrole,$domrole,$courole)=@_;
1432: map {
1433: my ($crole,$cqual)=split(/\&/,$_);
1434: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1435: if ($pr{'cr:s'}=~/$crole\&/) {
1436: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1437: return "refused:s:$crole&$cqual";
1438: }
1439: }
1440: } split('/',$sysrole);
1441: map {
1442: my ($crole,$cqual)=split(/\&/,$_);
1443: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1444: if ($pr{'cr:d'}=~/$crole\&/) {
1445: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1446: return "refused:d:$crole&$cqual";
1447: }
1448: }
1449: } split('/',$domrole);
1450: map {
1451: my ($crole,$cqual)=split(/\&/,$_);
1452: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1453: if ($pr{'cr:c'}=~/$crole\&/) {
1454: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1455: return "refused:c:$crole&$cqual";
1456: }
1457: }
1458: } split('/',$courole);
1459: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1460: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1461: "rolesdef_$rolename=".
1462: escape($sysrole.'_'.$domrole.'_'.$courole);
1463: return reply($command,$ENV{'user.home'});
1464: } else {
1465: return 'refused';
1466: }
1467: }
1468:
1469: # ---------------- Make a metadata query against the network of library servers
1470:
1471: sub metadata_query {
1472: my ($query,$custom,$customshow)=@_;
1473: # need to put in a library server loop here and return a hash
1474: my %rhash;
1475: for my $server (keys %libserv) {
1476: unless ($custom or $customshow) {
1477: my $reply=&reply("querysend:".&escape($query),$server);
1478: $rhash{$server}=$reply;
1479: }
1480: else {
1481: my $reply=&reply("querysend:".&escape($query).':'.
1482: &escape($custom).':'.&escape($customshow),
1483: $server);
1484: $rhash{$server}=$reply;
1485: }
1486: }
1487: return \%rhash;
1488: }
1489:
1490: # ------------------------------------------------------------------ Plain Text
1491:
1492: sub plaintext {
1493: my $short=shift;
1494: return $prp{$short};
1495: }
1496:
1497: # ------------------------------------------------------------------ Plain Text
1498:
1499: sub fileembstyle {
1500: my $ending=shift;
1501: return $fe{$ending};
1502: }
1503:
1504: # ------------------------------------------------------------ Description Text
1505:
1506: sub filedescription {
1507: my $ending=shift;
1508: return $fd{$ending};
1509: }
1510:
1511: # ----------------------------------------------------------------- Assign Role
1512:
1513: sub assignrole {
1514: my ($udom,$uname,$url,$role,$end,$start)=@_;
1515: my $mrole;
1516: if ($role =~ /^cr\//) {
1517: unless (&allowed('ccr',$url)) {
1518: &logthis('Refused custom assignrole: '.
1519: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1520: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1521: return 'refused';
1522: }
1523: $mrole='cr';
1524: } else {
1525: my $cwosec=$url;
1526: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1527: unless (&allowed('c'.$role,$cwosec)) {
1528: &logthis('Refused assignrole: '.
1529: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1530: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1531: return 'refused';
1532: }
1533: $mrole=$role;
1534: }
1535: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1536: "$udom:$uname:$url".'_'."$mrole=$role";
1537: if ($end) { $command.='_'.$end; }
1538: if ($start) {
1539: if ($end) {
1540: $command.='_'.$start;
1541: } else {
1542: $command.='_0_'.$start;
1543: }
1544: }
1545: return &reply($command,&homeserver($uname,$udom));
1546: }
1547:
1548: # --------------------------------------------------------------- Modify a user
1549:
1550:
1551: sub modifyuser {
1552: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1553: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1554: $umode.', '.$first.', '.$middle.', '.
1555: $last.', '.$gene.' by '.
1556: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1557: my $uhome=&homeserver($uname,$udom);
1558: # ----------------------------------------------------------------- Create User
1559: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1560: my $unhome='';
1561: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1562: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1563: } else {
1564: my $tryserver;
1565: my $loadm=10000000;
1566: foreach $tryserver (keys %libserv) {
1567: if ($hostdom{$tryserver} eq $udom) {
1568: my $answer=reply('load',$tryserver);
1569: if (($answer=~/\d+/) && ($answer<$loadm)) {
1570: $loadm=$answer;
1571: $unhome=$tryserver;
1572: }
1573: }
1574: }
1575: }
1576: if (($unhome eq '') || ($unhome eq 'no_host')) {
1577: return 'error: find home';
1578: }
1579: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1580: &escape($upass),$unhome);
1581: unless ($reply eq 'ok') {
1582: return 'error: '.$reply;
1583: }
1584: $uhome=&homeserver($uname,$udom);
1585: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1586: return 'error: verify home';
1587: }
1588: }
1589: # ---------------------------------------------------------------------- Add ID
1590: if ($uid) {
1591: $uid=~tr/A-Z/a-z/;
1592: my %uidhash=&idrget($udom,$uname);
1593: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1594: unless ($uid eq $uidhash{$uname}) {
1595: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1596: }
1597: } else {
1598: &idput($udom,($uname => $uid));
1599: }
1600: }
1601: # -------------------------------------------------------------- Add names, etc
1602: my %names=&get('environment',
1603: ['firstname','middlename','lastname','generation'],
1604: $udom,$uname);
1605: if ($first) { $names{'firstname'} = $first; }
1606: if ($middle) { $names{'middlename'} = $middle; }
1607: if ($last) { $names{'lastname'} = $last; }
1608: if ($gene) { $names{'generation'} = $gene; }
1609: my $reply = &put('environment', \%names, $udom,$uname);
1610: if ($reply ne 'ok') { return 'error: '.$reply; }
1611: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1612: $umode.', '.$first.', '.$middle.', '.
1613: $last.', '.$gene.' by '.
1614: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1615: return 'ok';
1616: }
1617:
1618: # -------------------------------------------------------------- Modify student
1619:
1620: sub modifystudent {
1621: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1622: $end,$start)=@_;
1623: my $cid='';
1624: unless ($cid=$ENV{'request.course.id'}) {
1625: return 'not_in_class';
1626: }
1627: # --------------------------------------------------------------- Make the user
1628: my $reply=&modifyuser
1629: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1630: unless ($reply eq 'ok') { return $reply; }
1631: my $uhome=&homeserver($uname,$udom);
1632: if (($uhome eq '') || ($uhome eq 'no_host')) {
1633: return 'error: no such user';
1634: }
1635: # -------------------------------------------------- Add student to course list
1636: $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1637: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1638: &escape($uname.':'.$udom).'='.
1639: &escape($end.':'.$start),
1640: $ENV{'course.'.$cid.'.home'});
1641: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1642: return 'error: '.$reply;
1643: }
1644: # ---------------------------------------------------- Add student role to user
1645: my $uurl='/'.$cid;
1646: $uurl=~s/\_/\//g;
1647: if ($usec) {
1648: $uurl.='/'.$usec;
1649: }
1650: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1651: }
1652:
1653: # ------------------------------------------------- Write to course preferences
1654:
1655: sub writecoursepref {
1656: my ($courseid,%prefs)=@_;
1657: $courseid=~s/^\///;
1658: $courseid=~s/\_/\//g;
1659: my ($cdomain,$cnum)=split(/\//,$courseid);
1660: my $chome=homeserver($cnum,$cdomain);
1661: if (($chome eq '') || ($chome eq 'no_host')) {
1662: return 'error: no such course';
1663: }
1664: my $cstring='';
1665: map {
1666: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1667: } keys %prefs;
1668: $cstring=~s/\&$//;
1669: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1670: }
1671:
1672: # ---------------------------------------------------------- Make/modify course
1673:
1674: sub createcourse {
1675: my ($udom,$description,$url)=@_;
1676: $url=&declutter($url);
1677: my $cid='';
1678: unless (&allowed('ccc',$ENV{'user.domain'})) {
1679: return 'refused';
1680: }
1681: unless ($udom eq $ENV{'user.domain'}) {
1682: return 'refused';
1683: }
1684: # ------------------------------------------------------------------- Create ID
1685: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1686: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1687: # ----------------------------------------------- Make sure that does not exist
1688: my $uhome=&homeserver($uname,$udom);
1689: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1690: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1691: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1692: $uhome=&homeserver($uname,$udom);
1693: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1694: return 'error: unable to generate unique course-ID';
1695: }
1696: }
1697: # ------------------------------------------------------------- Make the course
1698: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1699: $ENV{'user.home'});
1700: unless ($reply eq 'ok') { return 'error: '.$reply; }
1701: $uhome=&homeserver($uname,$udom);
1702: if (($uhome eq '') || ($uhome eq 'no_host')) {
1703: return 'error: no such course';
1704: }
1705: &writecoursepref($udom.'_'.$uname,
1706: ('description' => $description,
1707: 'url' => $url));
1708: return '/'.$udom.'/'.$uname;
1709: }
1710:
1711: # ---------------------------------------------------------- Assign Custom Role
1712:
1713: sub assigncustomrole {
1714: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1715: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1716: $end,$start);
1717: }
1718:
1719: # ----------------------------------------------------------------- Revoke Role
1720:
1721: sub revokerole {
1722: my ($udom,$uname,$url,$role)=@_;
1723: my $now=time;
1724: return &assignrole($udom,$uname,$url,$role,$now);
1725: }
1726:
1727: # ---------------------------------------------------------- Revoke Custom Role
1728:
1729: sub revokecustomrole {
1730: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1731: my $now=time;
1732: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1733: }
1734:
1735: # ------------------------------------------------------------ Directory lister
1736:
1737: sub dirlist {
1738: my $uri=shift;
1739: $uri=~s/^\///;
1740: $uri=~s/\/$//;
1741: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1742: if ($udom) {
1743: if ($uname) {
1744: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1745: homeserver($uname,$udom));
1746: return split(/:/,$listing);
1747: } else {
1748: my $tryserver;
1749: my %allusers=();
1750: foreach $tryserver (keys %libserv) {
1751: if ($hostdom{$tryserver} eq $udom) {
1752: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1753: $tryserver);
1754: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1755: && ($listing ne 'con_lost')) {
1756: map {
1757: my ($entry,@stat)=split(/&/,$_);
1758: $allusers{$entry}=1;
1759: } split(/:/,$listing);
1760: }
1761: }
1762: }
1763: my $alluserstr='';
1764: map {
1765: $alluserstr.=$_.'&user:';
1766: } sort keys %allusers;
1767: $alluserstr=~s/:$//;
1768: return split(/:/,$alluserstr);
1769: }
1770: } else {
1771: my $tryserver;
1772: my %alldom=();
1773: foreach $tryserver (keys %libserv) {
1774: $alldom{$hostdom{$tryserver}}=1;
1775: }
1776: my $alldomstr='';
1777: map {
1778: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1779: } sort keys %alldom;
1780: $alldomstr=~s/:$//;
1781: return split(/:/,$alldomstr);
1782: }
1783: }
1784:
1785: # -------------------------------------------------------- Value of a Condition
1786:
1787: sub directcondval {
1788: my $number=shift;
1789: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1790: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1791: } else {
1792: return 2;
1793: }
1794: }
1795:
1796: sub condval {
1797: my $condidx=shift;
1798: my $result=0;
1799: my $allpathcond='';
1800: map {
1801: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1802: $allpathcond.=
1803: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1804: }
1805: } split(/\|/,$condidx);
1806: $allpathcond=~s/\|$//;
1807: if ($ENV{'request.course.id'}) {
1808: if ($allpathcond) {
1809: my $operand='|';
1810: my @stack;
1811: map {
1812: if ($_ eq '(') {
1813: push @stack,($operand,$result)
1814: } elsif ($_ eq ')') {
1815: my $before=pop @stack;
1816: if (pop @stack eq '&') {
1817: $result=$result>$before?$before:$result;
1818: } else {
1819: $result=$result>$before?$result:$before;
1820: }
1821: } elsif (($_ eq '&') || ($_ eq '|')) {
1822: $operand=$_;
1823: } else {
1824: my $new=directcondval($_);
1825: if ($operand eq '&') {
1826: $result=$result>$new?$new:$result;
1827: } else {
1828: $result=$result>$new?$result:$new;
1829: }
1830: }
1831: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1832: }
1833: }
1834: return $result;
1835: }
1836:
1837: # --------------------------------------------------------- Value of a Variable
1838:
1839: sub EXT {
1840: my ($varname,$symbparm)=@_;
1841: unless ($varname) { return ''; }
1842: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1843: my $rest;
1844: if ($therest[0]) {
1845: $rest=join('.',@therest);
1846: } else {
1847: $rest='';
1848: }
1849: my $qualifierrest=$qualifier;
1850: if ($rest) { $qualifierrest.='.'.$rest; }
1851: my $spacequalifierrest=$space;
1852: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1853: if ($realm eq 'user') {
1854: # --------------------------------------------------------------- user.resource
1855: if ($space eq 'resource') {
1856: my %restored=&restore();
1857: return $restored{$qualifierrest};
1858: # ----------------------------------------------------------------- user.access
1859: } elsif ($space eq 'access') {
1860: return &allowed($qualifier,$rest);
1861: # ------------------------------------------ user.preferences, user.environment
1862: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1863: return $ENV{join('.',('environment',$qualifierrest))};
1864: # ----------------------------------------------------------------- user.course
1865: } elsif ($space eq 'course') {
1866: return $ENV{join('.',('request.course',$qualifier))};
1867: # ------------------------------------------------------------------- user.role
1868: } elsif ($space eq 'role') {
1869: my ($role,$where)=split(/\./,$ENV{'request.role'});
1870: if ($qualifier eq 'value') {
1871: return $role;
1872: } elsif ($qualifier eq 'extent') {
1873: return $where;
1874: }
1875: # ----------------------------------------------------------------- user.domain
1876: } elsif ($space eq 'domain') {
1877: return $ENV{'user.domain'};
1878: # ------------------------------------------------------------------- user.name
1879: } elsif ($space eq 'name') {
1880: return $ENV{'user.name'};
1881: # ---------------------------------------------------- Any other user namespace
1882: } else {
1883: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1884: my %reply=&get($space,[$item]);
1885: return $reply{$item};
1886: }
1887: } elsif ($realm eq 'request') {
1888: # ------------------------------------------------------------- request.browser
1889: if ($space eq 'browser') {
1890: return $ENV{'browser.'.$qualifier};
1891: # ------------------------------------------------------------ request.filename
1892: } else {
1893: return $ENV{'request.'.$spacequalifierrest};
1894: }
1895: } elsif ($realm eq 'course') {
1896: # ---------------------------------------------------------- course.description
1897: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1898: $spacequalifierrest};
1899: } elsif ($realm eq 'resource') {
1900: if ($ENV{'request.course.id'}) {
1901:
1902: # print '<br>'.$space.' - '.$qualifier.' - '.$spacequalifierrest;
1903:
1904:
1905: # ----------------------------------------------------- Cascading lookup scheme
1906: my $symbp;
1907: if ($symbparm) {
1908: $symbp=$symbparm;
1909: } else {
1910: $symbp=&symbread();
1911: }
1912: my $mapp=(split(/\_\_\_/,$symbp))[0];
1913:
1914: my $symbparm=$symbp.'.'.$spacequalifierrest;
1915: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1916:
1917: my $seclevel=
1918: $ENV{'request.course.id'}.'.['.
1919: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1920: my $seclevelr=
1921: $ENV{'request.course.id'}.'.['.
1922: $ENV{'request.course.sec'}.'].'.$symbparm;
1923: my $seclevelm=
1924: $ENV{'request.course.id'}.'.['.
1925: $ENV{'request.course.sec'}.'].'.$mapparm;
1926:
1927: my $courselevel=
1928: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1929: my $courselevelr=
1930: $ENV{'request.course.id'}.'.'.$symbparm;
1931: my $courselevelm=
1932: $ENV{'request.course.id'}.'.'.$mapparm;
1933:
1934: # ----------------------------------------------------------- first, check user
1935: my %resourcedata=get('resourcedata',
1936: [$courselevelr,$courselevelm,$courselevel]);
1937: if (($resourcedata{$courselevelr}!~/^error\:/) &&
1938: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1939:
1940: if ($resourcedata{$courselevelr}) {
1941: return $resourcedata{$courselevelr}; }
1942: if ($resourcedata{$courselevelm}) {
1943: return $resourcedata{$courselevelm}; }
1944: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1945:
1946: } else {
1947: if ($resourcedata{$courselevelr}!~/No such file/) {
1948: &logthis("<font color=blue>WARNING:".
1949: " Trying to get resource data for ".$ENV{'user.name'}." at "
1950: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1951: "</font>");
1952: }
1953: }
1954:
1955: # -------------------------------------------------------- second, check course
1956:
1957: my $reply=&reply('get:'.
1958: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
1959: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1960: ':resourcedata:'.
1961: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
1962: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
1963: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
1964: if ($reply!~/^error\:/) {
1965: map {
1966: if ($_) { return &unescape($_); }
1967: } split(/\&/,$reply);
1968: }
1969: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
1970: &logthis("<font color=blue>WARNING:".
1971: " Getting ".$reply." asking for ".$varname." for ".
1972: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
1973: ' at '.
1974: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
1975: ' from '.
1976: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
1977: "</font>");
1978: }
1979: # ------------------------------------------------------ third, check map parms
1980: my %parmhash=();
1981: my $thisparm='';
1982: if (tie(%parmhash,'GDBM_File',
1983: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
1984: $thisparm=$parmhash{$symbparm};
1985: untie(%parmhash);
1986: }
1987: if ($thisparm) { return $thisparm; }
1988: }
1989:
1990: # --------------------------------------------- last, look in resource metadata
1991:
1992: $spacequalifierrest=~s/\./\_/;
1993: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
1994: if ($metadata) { return $metadata; }
1995: $metadata=&metadata($ENV{'request.filename'},
1996: 'parameter_'.$spacequalifierrest);
1997: if ($metadata) { return $metadata; }
1998:
1999: # ------------------------------------------------------------------ Cascade up
2000:
2001: unless ($space eq '0') {
2002: my ($part,$id)=split(/\_/,$space);
2003: if ($id) {
2004: my $partgeneral=&EXT('resource.'.$part.'.'.$qualifierrest,
2005: $symbparm);
2006: if ($partgeneral) { return $partgeneral; }
2007: } else {
2008: my $resourcegeneral=&EXT('resource.0.'.$qualifierrest,
2009: $symbparm);
2010: if ($resourcegeneral) { return $resourcegeneral; }
2011: }
2012: }
2013:
2014: # ---------------------------------------------------- Any other user namespace
2015: } elsif ($realm eq 'environment') {
2016: # ----------------------------------------------------------------- environment
2017: return $ENV{'environment.'.$spacequalifierrest};
2018: } elsif ($realm eq 'system') {
2019: # ----------------------------------------------------------------- system.time
2020: if ($space eq 'time') {
2021: return time;
2022: }
2023: }
2024: return '';
2025: }
2026:
2027: # ---------------------------------------------------------------- Get metadata
2028:
2029: sub metadata {
2030: my ($uri,$what)=@_;
2031:
2032: $uri=&declutter($uri);
2033: my $filename=$uri;
2034: $uri=~s/\.meta$//;
2035: unless ($metacache{$uri.':keys'}) {
2036: my %metathesekeys=();
2037: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
2038: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
2039: my $parser=HTML::TokeParser->new(\$metastring);
2040: my $token;
2041: undef %metathesekeys;
2042: while ($token=$parser->get_token) {
2043: if ($token->[0] eq 'S') {
2044: if (defined($token->[2]->{'package'})) {
2045: my $package=$token->[2]->{'package'};
2046: my $keyroot='';
2047: if (defined($token->[2]->{'part'})) {
2048: $keyroot.='_'.$token->[2]->{'part'};
2049: }
2050: if (defined($token->[2]->{'id'})) {
2051: $keyroot.='_'.$token->[2]->{'id'};
2052: }
2053: if ($metacache{$uri.':packages'}) {
2054: $metacache{$uri.':packages'}.=','.$package.$keyroot;
2055: } else {
2056: $metacache{$uri.':packages'}=$package.$keyroot;
2057: }
2058: map {
2059: if ($_=~/^$package\&/) {
2060: my ($pack,$name,$subp)=split(/\&/,$_);
2061: my $value=$packagetab{$_};
2062: my $part=$keyroot;
2063: $part=~s/^\_//;
2064: if ($subp eq 'display') {
2065: $value.=' [Part: '.$part.']';
2066: }
2067: my $unikey='parameter'.$keyroot.'_'.$name;
2068: $metathesekeys{$unikey}=1;
2069: $metacache{$uri.':'.$unikey.'.part'}=$part;
2070: unless
2071: (defined($metacache{$uri.':'.$unikey.'.'.$subp})) {
2072: $metacache{$uri.':'.$unikey.'.'.$subp}=$value;
2073: }
2074: }
2075: } keys %packagetab;
2076: } else {
2077: my $entry=$token->[1];
2078: my $unikey=$entry;
2079: if (defined($token->[2]->{'part'})) {
2080: $unikey.='_'.$token->[2]->{'part'};
2081: }
2082: if (defined($token->[2]->{'id'})) {
2083: $unikey.='_'.$token->[2]->{'id'};
2084: }
2085: if (defined($token->[2]->{'name'})) {
2086: $unikey.='_'.$token->[2]->{'name'};
2087: }
2088: $metathesekeys{$unikey}=1;
2089: map {
2090: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
2091: } @{$token->[3]};
2092: unless (
2093: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
2094: ) { $metacache{$uri.':'.$unikey}=
2095: $metacache{$uri.':'.$unikey.'.default'};
2096: }
2097: }
2098: }
2099: }
2100: $metacache{$uri.':keys'}=join(',',keys %metathesekeys);
2101: }
2102: return $metacache{$uri.':'.$what};
2103: }
2104:
2105: # ------------------------------------------------- Update symbolic store links
2106:
2107: sub symblist {
2108: my ($mapname,%newhash)=@_;
2109: $mapname=declutter($mapname);
2110: my %hash;
2111: if (($ENV{'request.course.fn'}) && (%newhash)) {
2112: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2113: &GDBM_WRCREAT,0640)) {
2114: map {
2115: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
2116: } keys %newhash;
2117: if (untie(%hash)) {
2118: return 'ok';
2119: }
2120: }
2121: }
2122: return 'error';
2123: }
2124:
2125: # ------------------------------------------------------ Return symb list entry
2126:
2127: sub symbread {
2128: my $thisfn=shift;
2129: unless ($thisfn) {
2130: $thisfn=$ENV{'request.filename'};
2131: }
2132: $thisfn=declutter($thisfn);
2133: my %hash;
2134: my %bighash;
2135: my $syval='';
2136: if (($ENV{'request.course.fn'}) && ($thisfn)) {
2137: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2138: &GDBM_READER,0640)) {
2139: $syval=$hash{$thisfn};
2140: untie(%hash);
2141: }
2142: # ---------------------------------------------------------- There was an entry
2143: if ($syval) {
2144: unless ($syval=~/\_\d+$/) {
2145: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
2146: &appenv('request.ambiguous' => $thisfn);
2147: return '';
2148: }
2149: $syval.=$1;
2150: }
2151: } else {
2152: # ------------------------------------------------------- Was not in symb table
2153: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
2154: &GDBM_READER,0640)) {
2155: # ---------------------------------------------- Get ID(s) for current resource
2156: my $ids=$bighash{'ids_/res/'.$thisfn};
2157: unless ($ids) {
2158: $ids=$bighash{'ids_/'.$thisfn};
2159: }
2160: if ($ids) {
2161: # ------------------------------------------------------------------- Has ID(s)
2162: my @possibilities=split(/\,/,$ids);
2163: if ($#possibilities==0) {
2164: # ----------------------------------------------- There is only one possibility
2165: my ($mapid,$resid)=split(/\./,$ids);
2166: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
2167: } else {
2168: # ------------------------------------------ There is more than one possibility
2169: my $realpossible=0;
2170: map {
2171: my $file=$bighash{'src_'.$_};
2172: if (&allowed('bre',$file)) {
2173: my ($mapid,$resid)=split(/\./,$_);
2174: if ($bighash{'map_type_'.$mapid} ne 'page') {
2175: $realpossible++;
2176: $syval=declutter($bighash{'map_id_'.$mapid}).
2177: '___'.$resid;
2178: }
2179: }
2180: } @possibilities;
2181: if ($realpossible!=1) { $syval=''; }
2182: }
2183: }
2184: untie(%bighash)
2185: }
2186: }
2187: if ($syval) {
2188: return $syval.'___'.$thisfn;
2189: }
2190: }
2191: &appenv('request.ambiguous' => $thisfn);
2192: return '';
2193: }
2194:
2195: # ---------------------------------------------------------- Return random seed
2196:
2197: sub numval {
2198: my $txt=shift;
2199: $txt=~tr/A-J/0-9/;
2200: $txt=~tr/a-j/0-9/;
2201: $txt=~tr/K-T/0-9/;
2202: $txt=~tr/k-t/0-9/;
2203: $txt=~tr/U-Z/0-5/;
2204: $txt=~tr/u-z/0-5/;
2205: $txt=~s/\D//g;
2206: return int($txt);
2207: }
2208:
2209: sub rndseed {
2210: my ($symb,$courseid,$domain,$username)=@_;
2211: if (!$symb) {
2212: unless ($symb=&symbread()) { return time; }
2213: }
2214: if (!$courseid) { $courseid=$ENV{'request.course.id'};}
2215: if (!$domain) {$domain=$ENV{'user.domain'};}
2216: if (!$username) {$username=$ENV{'user.name'};}
2217: {
2218: use integer;
2219: my $symbchck=unpack("%32C*",$symb) << 27;
2220: my $symbseed=numval($symb) << 22;
2221: my $namechck=unpack("%32C*",$username) << 17;
2222: my $nameseed=numval($username) << 12;
2223: my $domainseed=unpack("%32C*",$domain) << 7;
2224: my $courseseed=unpack("%32C*",$courseid);
2225: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
2226: #uncommenting these lines can break things!
2227: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
2228: #&Apache::lonxml::debug("rndseed :$num:$symb");
2229: return $num;
2230: }
2231: }
2232:
2233: sub ireceipt {
2234: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
2235: my $cuname=unpack("%32C*",$funame);
2236: my $cudom=unpack("%32C*",$fudom);
2237: my $cucourseid=unpack("%32C*",$fucourseid);
2238: my $cusymb=unpack("%32C*",$fusymb);
2239: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
2240: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
2241: ($cunique%$cuname+
2242: $cunique%$cudom+
2243: $cusymb%$cuname+
2244: $cusymb%$cudom+
2245: $cucourseid%$cuname+
2246: $cucourseid%$cudom);
2247: }
2248:
2249: sub receipt {
2250: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2251: $ENV{'request.course.id'},&symbread());
2252: }
2253:
2254: # ------------------------------------------------------------ Serves up a file
2255: # returns either the contents of the file or a -1
2256: sub getfile {
2257: my $file=shift;
2258: &repcopy($file);
2259: if (! -e $file ) { return -1; };
2260: my $fh=Apache::File->new($file);
2261: my $a='';
2262: while (<$fh>) { $a .=$_; }
2263: return $a
2264: }
2265:
2266: sub filelocation {
2267: my ($dir,$file) = @_;
2268: my $location;
2269: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
2270: if ($file=~m:^/~:) { # is a contruction space reference
2271: $location = $file;
2272: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
2273: } else {
2274: $file=~s/^$perlvar{'lonDocRoot'}//;
2275: $file=~s:^/*res::;
2276: if ( !( $file =~ m:^/:) ) {
2277: $location = $dir. '/'.$file;
2278: } else {
2279: $location = '/home/httpd/html/res'.$file;
2280: }
2281: }
2282: $location=~s://+:/:g; # remove duplicate /
2283: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2284: return $location;
2285: }
2286:
2287: sub hreflocation {
2288: my ($dir,$file)=@_;
2289: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2290: my $finalpath=filelocation($dir,$file);
2291: $finalpath=~s/^\/home\/httpd\/html//;
2292: return $finalpath;
2293: } else {
2294: return $file;
2295: }
2296: }
2297:
2298: # ------------------------------------------------------------- Declutters URLs
2299:
2300: sub declutter {
2301: my $thisfn=shift;
2302: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2303: $thisfn=~s/^\///;
2304: $thisfn=~s/^res\///;
2305: return $thisfn;
2306: }
2307:
2308: # -------------------------------------------------------- Escape Special Chars
2309:
2310: sub escape {
2311: my $str=shift;
2312: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2313: return $str;
2314: }
2315:
2316: # ----------------------------------------------------- Un-Escape Special Chars
2317:
2318: sub unescape {
2319: my $str=shift;
2320: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2321: return $str;
2322: }
2323:
2324: # ================================================================ Main Program
2325:
2326: sub BEGIN {
2327: unless ($readit) {
2328: # ------------------------------------------------------------ Read access.conf
2329: {
2330: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2331:
2332: while (my $configline=<$config>) {
2333: if ($configline =~ /PerlSetVar/) {
2334: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
2335: chomp($varvalue);
2336: $perlvar{$varname}=$varvalue;
2337: }
2338: }
2339: }
2340:
2341: # ------------------------------------------------------------- Read hosts file
2342: {
2343: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2344:
2345: while (my $configline=<$config>) {
2346: chomp($configline);
2347: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2348: $hostname{$id}=$name;
2349: $hostdom{$id}=$domain;
2350: $hostip{$id}=$ip;
2351: if ($role eq 'library') { $libserv{$id}=$name; }
2352: }
2353: }
2354:
2355: # ------------------------------------------------------ Read spare server file
2356: {
2357: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2358:
2359: while (my $configline=<$config>) {
2360: chomp($configline);
2361: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2362: $spareid{$configline}=1;
2363: }
2364: }
2365: }
2366: # ------------------------------------------------------------ Read permissions
2367: {
2368: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2369:
2370: while (my $configline=<$config>) {
2371: chomp($configline);
2372: if ($configline) {
2373: my ($role,$perm)=split(/ /,$configline);
2374: if ($perm ne '') { $pr{$role}=$perm; }
2375: }
2376: }
2377: }
2378:
2379: # -------------------------------------------- Read plain texts for permissions
2380: {
2381: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2382:
2383: while (my $configline=<$config>) {
2384: chomp($configline);
2385: if ($configline) {
2386: my ($short,$plain)=split(/:/,$configline);
2387: if ($plain ne '') { $prp{$short}=$plain; }
2388: }
2389: }
2390: }
2391:
2392: # ---------------------------------------------------------- Read package table
2393: {
2394: my $config=Apache::File->new("$perlvar{'lonTabDir'}/packages.tab");
2395:
2396: while (my $configline=<$config>) {
2397: chomp($configline);
2398: my ($short,$plain)=split(/:/,$configline);
2399: my ($pack,$name)=split(/\&/,$short);
2400: if ($plain ne '') {
2401: $packagetab{$pack.'&'.$name.'&name'}=$name;
2402: $packagetab{$short}=$plain;
2403: }
2404: }
2405: }
2406:
2407: # ------------------------------------------------------------- Read file types
2408: {
2409: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2410:
2411: while (my $configline=<$config>) {
2412: chomp($configline);
2413: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2414: if ($descr[0] ne '') {
2415: $fe{$ending}=$emb;
2416: $fd{$ending}=join(' ',@descr);
2417: }
2418: }
2419: }
2420:
2421: %metacache=();
2422:
2423: $readit='done';
2424: &logthis('<font color=yellow>INFO: Read configuration</font>');
2425: }
2426: }
2427: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to lonnet.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / lonnet / perl