1: # The LearningOnline Network
2: # TCP networking package
3: #
4: # Functions for use by content handlers:
5: #
6: # metadata_query(sql-query-string,custom-metadata-regex) :
7: # returns file handle of where sql and
8: # regex results will be stored for query
9: # plaintext(short) : plain text explanation of short term
10: # fileembstyle(ext) : embed style in page for file extension
11: # filedescription(ext) : descriptor text for file extension
12: # allowed(short,url) : returns codes for allowed actions
13: # F: full access
14: # U,I,K: authentication modes (cxx only)
15: # '': forbidden
16: # 1: user needs to choose course
17: # 2: browse allowed
18: # definerole(rolename,sys,dom,cou) : define a custom role rolename
19: # set privileges in format of lonTabs/roles.tab for
20: # system, domain and course level,
21: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
22: # level given by url. Optional start and end dates
23: # (leave empty string or zero for "no date")
24: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
25: # custom role to a user for the level given by url.
26: # Specify name and domain of role author, and role name
27: # revokerole (udom,uname,url,role) : Revoke a role for url
28: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
29: # appenv(hash) : adds hash to session environment
30: # delenv(varname) : deletes all environment entries starting with varname
31: # store(hashref,symb,courseid,udom,uname)
32: # : stores hash permanently for this url
33: # hashref needs to be given, and should be a \%hashname
34: # the remaining args aren't required and if they aren't
35: # passed or are '' they will be derived from the ENV
36: # cstore(hashref,symb,courseid,udom,uname)
37: # : same as store but uses the critical interface to
38: # guarentee a store
39: # restore(symb,courseid,udom,uname)
40: # : returns hash for this symb, all args are optional
41: # if they aren't given they will be derived from the
42: # current enviroment
43: #
44: #
45: # for the next 6 functions udom and uname are optional
46: # if supplied they use udom as the domain and uname
47: # as the username for the function (supply a courseid
48: # for the uname if you want a course database)
49: # if not supplied it uses %ENV and looks at
50: # user. attribute for the values
51: #
52: # eget(namesp,arrayref,udom,uname)
53: # : returns hash with keys from array reference filled
54: # in from namesp (encrypts the return communication)
55: # get(namesp,arrayref,udom,uname)
56: # : returns hash with keys from array reference filled
57: # in from namesp
58: # dump(namesp,udom,uname) : dumps the complete namespace into a hash
59: # del(namesp,array,udom,uname) : deletes keys out of array from namesp
60: # put(namesp,hash,udom,uname) : stores hash in namesp
61: # cput(namesp,hash,udom,uname) : critical put
62: #
63: #
64: # ssi(url,hash) : does a complete request cycle on url to localhost, posts
65: # hash
66: # coursedescription(id) : returns and caches course description for id
67: # repcopy(filename) : replicate file
68: # dirlist(url) : gets a directory listing
69: # directcondval(index) : reading condition value of single condition from
70: # state string
71: # condval(index) : value of condition index based on state
72: # EXT(name) : value of a variable
73: # symblist(map,hash) : Updates symbolic storage links
74: # symbread([filename]) : returns the data handle (filename optional)
75: # rndseed([symb,courseid,domain,uname])
76: # : returns a random seed, all arguments are optional,
77: # if they aren't sent it use the environment to derive
78: # them
79: # Note: if symb isn't sent and it can't get one from
80: # &symbread it will use the current time as it's return
81: # receipt() : returns a receipt to be given out to users
82: # getfile(filename) : returns the contents of filename, or a -1 if it can't
83: # be found, replicates and subscribes to the file
84: # filelocation(dir,file) : returns a fairly clean absolute reference to file
85: # from the directory dir
86: # hreflocation(dir,file) : same as filelocation, but for hrefs
87: # log(domain,user,home,msg) : write to permanent log for user
88: # usection(domain,user,courseid) : output of section name/number or '' for
89: # "not in course" and '-1' for "no section"
90: # userenvironment(domain,user,what) : puts out any environment parameter
91: # for a user
92: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
93: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
94: # an array of IDs
95: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
96: # an array of names
97: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
98: # returns a comma separated list of keys
99: #
100: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
101: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
102: # 11/8,11/16,11/18,11/22,11/23,12/22,
103: # 01/06,01/13,02/24,02/28,02/29,
104: # 03/01,03/02,03/06,03/07,03/13,
105: # 04/05,05/29,05/31,06/01,
106: # 06/05,06/26 Gerd Kortemeyer
107: # 06/26 Ben Tyszka
108: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
109: # 08/14 Ben Tyszka
110: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
111: # 10/04 Gerd Kortemeyer
112: # 10/04 Guy Albertelli
113: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29,
114: # 10/30,10/31,
115: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
116: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
117: # 05/01/01 Guy Albertelli
118: # 05/01,06/01,09/01 Gerd Kortemeyer
119: # 09/01 Guy Albertelli
120: # 09/01,10/01,11/01 Gerd Kortemeyer
121: # YEAR=2001
122: # 02/27/01 Scott Harrison
123: # 3/2 Gerd Kortemeyer
124: # 3/15,3/19 Scott Harrison
125: # 3/19,3/20 Gerd Kortemeyer
126: # 3/22,3/27,4/2,4/16,4/17 Scott Harrison
127: # 5/26,5/28 Gerd Kortemeyer
128: # 5/30 H. K. Ng
129: # 6/1 Gerd Kortemeyer
130: # July Guy Albertelli
131: # 8/4,8/7,8/8,8/9,8/11,8/16,8/17,8/18,8/20,8/23,9/20,9/21,9/26,
132: # 10/2 Gerd Kortemeyer
133: # 10/5,10/10 Scott Harrison
134:
135: package Apache::lonnet;
136:
137: use strict;
138: use Apache::File;
139: use LWP::UserAgent();
140: use HTTP::Headers;
141: use vars
142: qw(%perlvar %hostname %homecache %hostip %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache %packagetab %courselogs);
143: use IO::Socket;
144: use GDBM_File;
145: use Apache::Constants qw(:common :http);
146: use HTML::TokeParser;
147: use Fcntl qw(:flock);
148:
149: # --------------------------------------------------------------------- Logging
150:
151: sub logtouch {
152: my $execdir=$perlvar{'lonDaemons'};
153: unless (-e "$execdir/logs/lonnet.log") {
154: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
155: close $fh;
156: }
157: my ($wwwuid,$wwwgid)=(getpwnam('www'))[2,3];
158: chown($wwwuid,$wwwgid,$execdir.'/logs/lonnet.log');
159: }
160:
161: sub logthis {
162: my $message=shift;
163: my $execdir=$perlvar{'lonDaemons'};
164: my $now=time;
165: my $local=localtime($now);
166: my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
167: print $fh "$local ($$): $message\n";
168: return 1;
169: }
170:
171: sub logperm {
172: my $message=shift;
173: my $execdir=$perlvar{'lonDaemons'};
174: my $now=time;
175: my $local=localtime($now);
176: my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
177: print $fh "$now:$message:$local\n";
178: return 1;
179: }
180:
181: # -------------------------------------------------- Non-critical communication
182: sub subreply {
183: my ($cmd,$server)=@_;
184: my $peerfile="$perlvar{'lonSockDir'}/$server";
185: my $client=IO::Socket::UNIX->new(Peer =>"$peerfile",
186: Type => SOCK_STREAM,
187: Timeout => 10)
188: or return "con_lost";
189: print $client "$cmd\n";
190: my $answer=<$client>;
191: if (!$answer) { $answer="con_lost"; }
192: chomp($answer);
193: return $answer;
194: }
195:
196: sub reply {
197: my ($cmd,$server)=@_;
198: my $answer=subreply($cmd,$server);
199: if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
200: if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
201: &logthis("<font color=blue>WARNING:".
202: " $cmd to $server returned $answer</font>");
203: }
204: return $answer;
205: }
206:
207: # ----------------------------------------------------------- Send USR1 to lonc
208:
209: sub reconlonc {
210: my $peerfile=shift;
211: &logthis("Trying to reconnect for $peerfile");
212: my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
213: if (my $fh=Apache::File->new("$loncfile")) {
214: my $loncpid=<$fh>;
215: chomp($loncpid);
216: if (kill 0 => $loncpid) {
217: &logthis("lonc at pid $loncpid responding, sending USR1");
218: kill USR1 => $loncpid;
219: sleep 1;
220: if (-e "$peerfile") { return; }
221: &logthis("$peerfile still not there, give it another try");
222: sleep 5;
223: if (-e "$peerfile") { return; }
224: &logthis(
225: "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
226: } else {
227: &logthis(
228: "<font color=blue>WARNING:".
229: " lonc at pid $loncpid not responding, giving up</font>");
230: }
231: } else {
232: &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
233: }
234: }
235:
236: # ------------------------------------------------------ Critical communication
237:
238: sub critical {
239: my ($cmd,$server)=@_;
240: unless ($hostname{$server}) {
241: &logthis("<font color=blue>WARNING:".
242: " Critical message to unknown server ($server)</font>");
243: return 'no_such_host';
244: }
245: my $answer=reply($cmd,$server);
246: if ($answer eq 'con_lost') {
247: my $pingreply=reply('ping',$server);
248: &reconlonc("$perlvar{'lonSockDir'}/$server");
249: my $pongreply=reply('pong',$server);
250: &logthis("Ping/Pong for $server: $pingreply/$pongreply");
251: $answer=reply($cmd,$server);
252: if ($answer eq 'con_lost') {
253: my $now=time;
254: my $middlename=$cmd;
255: $middlename=substr($middlename,0,16);
256: $middlename=~s/\W//g;
257: my $dfilename=
258: "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
259: {
260: my $dfh;
261: if ($dfh=Apache::File->new(">$dfilename")) {
262: print $dfh "$cmd\n";
263: }
264: }
265: sleep 2;
266: my $wcmd='';
267: {
268: my $dfh;
269: if ($dfh=Apache::File->new("$dfilename")) {
270: $wcmd=<$dfh>;
271: }
272: }
273: chomp($wcmd);
274: if ($wcmd eq $cmd) {
275: &logthis("<font color=blue>WARNING: ".
276: "Connection buffer $dfilename: $cmd</font>");
277: &logperm("D:$server:$cmd");
278: return 'con_delayed';
279: } else {
280: &logthis("<font color=red>CRITICAL:"
281: ." Critical connection failed: $server $cmd</font>");
282: &logperm("F:$server:$cmd");
283: return 'con_failed';
284: }
285: }
286: }
287: return $answer;
288: }
289:
290: # ---------------------------------------------------------- Append Environment
291:
292: sub appenv {
293: my %newenv=@_;
294: map {
295: if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
296: &logthis("<font color=blue>WARNING: ".
297: "Attempt to modify environment ".$_." to ".$newenv{$_}
298: .'</font>');
299: delete($newenv{$_});
300: } else {
301: $ENV{$_}=$newenv{$_};
302: }
303: } keys %newenv;
304:
305: my $lockfh;
306: unless ($lockfh=Apache::File->new("$ENV{'user.environment'}")) {
307: return 'error: '.$!;
308: }
309: unless (flock($lockfh,LOCK_EX)) {
310: &logthis("<font color=blue>WARNING: ".
311: 'Could not obtain exclusive lock in appenv: '.$!);
312: $lockfh->close();
313: return 'error: '.$!;
314: }
315:
316: my @oldenv;
317: {
318: my $fh;
319: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
320: return 'error: '.$!;
321: }
322: @oldenv=<$fh>;
323: $fh->close();
324: }
325: for (my $i=0; $i<=$#oldenv; $i++) {
326: chomp($oldenv[$i]);
327: if ($oldenv[$i] ne '') {
328: my ($name,$value)=split(/=/,$oldenv[$i]);
329: unless (defined($newenv{$name})) {
330: $newenv{$name}=$value;
331: }
332: }
333: }
334: {
335: my $fh;
336: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
337: return 'error';
338: }
339: my $newname;
340: foreach $newname (keys %newenv) {
341: print $fh "$newname=$newenv{$newname}\n";
342: }
343: $fh->close();
344: }
345:
346: $lockfh->close();
347: return 'ok';
348: }
349: # ----------------------------------------------------- Delete from Environment
350:
351: sub delenv {
352: my $delthis=shift;
353: my %newenv=();
354: if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
355: &logthis("<font color=blue>WARNING: ".
356: "Attempt to delete from environment ".$delthis);
357: return 'error';
358: }
359: my @oldenv;
360: {
361: my $fh;
362: unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
363: return 'error';
364: }
365: unless (flock($fh,LOCK_SH)) {
366: &logthis("<font color=blue>WARNING: ".
367: 'Could not obtain shared lock in delenv: '.$!);
368: $fh->close();
369: return 'error: '.$!;
370: }
371: @oldenv=<$fh>;
372: $fh->close();
373: }
374: {
375: my $fh;
376: unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
377: return 'error';
378: }
379: unless (flock($fh,LOCK_EX)) {
380: &logthis("<font color=blue>WARNING: ".
381: 'Could not obtain exclusive lock in delenv: '.$!);
382: $fh->close();
383: return 'error: '.$!;
384: }
385: map {
386: unless ($_=~/^$delthis/) { print $fh $_; }
387: } @oldenv;
388: $fh->close();
389: }
390: return 'ok';
391: }
392:
393: # ------------------------------ Find server with least workload from spare.tab
394:
395: sub spareserver {
396: my $tryserver;
397: my $spareserver='';
398: my $lowestserver=100;
399: foreach $tryserver (keys %spareid) {
400: my $answer=reply('load',$tryserver);
401: if (($answer =~ /\d/) && ($answer<$lowestserver)) {
402: $spareserver="http://$hostname{$tryserver}";
403: $lowestserver=$answer;
404: }
405: }
406: return $spareserver;
407: }
408:
409: # --------- Try to authenticate user from domain's lib servers (first this one)
410:
411: sub authenticate {
412: my ($uname,$upass,$udom)=@_;
413: $upass=escape($upass);
414: if (($perlvar{'lonRole'} eq 'library') &&
415: ($udom eq $perlvar{'lonDefDomain'})) {
416: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
417: if ($answer =~ /authorized/) {
418: if ($answer eq 'authorized') {
419: &logthis("User $uname at $udom authorized by local server");
420: return $perlvar{'lonHostID'};
421: }
422: if ($answer eq 'non_authorized') {
423: &logthis("User $uname at $udom rejected by local server");
424: return 'no_host';
425: }
426: }
427: }
428:
429: my $tryserver;
430: foreach $tryserver (keys %libserv) {
431: if ($hostdom{$tryserver} eq $udom) {
432: my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
433: if ($answer =~ /authorized/) {
434: if ($answer eq 'authorized') {
435: &logthis("User $uname at $udom authorized by $tryserver");
436: return $tryserver;
437: }
438: if ($answer eq 'non_authorized') {
439: &logthis("User $uname at $udom rejected by $tryserver");
440: return 'no_host';
441: }
442: }
443: }
444: }
445: &logthis("User $uname at $udom could not be authenticated");
446: return 'no_host';
447: }
448:
449: # ---------------------- Find the homebase for a user from domain's lib servers
450:
451: sub homeserver {
452: my ($uname,$udom)=@_;
453:
454: my $index="$uname:$udom";
455: if ($homecache{$index}) { return "$homecache{$index}"; }
456:
457: my $tryserver;
458: foreach $tryserver (keys %libserv) {
459: if ($hostdom{$tryserver} eq $udom) {
460: my $answer=reply("home:$udom:$uname",$tryserver);
461: if ($answer eq 'found') {
462: $homecache{$index}=$tryserver;
463: return $tryserver;
464: }
465: }
466: }
467: return 'no_host';
468: }
469:
470: # ------------------------------------- Find the usernames behind a list of IDs
471:
472: sub idget {
473: my ($udom,@ids)=@_;
474: my %returnhash=();
475:
476: my $tryserver;
477: foreach $tryserver (keys %libserv) {
478: if ($hostdom{$tryserver} eq $udom) {
479: my $idlist=join('&',@ids);
480: $idlist=~tr/A-Z/a-z/;
481: my $reply=&reply("idget:$udom:".$idlist,$tryserver);
482: my @answer=();
483: if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
484: @answer=split(/\&/,$reply);
485: } ;
486: my $i;
487: for ($i=0;$i<=$#ids;$i++) {
488: if ($answer[$i]) {
489: $returnhash{$ids[$i]}=$answer[$i];
490: }
491: }
492: }
493: }
494: return %returnhash;
495: }
496:
497: # ------------------------------------- Find the IDs behind a list of usernames
498:
499: sub idrget {
500: my ($udom,@unames)=@_;
501: my %returnhash=();
502: map {
503: $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
504: } @unames;
505: return %returnhash;
506: }
507:
508: # ------------------------------- Store away a list of names and associated IDs
509:
510: sub idput {
511: my ($udom,%ids)=@_;
512: my %servers=();
513: map {
514: my $uhom=&homeserver($_,$udom);
515: if ($uhom ne 'no_host') {
516: my $id=&escape($ids{$_});
517: $id=~tr/A-Z/a-z/;
518: my $unam=&escape($_);
519: if ($servers{$uhom}) {
520: $servers{$uhom}.='&'.$id.'='.$unam;
521: } else {
522: $servers{$uhom}=$id.'='.$unam;
523: }
524: &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
525: }
526: } keys %ids;
527: map {
528: &critical('idput:'.$udom.':'.$servers{$_},$_);
529: } keys %servers;
530: }
531:
532: # ------------------------------------- Find the section of student in a course
533:
534: sub usection {
535: my ($udom,$unam,$courseid)=@_;
536: $courseid=~s/\_/\//g;
537: $courseid=~s/^(\w)/\/$1/;
538: map {
539: my ($key,$value)=split(/\=/,$_);
540: $key=&unescape($key);
541: if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
542: my $section=$1;
543: if ($key eq $courseid.'_st') { $section=''; }
544: my ($dummy,$end,$start)=split(/\_/,&unescape($value));
545: my $now=time;
546: my $notactive=0;
547: if ($start) {
548: if ($now<$start) { $notactive=1; }
549: }
550: if ($end) {
551: if ($now>$end) { $notactive=1; }
552: }
553: unless ($notactive) { return $section; }
554: }
555: } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
556: &homeserver($unam,$udom)));
557: return '-1';
558: }
559:
560: # ------------------------------------- Read an entry from a user's environment
561:
562: sub userenvironment {
563: my ($udom,$unam,@what)=@_;
564: my %returnhash=();
565: my @answer=split(/\&/,
566: &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
567: &homeserver($unam,$udom)));
568: my $i;
569: for ($i=0;$i<=$#what;$i++) {
570: $returnhash{$what[$i]}=&unescape($answer[$i]);
571: }
572: return %returnhash;
573: }
574:
575: # ----------------------------- Subscribe to a resource, return URL if possible
576:
577: sub subscribe {
578: my $fname=shift;
579: my $author=$fname;
580: $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
581: my ($udom,$uname)=split(/\//,$author);
582: my $home=homeserver($uname,$udom);
583: if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) {
584: return 'not_found';
585: }
586: my $answer=reply("sub:$fname",$home);
587: if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
588: $answer.=' by '.$home;
589: }
590: return $answer;
591: }
592:
593: # -------------------------------------------------------------- Replicate file
594:
595: sub repcopy {
596: my $filename=shift;
597: $filename=~s/\/+/\//g;
598: my $transname="$filename.in.transfer";
599: if ((-e $filename) || (-e $transname)) { return OK; }
600: my $remoteurl=subscribe($filename);
601: if ($remoteurl =~ /^con_lost by/) {
602: &logthis("Subscribe returned $remoteurl: $filename");
603: return HTTP_SERVICE_UNAVAILABLE;
604: } elsif ($remoteurl eq 'not_found') {
605: &logthis("Subscribe returned not_found: $filename");
606: return HTTP_NOT_FOUND;
607: } elsif ($remoteurl =~ /^rejected by/) {
608: &logthis("Subscribe returned $remoteurl: $filename");
609: return FORBIDDEN;
610: } elsif ($remoteurl eq 'directory') {
611: return OK;
612: } else {
613: my @parts=split(/\//,$filename);
614: my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
615: if ($path ne "$perlvar{'lonDocRoot'}/res") {
616: &logthis("Malconfiguration for replication: $filename");
617: return HTTP_BAD_REQUEST;
618: }
619: my $count;
620: for ($count=5;$count<$#parts;$count++) {
621: $path.="/$parts[$count]";
622: if ((-e $path)!=1) {
623: mkdir($path,0777);
624: }
625: }
626: my $ua=new LWP::UserAgent;
627: my $request=new HTTP::Request('GET',"$remoteurl");
628: my $response=$ua->request($request,$transname);
629: if ($response->is_error()) {
630: unlink($transname);
631: my $message=$response->status_line;
632: &logthis("<font color=blue>WARNING:"
633: ." LWP get: $message: $filename</font>");
634: return HTTP_SERVICE_UNAVAILABLE;
635: } else {
636: if ($remoteurl!~/\.meta$/) {
637: my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
638: my $mresponse=$ua->request($mrequest,$filename.'.meta');
639: if ($mresponse->is_error()) {
640: unlink($filename.'.meta');
641: &logthis(
642: "<font color=yellow>INFO: No metadata: $filename</font>");
643: }
644: }
645: rename($transname,$filename);
646: return OK;
647: }
648: }
649: }
650:
651: # --------------------------------------------------------- Server Side Include
652:
653: sub ssi {
654:
655: my ($fn,%form)=@_;
656:
657: my $ua=new LWP::UserAgent;
658:
659: my $request;
660:
661: if (%form) {
662: $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
663: $request->content(join '&', map { "$_=$form{$_}" } keys %form);
664: } else {
665: $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
666: }
667:
668: $request->header(Cookie => $ENV{'HTTP_COOKIE'});
669: my $response=$ua->request($request);
670:
671: return $response->content;
672: }
673:
674: # ------------------------------------------------------------------------- Log
675:
676: sub log {
677: my ($dom,$nam,$hom,$what)=@_;
678: return critical("log:$dom:$nam:$what",$hom);
679: }
680:
681: # ------------------------------------------------------------------ Course Log
682:
683: sub flushcourselogs {
684: &logthis('Flushing course log buffers');
685: map {
686: my $crsid=$_;
687: if (&reply('log:'.$ENV{'course.'.$crsid.'.domain'}.':'.
688: $ENV{'course.'.$crsid.'.num'}.':'.
689: &escape($courselogs{$crsid}),
690: $ENV{'course.'.$crsid.'.home'}) eq 'ok') {
691: delete $courselogs{$crsid};
692: } else {
693: &logthis('Failed to flush log buffer for '.$crsid);
694: if (length($courselogs{$crsid})>40000) {
695: &logthis("<font color=blue>WARNING: Buffer for ".$crsid.
696: " exceeded maximum size, deleting.</font>");
697: delete $courselogs{$crsid};
698: }
699: }
700: } keys %courselogs;
701: }
702:
703: sub courselog {
704: my $what=shift;
705: $what=time.':'.$what;
706: unless ($ENV{'request.course.id'}) { return ''; }
707: if (defined $courselogs{$ENV{'request.course.id'}}) {
708: $courselogs{$ENV{'request.course.id'}}.='&'.$what;
709: } else {
710: $courselogs{$ENV{'request.course.id'}}.=$what;
711: }
712: if (length($courselogs{$ENV{'request.course.id'}})>4048) {
713: &flushcourselogs();
714: }
715: }
716:
717: sub courseacclog {
718: my $fnsymb=shift;
719: unless ($ENV{'request.course.id'}) { return ''; }
720: my $what=$fnsymb.':'.$ENV{'user.name'}.':'.$ENV{'user.domain'};
721: if ($what=~/(problem|exam|quiz|assess|survey|form)$/) {
722: map {
723: if ($_=~/^form\.(.*)/) {
724: $what.=':'.$1.'='.$ENV{$_};
725: }
726: } keys %ENV;
727: }
728: &courselog($what);
729: }
730:
731: # ----------------------------------------------------------- Check out an item
732:
733: sub checkout {
734: my ($symb,$tuname,$tudom,$tcrsid)=@_;
735: my $now=time;
736: my $lonhost=$perlvar{'lonHostID'};
737: my $infostr=&escape(
738: $tuname.'&'.
739: $tudom.'&'.
740: $tcrsid.'&'.
741: $symb.'&'.
742: $now.'&'.$ENV{'REMOTE_ADDR'});
743: my $token=&reply('tmpput:'.$infostr,$lonhost);
744: if ($token=~/^error\:/) {
745: &logthis("<font color=blue>WARNING: ".
746: "Checkout tmpput failed ".$tudom.' - '.$tuname.' - '.$symb.
747: "</font>");
748: return '';
749: }
750:
751: $token=~s/^(\d+)\_.*\_(\d+)$/$1\*$2\*$lonhost/;
752: $token=~tr/a-z/A-Z/;
753:
754: my %infohash=('resource.0.outtoken' => $token,
755: 'resource.0.checkouttime' => $now,
756: 'resource.0.outremote' => $ENV{'REMOTE_ADDR'});
757:
758: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
759: return '';
760: } else {
761: &logthis("<font color=blue>WARNING: ".
762: "Checkout cstore failed ".$tudom.' - '.$tuname.' - '.$symb.
763: "</font>");
764: }
765:
766: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
767: &escape('Checkout '.$infostr.' - '.
768: $token)) ne 'ok') {
769: return '';
770: } else {
771: &logthis("<font color=blue>WARNING: ".
772: "Checkout log failed ".$tudom.' - '.$tuname.' - '.$symb.
773: "</font>");
774: }
775: return $token;
776: }
777:
778: # ------------------------------------------------------------ Check in an item
779:
780: sub checkin {
781: my $token=shift;
782: my $now=time;
783: my ($ta,$tb,$lonhost)=split(/\*/,$token);
784: $lonhost=~tr/A-Z/a-z/;
785: my $dtoken=$ta.'_'.$hostip{$lonhost}.'_'.$tb;
786: $dtoken=~s/\W/\_/g;
787: my ($tuname,$tudom,$tcrsid,$symb,$chtim,$rmaddr)=
788: split(/\&/,&unescape(&reply('tmpget:'.$dtoken,$lonhost)));
789:
790: unless (($tuname) && ($tudom)) {
791: &logthis('Check in '.$token.' ('.$dtoken.') failed');
792: return '';
793: }
794:
795: unless (&allowed('mgr',$tcrsid)) {
796: &logthis('Check in '.$token.' ('.$dtoken.') unauthorized: '.
797: $ENV{'user.name'}.' - '.$ENV{'user.domain'});
798: return '';
799: }
800:
801: my %infohash=('resource.0.intoken' => $token,
802: 'resource.0.checkintime' => $now,
803: 'resource.0.inremote' => $ENV{'REMOTE_ADDR'});
804:
805: unless (&cstore(\%infohash,$symb,$tcrsid,$tudom,$tuname) eq 'ok') {
806: return '';
807: }
808:
809: if (&log($tudom,$tuname,&homeserver($tuname,$tudom),
810: &escape('Checkin - '.$token)) ne 'ok') {
811: return '';
812: }
813:
814: return ($symb,$tuname,$tudom,$tcrsid);
815: }
816:
817: # --------------------------------------------- Set Expire Date for Spreadsheet
818:
819: sub expirespread {
820: my ($uname,$udom,$stype,$usymb)=@_;
821: my $cid=$ENV{'request.course.id'};
822: if ($cid) {
823: my $now=time;
824: my $key=$uname.':'.$udom.':'.$stype.':'.$usymb;
825: return &reply('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
826: $ENV{'course.'.$cid.'.num'}.
827: ':nohist_expirationdates:'.
828: &escape($key).'='.$now,
829: $ENV{'course.'.$cid.'.home'})
830: }
831: return 'ok';
832: }
833:
834: # ----------------------------------------------------- Devalidate Spreadsheets
835:
836: sub devalidate {
837: my $symb=shift;
838: my $cid=$ENV{'request.course.id'};
839: if ($cid) {
840: my $key=$ENV{'user.name'}.':'.$ENV{'user.domain'}.':';
841: my $status=
842: &del('nohist_calculatedsheet',
843: [$key.'studentcalc'],
844: $ENV{'course.'.$cid.'.domain'},
845: $ENV{'course.'.$cid.'.num'})
846: .' '.
847: &del('nohist_calculatedsheets_'.$cid,
848: [$key.'assesscalc:'.$symb]);
849: unless ($status eq 'ok ok') {
850: &logthis('Could not devalidate spreadsheet '.
851: $ENV{'user.name'}.' at '.$ENV{'user.domain'}.' for '.
852: $symb.': '.$status);
853: }
854: }
855: }
856:
857: # -------------------------------------------------------------------Temp Store
858:
859: sub tmpstore {
860: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
861: my $home='';
862:
863: if ($stuname) {
864: $home=&homeserver($stuname,$domain);
865:
866: }
867:
868: if (!$symb) {
869: $symb=&symbread();
870: if (!$symb) {
871: $symb= $ENV{'request.url'};
872: }
873: }
874:
875: $symb=escape($symb);
876: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
877: if (!$domain) { $domain=$ENV{'user.domain'}; }
878: if (!$stuname) { $stuname=$ENV{'user.name'}; }
879: if (!$home) { $home=$ENV{'user.home'}; }
880: my $namevalue='';
881: map {
882: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
883: } keys %$storehash;
884: $namevalue=~s/\&$//;
885:
886: }
887:
888: # ----------------------------------------------------------------------- Store
889:
890: sub store {
891: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
892: my $home='';
893:
894: if ($stuname) {
895: $home=&homeserver($stuname,$domain);
896: }
897:
898: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
899:
900: &devalidate($symb);
901:
902: $symb=escape($symb);
903: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
904: if (!$domain) { $domain=$ENV{'user.domain'}; }
905: if (!$stuname) { $stuname=$ENV{'user.name'}; }
906: if (!$home) { $home=$ENV{'user.home'}; }
907: my $namevalue='';
908: map {
909: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
910: } keys %$storehash;
911: $namevalue=~s/\&$//;
912: return reply("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
913: }
914:
915: # -------------------------------------------------------------- Critical Store
916:
917: sub cstore {
918: my ($storehash,$symb,$namespace,$domain,$stuname) = @_;
919: my $home='';
920:
921: if ($stuname) {
922: $home=&homeserver($stuname,$domain);
923: }
924:
925: if (!$symb) { unless ($symb=&symbread()) { return ''; } }
926:
927: &devalidate($symb);
928:
929: $symb=escape($symb);
930: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
931: if (!$domain) { $domain=$ENV{'user.domain'}; }
932: if (!$stuname) { $stuname=$ENV{'user.name'}; }
933: if (!$home) { $home=$ENV{'user.home'}; }
934:
935: my $namevalue='';
936: map {
937: $namevalue.=escape($_).'='.escape($$storehash{$_}).'&';
938: } keys %$storehash;
939: $namevalue=~s/\&$//;
940: return critical("store:$domain:$stuname:$namespace:$symb:$namevalue","$home");
941: }
942:
943: # --------------------------------------------------------------------- Restore
944:
945: sub restore {
946: my ($symb,$namespace,$domain,$stuname) = @_;
947: my $home='';
948:
949: if ($stuname) {
950: $home=&homeserver($stuname,$domain);
951: }
952:
953: if (!$symb) {
954: unless ($symb=escape(&symbread())) { return ''; }
955: } else {
956: $symb=&escape($symb);
957: }
958: if (!$namespace) { unless ($namespace=$ENV{'request.course.id'}) { return ''; } }
959: if (!$domain) { $domain=$ENV{'user.domain'}; }
960: if (!$stuname) { $stuname=$ENV{'user.name'}; }
961: if (!$home) { $home=$ENV{'user.home'}; }
962: my $answer=&reply("restore:$domain:$stuname:$namespace:$symb","$home");
963:
964: my %returnhash=();
965: map {
966: my ($name,$value)=split(/\=/,$_);
967: $returnhash{&unescape($name)}=&unescape($value);
968: } split(/\&/,$answer);
969: my $version;
970: for ($version=1;$version<=$returnhash{'version'};$version++) {
971: map {
972: $returnhash{$_}=$returnhash{$version.':'.$_};
973: } split(/\:/,$returnhash{$version.':keys'});
974: }
975: return %returnhash;
976: }
977:
978: # ---------------------------------------------------------- Course Description
979:
980: sub coursedescription {
981: my $courseid=shift;
982: $courseid=~s/^\///;
983: $courseid=~s/\_/\//g;
984: my ($cdomain,$cnum)=split(/\//,$courseid);
985: my $chome=&homeserver($cnum,$cdomain);
986: if ($chome ne 'no_host') {
987: my %returnhash=&dump('environment',$cdomain,$cnum);
988: if (!exists($returnhash{'con_lost'})) {
989: my $normalid=$cdomain.'_'.$cnum;
990: my %envhash=();
991: $returnhash{'home'}= $chome;
992: $returnhash{'domain'} = $cdomain;
993: $returnhash{'num'} = $cnum;
994: while (my ($name,$value) = each %returnhash) {
995: $envhash{'course.'.$normalid.'.'.$name}=$value;
996: }
997: $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
998: $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
999: $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
1000: $envhash{'course.'.$normalid.'.last_cache'}=time;
1001: $envhash{'course.'.$normalid.'.home'}=$chome;
1002: $envhash{'course.'.$normalid.'.domain'}=$cdomain;
1003: $envhash{'course.'.$normalid.'.num'}=$cnum;
1004: &appenv(%envhash);
1005: return %returnhash;
1006: }
1007: }
1008: return ();
1009: }
1010:
1011: # -------------------------------------------------------- Get user privileges
1012:
1013: sub rolesinit {
1014: my ($domain,$username,$authhost)=@_;
1015: my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
1016: if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
1017: my %allroles=();
1018: my %thesepriv=();
1019: my $now=time;
1020: my $userroles="user.login.time=$now\n";
1021: my $thesestr;
1022:
1023: if ($rolesdump ne '') {
1024: map {
1025: if ($_!~/^rolesdef\&/) {
1026: my ($area,$role)=split(/=/,$_);
1027: $area=~s/\_\w\w$//;
1028: my ($trole,$tend,$tstart)=split(/_/,$role);
1029: $userroles.='user.role.'.$trole.'.'.$area.'='.
1030: $tstart.'.'.$tend."\n";
1031: if ($tend!=0) {
1032: if ($tend<$now) {
1033: $trole='';
1034: }
1035: }
1036: if ($tstart!=0) {
1037: if ($tstart>$now) {
1038: $trole='';
1039: }
1040: }
1041: if (($area ne '') && ($trole ne '')) {
1042: my $spec=$trole.'.'.$area;
1043: my ($tdummy,$tdomain,$trest)=split(/\//,$area);
1044: if ($trole =~ /^cr\//) {
1045: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
1046: my $homsvr=homeserver($rauthor,$rdomain);
1047: if ($hostname{$homsvr} ne '') {
1048: my $roledef=
1049: reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
1050: $homsvr);
1051: if (($roledef ne 'con_lost') && ($roledef ne '')) {
1052: my ($syspriv,$dompriv,$coursepriv)=
1053: split(/\_/,unescape($roledef));
1054: $allroles{'cm./'}.=':'.$syspriv;
1055: $allroles{$spec.'./'}.=':'.$syspriv;
1056: if ($tdomain ne '') {
1057: $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
1058: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
1059: if ($trest ne '') {
1060: $allroles{'cm.'.$area}.=':'.$coursepriv;
1061: $allroles{$spec.'.'.$area}.=':'.$coursepriv;
1062: }
1063: }
1064: }
1065: }
1066: } else {
1067: $allroles{'cm./'}.=':'.$pr{$trole.':s'};
1068: $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
1069: if ($tdomain ne '') {
1070: $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1071: $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
1072: if ($trest ne '') {
1073: $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
1074: $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
1075: }
1076: }
1077: }
1078: }
1079: }
1080: } split(/&/,$rolesdump);
1081: my $adv=0;
1082: my $author=0;
1083: map {
1084: %thesepriv=();
1085: if (($_!~/^st/) && ($_!~/^ta/) && ($_!~/^cm/)) { $adv=1; }
1086: if (($_=~/^au/) || ($_=~/^ca/)) { $author=1; }
1087: map {
1088: if ($_ ne '') {
1089: my ($privilege,$restrictions)=split(/&/,$_);
1090: if ($restrictions eq '') {
1091: $thesepriv{$privilege}='F';
1092: } else {
1093: if ($thesepriv{$privilege} ne 'F') {
1094: $thesepriv{$privilege}.=$restrictions;
1095: }
1096: }
1097: }
1098: } split(/:/,$allroles{$_});
1099: $thesestr='';
1100: map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
1101: $userroles.='user.priv.'.$_.'='.$thesestr."\n";
1102: } keys %allroles;
1103: $userroles.='user.adv='.$adv."\n".
1104: 'user.author='.$author."\n";
1105: $ENV{'user.adv'}=$adv;
1106: }
1107: return $userroles;
1108: }
1109:
1110: # --------------------------------------------------------------- get interface
1111:
1112: sub get {
1113: my ($namespace,$storearr,$udomain,$uname)=@_;
1114: my $items='';
1115: map {
1116: $items.=escape($_).'&';
1117: } @$storearr;
1118: $items=~s/\&$//;
1119: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1120: if (!$uname) { $uname=$ENV{'user.name'}; }
1121: my $uhome=&homeserver($uname,$udomain);
1122:
1123: my $rep=&reply("get:$udomain:$uname:$namespace:$items",$uhome);
1124: my @pairs=split(/\&/,$rep);
1125: my %returnhash=();
1126: my $i=0;
1127: map {
1128: $returnhash{$_}=unescape($pairs[$i]);
1129: $i++;
1130: } @$storearr;
1131: return %returnhash;
1132: }
1133:
1134: # --------------------------------------------------------------- del interface
1135:
1136: sub del {
1137: my ($namespace,$storearr,$udomain,$uname)=@_;
1138: my $items='';
1139: map {
1140: $items.=escape($_).'&';
1141: } @$storearr;
1142: $items=~s/\&$//;
1143: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1144: if (!$uname) { $uname=$ENV{'user.name'}; }
1145: my $uhome=&homeserver($uname,$udomain);
1146:
1147: return &reply("del:$udomain:$uname:$namespace:$items",$uhome);
1148: }
1149:
1150: # -------------------------------------------------------------- dump interface
1151:
1152: sub dump {
1153: my ($namespace,$udomain,$uname)=@_;
1154: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1155: if (!$uname) { $uname=$ENV{'user.name'}; }
1156: my $uhome=&homeserver($uname,$udomain);
1157: my $rep=reply("dump:$udomain:$uname:$namespace",$uhome);
1158: my @pairs=split(/\&/,$rep);
1159: my %returnhash=();
1160: map {
1161: my ($key,$value)=split(/=/,$_);
1162: $returnhash{unescape($key)}=unescape($value);
1163: } @pairs;
1164: return %returnhash;
1165: }
1166:
1167: # --------------------------------------------------------------- put interface
1168:
1169: sub put {
1170: my ($namespace,$storehash,$udomain,$uname)=@_;
1171: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1172: if (!$uname) { $uname=$ENV{'user.name'}; }
1173: my $uhome=&homeserver($uname,$udomain);
1174: my $items='';
1175: map {
1176: $items.=&escape($_).'='.&escape($$storehash{$_}).'&';
1177: } keys %$storehash;
1178: $items=~s/\&$//;
1179: return &reply("put:$udomain:$uname:$namespace:$items",$uhome);
1180: }
1181:
1182: # ------------------------------------------------------ critical put interface
1183:
1184: sub cput {
1185: my ($namespace,$storehash,$udomain,$uname)=@_;
1186: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1187: if (!$uname) { $uname=$ENV{'user.name'}; }
1188: my $uhome=&homeserver($uname,$udomain);
1189: my $items='';
1190: map {
1191: $items.=escape($_).'='.escape($$storehash{$_}).'&';
1192: } keys %$storehash;
1193: $items=~s/\&$//;
1194: return &critical("put:$udomain:$uname:$namespace:$items",$uhome);
1195: }
1196:
1197: # -------------------------------------------------------------- eget interface
1198:
1199: sub eget {
1200: my ($namespace,$storearr,$udomain,$uname)=@_;
1201: my $items='';
1202: map {
1203: $items.=escape($_).'&';
1204: } @$storearr;
1205: $items=~s/\&$//;
1206: if (!$udomain) { $udomain=$ENV{'user.domain'}; }
1207: if (!$uname) { $uname=$ENV{'user.name'}; }
1208: my $uhome=&homeserver($uname,$udomain);
1209: my $rep=&reply("eget:$udomain:$uname:$namespace:$items",$uhome);
1210: my @pairs=split(/\&/,$rep);
1211: my %returnhash=();
1212: my $i=0;
1213: map {
1214: $returnhash{$_}=unescape($pairs[$i]);
1215: $i++;
1216: } @$storearr;
1217: return %returnhash;
1218: }
1219:
1220: # ------------------------------------------------- Check for a user privilege
1221:
1222: sub allowed {
1223: my ($priv,$uri)=@_;
1224:
1225: my $orguri=$uri;
1226: $uri=&declutter($uri);
1227:
1228: # Free bre access to adm and meta resources
1229:
1230: if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
1231: return 'F';
1232: }
1233:
1234: # Free bre to public access
1235:
1236: if ($priv eq 'bre') {
1237: if (&metadata($uri,'copyright') eq 'public') { return 'F'; }
1238: }
1239:
1240: my $thisallowed='';
1241: my $statecond=0;
1242: my $courseprivid='';
1243:
1244: # Course
1245:
1246: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
1247: $thisallowed.=$1;
1248: }
1249:
1250: # Domain
1251:
1252: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
1253: =~/$priv\&([^\:]*)/) {
1254: $thisallowed.=$1;
1255: }
1256:
1257: # Course: uri itself is a course
1258: my $courseuri=$uri;
1259: $courseuri=~s/\_(\d)/\/$1/;
1260: $courseuri=~s/^([^\/])/\/$1/;
1261:
1262: if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
1263: =~/$priv\&([^\:]*)/) {
1264: $thisallowed.=$1;
1265: }
1266:
1267: # Full access at system, domain or course-wide level? Exit.
1268:
1269: if ($thisallowed=~/F/) {
1270: return 'F';
1271: }
1272:
1273: # If this is generating or modifying users, exit with special codes
1274:
1275: if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:cca:'=~/\:$priv\:/) {
1276: return $thisallowed;
1277: }
1278: #
1279: # Gathered so far: system, domain and course wide privileges
1280: #
1281: # Course: See if uri or referer is an individual resource that is part of
1282: # the course
1283:
1284: if ($ENV{'request.course.id'}) {
1285: $courseprivid=$ENV{'request.course.id'};
1286: if ($ENV{'request.course.sec'}) {
1287: $courseprivid.='/'.$ENV{'request.course.sec'};
1288: }
1289: $courseprivid=~s/\_/\//;
1290: my $checkreferer=1;
1291: my @uriparts=split(/\//,$uri);
1292: my $filename=$uriparts[$#uriparts];
1293: my $pathname=$uri;
1294: $pathname=~s/\/$filename$//;
1295: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1296: /\&$filename\:([\d\|]+)\&/) {
1297: $statecond=$1;
1298: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1299: =~/$priv\&([^\:]*)/) {
1300: $thisallowed.=$1;
1301: $checkreferer=0;
1302: }
1303: }
1304:
1305: if ($checkreferer) {
1306: my $refuri=$ENV{'httpref.'.$orguri};
1307:
1308: unless ($refuri) {
1309: map {
1310: if ($_=~/^httpref\..*\*/) {
1311: my $pattern=$_;
1312: $pattern=~s/^httpref\.\/res\///;
1313: $pattern=~s/\*/\[\^\/\]\+/g;
1314: $pattern=~s/\//\\\//g;
1315: if ($orguri=~/$pattern/) {
1316: $refuri=$ENV{$_};
1317: }
1318: }
1319: } keys %ENV;
1320: }
1321: if ($refuri) {
1322: $refuri=&declutter($refuri);
1323: my @uriparts=split(/\//,$refuri);
1324: my $filename=$uriparts[$#uriparts];
1325: my $pathname=$refuri;
1326: $pathname=~s/\/$filename$//;
1327: if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
1328: /\&$filename\:([\d\|]+)\&/) {
1329: my $refstatecond=$1;
1330: if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
1331: =~/$priv\&([^\:]*)/) {
1332: $thisallowed.=$1;
1333: $uri=$refuri;
1334: $statecond=$refstatecond;
1335: }
1336: }
1337: }
1338: }
1339: }
1340:
1341: #
1342: # Gathered now: all privileges that could apply, and condition number
1343: #
1344: #
1345: # Full or no access?
1346: #
1347:
1348: if ($thisallowed=~/F/) {
1349: return 'F';
1350: }
1351:
1352: unless ($thisallowed) {
1353: return '';
1354: }
1355:
1356: # Restrictions exist, deal with them
1357: #
1358: # C:according to course preferences
1359: # R:according to resource settings
1360: # L:unless locked
1361: # X:according to user session state
1362: #
1363:
1364: # Possibly locked functionality, check all courses
1365: # Locks might take effect only after 10 minutes cache expiration for other
1366: # courses, and 2 minutes for current course
1367:
1368: my $envkey;
1369: if ($thisallowed=~/L/) {
1370: foreach $envkey (keys %ENV) {
1371: if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
1372: my $courseid=$2;
1373: my $roleid=$1.'.'.$2;
1374: $courseid=~s/^\///;
1375: my $expiretime=600;
1376: if ($ENV{'request.role'} eq $roleid) {
1377: $expiretime=120;
1378: }
1379: my ($cdom,$cnum,$csec)=split(/\//,$courseid);
1380: my $prefix='course.'.$cdom.'_'.$cnum.'.';
1381: if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
1382: &coursedescription($courseid);
1383: }
1384: if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
1385: || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
1386: if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
1387: &log($ENV{'user.domain'},$ENV{'user.name'},
1388: $ENV{'user.host'},
1389: 'Locked by res: '.$priv.' for '.$uri.' due to '.
1390: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1391: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1392: return '';
1393: }
1394: }
1395: if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
1396: || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
1397: if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
1398: &log($ENV{'user.domain'},$ENV{'user.name'},
1399: $ENV{'user.host'},
1400: 'Locked by priv: '.$priv.' for '.$uri.' due to '.
1401: $cdom.'/'.$cnum.'/'.$csec.' expire '.
1402: $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
1403: return '';
1404: }
1405: }
1406: }
1407: }
1408: }
1409:
1410: #
1411: # Rest of the restrictions depend on selected course
1412: #
1413:
1414: unless ($ENV{'request.course.id'}) {
1415: return '1';
1416: }
1417:
1418: #
1419: # Now user is definitely in a course
1420: #
1421:
1422:
1423: # Course preferences
1424:
1425: if ($thisallowed=~/C/) {
1426: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1427: if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
1428: =~/\,$rolecode\,/) {
1429: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1430: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
1431: $ENV{'request.course.id'});
1432: return '';
1433: }
1434: }
1435:
1436: # Resource preferences
1437:
1438: if ($thisallowed=~/R/) {
1439: my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
1440: my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
1441: if (-e $filename) {
1442: my @content;
1443: {
1444: my $fh=Apache::File->new($filename);
1445: @content=<$fh>;
1446: }
1447: if (join('',@content)=~
1448: /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
1449: &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
1450: 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
1451: return '';
1452:
1453: }
1454: }
1455: }
1456:
1457: # Restricted by state?
1458:
1459: if ($thisallowed=~/X/) {
1460: if (&condval($statecond)) {
1461: return '2';
1462: } else {
1463: return '';
1464: }
1465: }
1466:
1467: return 'F';
1468: }
1469:
1470: # ----------------------------------------------------------------- Define Role
1471:
1472: sub definerole {
1473: if (allowed('mcr','/')) {
1474: my ($rolename,$sysrole,$domrole,$courole)=@_;
1475: map {
1476: my ($crole,$cqual)=split(/\&/,$_);
1477: if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
1478: if ($pr{'cr:s'}=~/$crole\&/) {
1479: if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) {
1480: return "refused:s:$crole&$cqual";
1481: }
1482: }
1483: } split('/',$sysrole);
1484: map {
1485: my ($crole,$cqual)=split(/\&/,$_);
1486: if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
1487: if ($pr{'cr:d'}=~/$crole\&/) {
1488: if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) {
1489: return "refused:d:$crole&$cqual";
1490: }
1491: }
1492: } split('/',$domrole);
1493: map {
1494: my ($crole,$cqual)=split(/\&/,$_);
1495: if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
1496: if ($pr{'cr:c'}=~/$crole\&/) {
1497: if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) {
1498: return "refused:c:$crole&$cqual";
1499: }
1500: }
1501: } split('/',$courole);
1502: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1503: "$ENV{'user.domain'}:$ENV{'user.name'}:".
1504: "rolesdef_$rolename=".
1505: escape($sysrole.'_'.$domrole.'_'.$courole);
1506: return reply($command,$ENV{'user.home'});
1507: } else {
1508: return 'refused';
1509: }
1510: }
1511:
1512: # ---------------- Make a metadata query against the network of library servers
1513:
1514: sub metadata_query {
1515: my ($query,$custom,$customshow)=@_;
1516: # need to put in a library server loop here and return a hash
1517: my %rhash;
1518: for my $server (keys %libserv) {
1519: unless ($custom or $customshow) {
1520: my $reply=&reply("querysend:".&escape($query),$server);
1521: $rhash{$server}=$reply;
1522: }
1523: else {
1524: my $reply=&reply("querysend:".&escape($query).':'.
1525: &escape($custom).':'.&escape($customshow),
1526: $server);
1527: $rhash{$server}=$reply;
1528: }
1529: }
1530: return \%rhash;
1531: }
1532:
1533: # ------------------------------------------------------------------ Plain Text
1534:
1535: sub plaintext {
1536: my $short=shift;
1537: return $prp{$short};
1538: }
1539:
1540: # ------------------------------------------------------------------ Plain Text
1541:
1542: sub fileembstyle {
1543: my $ending=shift;
1544: return $fe{$ending};
1545: }
1546:
1547: # ------------------------------------------------------------ Description Text
1548:
1549: sub filedescription {
1550: my $ending=shift;
1551: return $fd{$ending};
1552: }
1553:
1554: # ----------------------------------------------------------------- Assign Role
1555:
1556: sub assignrole {
1557: my ($udom,$uname,$url,$role,$end,$start)=@_;
1558: my $mrole;
1559: if ($role =~ /^cr\//) {
1560: unless (&allowed('ccr',$url)) {
1561: &logthis('Refused custom assignrole: '.
1562: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1563: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1564: return 'refused';
1565: }
1566: $mrole='cr';
1567: } else {
1568: my $cwosec=$url;
1569: $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
1570: unless (&allowed('c'.$role,$cwosec)) {
1571: &logthis('Refused assignrole: '.
1572: $udom.' '.$uname.' '.$url.' '.$role.' '.$end.' '.$start.' by '.
1573: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1574: return 'refused';
1575: }
1576: $mrole=$role;
1577: }
1578: my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
1579: "$udom:$uname:$url".'_'."$mrole=$role";
1580: if ($end) { $command.='_'.$end; }
1581: if ($start) {
1582: if ($end) {
1583: $command.='_'.$start;
1584: } else {
1585: $command.='_0_'.$start;
1586: }
1587: }
1588: return &reply($command,&homeserver($uname,$udom));
1589: }
1590:
1591: # --------------------------------------------------------------- Modify a user
1592:
1593:
1594: sub modifyuser {
1595: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
1596: &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
1597: $umode.', '.$first.', '.$middle.', '.
1598: $last.', '.$gene.' by '.
1599: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1600: my $uhome=&homeserver($uname,$udom);
1601: # ----------------------------------------------------------------- Create User
1602: if (($uhome eq 'no_host') && ($umode) && ($upass)) {
1603: my $unhome='';
1604: if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
1605: $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
1606: } else {
1607: my $tryserver;
1608: my $loadm=10000000;
1609: foreach $tryserver (keys %libserv) {
1610: if ($hostdom{$tryserver} eq $udom) {
1611: my $answer=reply('load',$tryserver);
1612: if (($answer=~/\d+/) && ($answer<$loadm)) {
1613: $loadm=$answer;
1614: $unhome=$tryserver;
1615: }
1616: }
1617: }
1618: }
1619: if (($unhome eq '') || ($unhome eq 'no_host')) {
1620: return 'error: find home';
1621: }
1622: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
1623: &escape($upass),$unhome);
1624: unless ($reply eq 'ok') {
1625: return 'error: '.$reply;
1626: }
1627: $uhome=&homeserver($uname,$udom);
1628: if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
1629: return 'error: verify home';
1630: }
1631: }
1632: # ---------------------------------------------------------------------- Add ID
1633: if ($uid) {
1634: $uid=~tr/A-Z/a-z/;
1635: my %uidhash=&idrget($udom,$uname);
1636: if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
1637: unless ($uid eq $uidhash{$uname}) {
1638: return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
1639: }
1640: } else {
1641: &idput($udom,($uname => $uid));
1642: }
1643: }
1644: # -------------------------------------------------------------- Add names, etc
1645: my %names=&get('environment',
1646: ['firstname','middlename','lastname','generation'],
1647: $udom,$uname);
1648: if ($first) { $names{'firstname'} = $first; }
1649: if ($middle) { $names{'middlename'} = $middle; }
1650: if ($last) { $names{'lastname'} = $last; }
1651: if ($gene) { $names{'generation'} = $gene; }
1652: my $reply = &put('environment', \%names, $udom,$uname);
1653: if ($reply ne 'ok') { return 'error: '.$reply; }
1654: &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
1655: $umode.', '.$first.', '.$middle.', '.
1656: $last.', '.$gene.' by '.
1657: $ENV{'user.name'}.' at '.$ENV{'user.domain'});
1658: return 'ok';
1659: }
1660:
1661: # -------------------------------------------------------------- Modify student
1662:
1663: sub modifystudent {
1664: my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
1665: $end,$start)=@_;
1666: my $cid='';
1667: unless ($cid=$ENV{'request.course.id'}) {
1668: return 'not_in_class';
1669: }
1670: # --------------------------------------------------------------- Make the user
1671: my $reply=&modifyuser
1672: ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
1673: unless ($reply eq 'ok') { return $reply; }
1674: my $uhome=&homeserver($uname,$udom);
1675: if (($uhome eq '') || ($uhome eq 'no_host')) {
1676: return 'error: no such user';
1677: }
1678: # -------------------------------------------------- Add student to course list
1679: $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
1680: $ENV{'course.'.$cid.'.num'}.':classlist:'.
1681: &escape($uname.':'.$udom).'='.
1682: &escape($end.':'.$start),
1683: $ENV{'course.'.$cid.'.home'});
1684: unless (($reply eq 'ok') || ($reply eq 'delayed')) {
1685: return 'error: '.$reply;
1686: }
1687: # ---------------------------------------------------- Add student role to user
1688: my $uurl='/'.$cid;
1689: $uurl=~s/\_/\//g;
1690: if ($usec) {
1691: $uurl.='/'.$usec;
1692: }
1693: return &assignrole($udom,$uname,$uurl,'st',$end,$start);
1694: }
1695:
1696: # ------------------------------------------------- Write to course preferences
1697:
1698: sub writecoursepref {
1699: my ($courseid,%prefs)=@_;
1700: $courseid=~s/^\///;
1701: $courseid=~s/\_/\//g;
1702: my ($cdomain,$cnum)=split(/\//,$courseid);
1703: my $chome=homeserver($cnum,$cdomain);
1704: if (($chome eq '') || ($chome eq 'no_host')) {
1705: return 'error: no such course';
1706: }
1707: my $cstring='';
1708: map {
1709: $cstring.=escape($_).'='.escape($prefs{$_}).'&';
1710: } keys %prefs;
1711: $cstring=~s/\&$//;
1712: return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
1713: }
1714:
1715: # ---------------------------------------------------------- Make/modify course
1716:
1717: sub createcourse {
1718: my ($udom,$description,$url)=@_;
1719: $url=&declutter($url);
1720: my $cid='';
1721: unless (&allowed('ccc',$ENV{'user.domain'})) {
1722: return 'refused';
1723: }
1724: unless ($udom eq $ENV{'user.domain'}) {
1725: return 'refused';
1726: }
1727: # ------------------------------------------------------------------- Create ID
1728: my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1729: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1730: # ----------------------------------------------- Make sure that does not exist
1731: my $uhome=&homeserver($uname,$udom);
1732: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1733: $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
1734: unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
1735: $uhome=&homeserver($uname,$udom);
1736: unless (($uhome eq '') || ($uhome eq 'no_host')) {
1737: return 'error: unable to generate unique course-ID';
1738: }
1739: }
1740: # ------------------------------------------------------------- Make the course
1741: my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
1742: $ENV{'user.home'});
1743: unless ($reply eq 'ok') { return 'error: '.$reply; }
1744: $uhome=&homeserver($uname,$udom);
1745: if (($uhome eq '') || ($uhome eq 'no_host')) {
1746: return 'error: no such course';
1747: }
1748: &writecoursepref($udom.'_'.$uname,
1749: ('description' => $description,
1750: 'url' => $url));
1751: return '/'.$udom.'/'.$uname;
1752: }
1753:
1754: # ---------------------------------------------------------- Assign Custom Role
1755:
1756: sub assigncustomrole {
1757: my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
1758: return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
1759: $end,$start);
1760: }
1761:
1762: # ----------------------------------------------------------------- Revoke Role
1763:
1764: sub revokerole {
1765: my ($udom,$uname,$url,$role)=@_;
1766: my $now=time;
1767: return &assignrole($udom,$uname,$url,$role,$now);
1768: }
1769:
1770: # ---------------------------------------------------------- Revoke Custom Role
1771:
1772: sub revokecustomrole {
1773: my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
1774: my $now=time;
1775: return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
1776: }
1777:
1778: # ------------------------------------------------------------ Directory lister
1779:
1780: sub dirlist {
1781: my $uri=shift;
1782: $uri=~s/^\///;
1783: $uri=~s/\/$//;
1784: my ($res,$udom,$uname,@rest)=split(/\//,$uri);
1785: if ($udom) {
1786: if ($uname) {
1787: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
1788: homeserver($uname,$udom));
1789: return split(/:/,$listing);
1790: } else {
1791: my $tryserver;
1792: my %allusers=();
1793: foreach $tryserver (keys %libserv) {
1794: if ($hostdom{$tryserver} eq $udom) {
1795: my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
1796: $tryserver);
1797: if (($listing ne 'no_such_dir') && ($listing ne 'empty')
1798: && ($listing ne 'con_lost')) {
1799: map {
1800: my ($entry,@stat)=split(/&/,$_);
1801: $allusers{$entry}=1;
1802: } split(/:/,$listing);
1803: }
1804: }
1805: }
1806: my $alluserstr='';
1807: map {
1808: $alluserstr.=$_.'&user:';
1809: } sort keys %allusers;
1810: $alluserstr=~s/:$//;
1811: return split(/:/,$alluserstr);
1812: }
1813: } else {
1814: my $tryserver;
1815: my %alldom=();
1816: foreach $tryserver (keys %libserv) {
1817: $alldom{$hostdom{$tryserver}}=1;
1818: }
1819: my $alldomstr='';
1820: map {
1821: $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
1822: } sort keys %alldom;
1823: $alldomstr=~s/:$//;
1824: return split(/:/,$alldomstr);
1825: }
1826: }
1827:
1828: # -------------------------------------------------------- Value of a Condition
1829:
1830: sub directcondval {
1831: my $number=shift;
1832: if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
1833: return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
1834: } else {
1835: return 2;
1836: }
1837: }
1838:
1839: sub condval {
1840: my $condidx=shift;
1841: my $result=0;
1842: my $allpathcond='';
1843: map {
1844: if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
1845: $allpathcond.=
1846: '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
1847: }
1848: } split(/\|/,$condidx);
1849: $allpathcond=~s/\|$//;
1850: if ($ENV{'request.course.id'}) {
1851: if ($allpathcond) {
1852: my $operand='|';
1853: my @stack;
1854: map {
1855: if ($_ eq '(') {
1856: push @stack,($operand,$result)
1857: } elsif ($_ eq ')') {
1858: my $before=pop @stack;
1859: if (pop @stack eq '&') {
1860: $result=$result>$before?$before:$result;
1861: } else {
1862: $result=$result>$before?$result:$before;
1863: }
1864: } elsif (($_ eq '&') || ($_ eq '|')) {
1865: $operand=$_;
1866: } else {
1867: my $new=directcondval($_);
1868: if ($operand eq '&') {
1869: $result=$result>$new?$new:$result;
1870: } else {
1871: $result=$result>$new?$result:$new;
1872: }
1873: }
1874: } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
1875: }
1876: }
1877: return $result;
1878: }
1879:
1880: # --------------------------------------------------------- Value of a Variable
1881:
1882: sub EXT {
1883: my ($varname,$symbparm)=@_;
1884: unless ($varname) { return ''; }
1885: my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
1886: my $rest;
1887: if ($therest[0]) {
1888: $rest=join('.',@therest);
1889: } else {
1890: $rest='';
1891: }
1892: my $qualifierrest=$qualifier;
1893: if ($rest) { $qualifierrest.='.'.$rest; }
1894: my $spacequalifierrest=$space;
1895: if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
1896: if ($realm eq 'user') {
1897: # --------------------------------------------------------------- user.resource
1898: if ($space eq 'resource') {
1899: my %restored=&restore();
1900: return $restored{$qualifierrest};
1901: # ----------------------------------------------------------------- user.access
1902: } elsif ($space eq 'access') {
1903: return &allowed($qualifier,$rest);
1904: # ------------------------------------------ user.preferences, user.environment
1905: } elsif (($space eq 'preferences') || ($space eq 'environment')) {
1906: return $ENV{join('.',('environment',$qualifierrest))};
1907: # ----------------------------------------------------------------- user.course
1908: } elsif ($space eq 'course') {
1909: return $ENV{join('.',('request.course',$qualifier))};
1910: # ------------------------------------------------------------------- user.role
1911: } elsif ($space eq 'role') {
1912: my ($role,$where)=split(/\./,$ENV{'request.role'});
1913: if ($qualifier eq 'value') {
1914: return $role;
1915: } elsif ($qualifier eq 'extent') {
1916: return $where;
1917: }
1918: # ----------------------------------------------------------------- user.domain
1919: } elsif ($space eq 'domain') {
1920: return $ENV{'user.domain'};
1921: # ------------------------------------------------------------------- user.name
1922: } elsif ($space eq 'name') {
1923: return $ENV{'user.name'};
1924: # ---------------------------------------------------- Any other user namespace
1925: } else {
1926: my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
1927: my %reply=&get($space,[$item]);
1928: return $reply{$item};
1929: }
1930: } elsif ($realm eq 'request') {
1931: # ------------------------------------------------------------- request.browser
1932: if ($space eq 'browser') {
1933: return $ENV{'browser.'.$qualifier};
1934: # ------------------------------------------------------------ request.filename
1935: } else {
1936: return $ENV{'request.'.$spacequalifierrest};
1937: }
1938: } elsif ($realm eq 'course') {
1939: # ---------------------------------------------------------- course.description
1940: return $ENV{'course.'.$ENV{'request.course.id'}.'.'.
1941: $spacequalifierrest};
1942: } elsif ($realm eq 'resource') {
1943: if ($ENV{'request.course.id'}) {
1944:
1945: # print '<br>'.$space.' - '.$qualifier.' - '.$spacequalifierrest;
1946:
1947:
1948: # ----------------------------------------------------- Cascading lookup scheme
1949: my $symbp;
1950: if ($symbparm) {
1951: $symbp=$symbparm;
1952: } else {
1953: $symbp=&symbread();
1954: }
1955: my $mapp=(split(/\_\_\_/,$symbp))[0];
1956:
1957: my $symbparm=$symbp.'.'.$spacequalifierrest;
1958: my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
1959:
1960: my $seclevel=
1961: $ENV{'request.course.id'}.'.['.
1962: $ENV{'request.course.sec'}.'].'.$spacequalifierrest;
1963: my $seclevelr=
1964: $ENV{'request.course.id'}.'.['.
1965: $ENV{'request.course.sec'}.'].'.$symbparm;
1966: my $seclevelm=
1967: $ENV{'request.course.id'}.'.['.
1968: $ENV{'request.course.sec'}.'].'.$mapparm;
1969:
1970: my $courselevel=
1971: $ENV{'request.course.id'}.'.'.$spacequalifierrest;
1972: my $courselevelr=
1973: $ENV{'request.course.id'}.'.'.$symbparm;
1974: my $courselevelm=
1975: $ENV{'request.course.id'}.'.'.$mapparm;
1976:
1977: # ----------------------------------------------------------- first, check user
1978: my %resourcedata=get('resourcedata',
1979: [$courselevelr,$courselevelm,$courselevel]);
1980: if (($resourcedata{$courselevelr}!~/^error\:/) &&
1981: ($resourcedata{$courselevelr}!~/^con_lost/)) {
1982:
1983: if ($resourcedata{$courselevelr}) {
1984: return $resourcedata{$courselevelr}; }
1985: if ($resourcedata{$courselevelm}) {
1986: return $resourcedata{$courselevelm}; }
1987: if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
1988:
1989: } else {
1990: if ($resourcedata{$courselevelr}!~/No such file/) {
1991: &logthis("<font color=blue>WARNING:".
1992: " Trying to get resource data for ".$ENV{'user.name'}." at "
1993: .$ENV{'user.domain'}.": ".$resourcedata{$courselevelr}.
1994: "</font>");
1995: }
1996: }
1997:
1998: # -------------------------------------------------------- second, check course
1999:
2000: my $reply=&reply('get:'.
2001: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.':'.
2002: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
2003: ':resourcedata:'.
2004: &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
2005: &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
2006: $ENV{'course.'.$ENV{'request.course.id'}.'.home'});
2007: if ($reply!~/^error\:/) {
2008: map {
2009: if ($_) { return &unescape($_); }
2010: } split(/\&/,$reply);
2011: }
2012: if (($reply=~/^con_lost/) || ($reply=~/^error\:/)) {
2013: &logthis("<font color=blue>WARNING:".
2014: " Getting ".$reply." asking for ".$varname." for ".
2015: $ENV{'course.'.$ENV{'request.course.id'}.'.num'}.
2016: ' at '.
2017: $ENV{'course.'.$ENV{'request.course.id'}.'.domain'}.
2018: ' from '.
2019: $ENV{'course.'.$ENV{'request.course.id'}.'.home'}.
2020: "</font>");
2021: }
2022: # ------------------------------------------------------ third, check map parms
2023: my %parmhash=();
2024: my $thisparm='';
2025: if (tie(%parmhash,'GDBM_File',
2026: $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
2027: $thisparm=$parmhash{$symbparm};
2028: untie(%parmhash);
2029: }
2030: if ($thisparm) { return $thisparm; }
2031: }
2032:
2033: # --------------------------------------------- last, look in resource metadata
2034:
2035: $spacequalifierrest=~s/\./\_/;
2036: my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
2037: if ($metadata) { return $metadata; }
2038: $metadata=&metadata($ENV{'request.filename'},
2039: 'parameter_'.$spacequalifierrest);
2040: if ($metadata) { return $metadata; }
2041:
2042: # ------------------------------------------------------------------ Cascade up
2043:
2044: unless ($space eq '0') {
2045: my ($part,$id)=split(/\_/,$space);
2046: if ($id) {
2047: my $partgeneral=&EXT('resource.'.$part.'.'.$qualifierrest,
2048: $symbparm);
2049: if ($partgeneral) { return $partgeneral; }
2050: } else {
2051: my $resourcegeneral=&EXT('resource.0.'.$qualifierrest,
2052: $symbparm);
2053: if ($resourcegeneral) { return $resourcegeneral; }
2054: }
2055: }
2056:
2057: # ---------------------------------------------------- Any other user namespace
2058: } elsif ($realm eq 'environment') {
2059: # ----------------------------------------------------------------- environment
2060: return $ENV{'environment.'.$spacequalifierrest};
2061: } elsif ($realm eq 'system') {
2062: # ----------------------------------------------------------------- system.time
2063: if ($space eq 'time') {
2064: return time;
2065: }
2066: }
2067: return '';
2068: }
2069:
2070: # ---------------------------------------------------------------- Get metadata
2071:
2072: sub metadata {
2073: my ($uri,$what)=@_;
2074:
2075: $uri=&declutter($uri);
2076: my $filename=$uri;
2077: $uri=~s/\.meta$//;
2078: unless ($metacache{$uri.':keys'}) {
2079: my %metathesekeys=();
2080: unless ($filename=~/\.meta$/) { $filename.='.meta'; }
2081: my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
2082: my $parser=HTML::TokeParser->new(\$metastring);
2083: my $token;
2084: undef %metathesekeys;
2085: while ($token=$parser->get_token) {
2086: if ($token->[0] eq 'S') {
2087: if (defined($token->[2]->{'package'})) {
2088: my $package=$token->[2]->{'package'};
2089: my $keyroot='';
2090: if (defined($token->[2]->{'part'})) {
2091: $keyroot.='_'.$token->[2]->{'part'};
2092: }
2093: if (defined($token->[2]->{'id'})) {
2094: $keyroot.='_'.$token->[2]->{'id'};
2095: }
2096: if ($metacache{$uri.':packages'}) {
2097: $metacache{$uri.':packages'}.=','.$package.$keyroot;
2098: } else {
2099: $metacache{$uri.':packages'}=$package.$keyroot;
2100: }
2101: map {
2102: if ($_=~/^$package\&/) {
2103: my ($pack,$name,$subp)=split(/\&/,$_);
2104: my $value=$packagetab{$_};
2105: my $part=$keyroot;
2106: $part=~s/^\_//;
2107: if ($subp eq 'display') {
2108: $value.=' [Part: '.$part.']';
2109: }
2110: my $unikey='parameter'.$keyroot.'_'.$name;
2111: $metathesekeys{$unikey}=1;
2112: $metacache{$uri.':'.$unikey.'.part'}=$part;
2113: unless
2114: (defined($metacache{$uri.':'.$unikey.'.'.$subp})) {
2115: $metacache{$uri.':'.$unikey.'.'.$subp}=$value;
2116: }
2117: }
2118: } keys %packagetab;
2119: } else {
2120: my $entry=$token->[1];
2121: my $unikey=$entry;
2122: if (defined($token->[2]->{'part'})) {
2123: $unikey.='_'.$token->[2]->{'part'};
2124: }
2125: if (defined($token->[2]->{'id'})) {
2126: $unikey.='_'.$token->[2]->{'id'};
2127: }
2128: if (defined($token->[2]->{'name'})) {
2129: $unikey.='_'.$token->[2]->{'name'};
2130: }
2131: $metathesekeys{$unikey}=1;
2132: map {
2133: $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
2134: } @{$token->[3]};
2135: unless (
2136: $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
2137: ) { $metacache{$uri.':'.$unikey}=
2138: $metacache{$uri.':'.$unikey.'.default'};
2139: }
2140: }
2141: }
2142: }
2143: $metacache{$uri.':keys'}=join(',',keys %metathesekeys);
2144: }
2145: return $metacache{$uri.':'.$what};
2146: }
2147:
2148: # ------------------------------------------------- Update symbolic store links
2149:
2150: sub symblist {
2151: my ($mapname,%newhash)=@_;
2152: $mapname=declutter($mapname);
2153: my %hash;
2154: if (($ENV{'request.course.fn'}) && (%newhash)) {
2155: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2156: &GDBM_WRCREAT,0640)) {
2157: map {
2158: $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
2159: } keys %newhash;
2160: if (untie(%hash)) {
2161: return 'ok';
2162: }
2163: }
2164: }
2165: return 'error';
2166: }
2167:
2168: # ------------------------------------------------------ Return symb list entry
2169:
2170: sub symbread {
2171: my $thisfn=shift;
2172: unless ($thisfn) {
2173: $thisfn=$ENV{'request.filename'};
2174: }
2175: $thisfn=declutter($thisfn);
2176: my %hash;
2177: my %bighash;
2178: my $syval='';
2179: if (($ENV{'request.course.fn'}) && ($thisfn)) {
2180: if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
2181: &GDBM_READER,0640)) {
2182: $syval=$hash{$thisfn};
2183: untie(%hash);
2184: }
2185: # ---------------------------------------------------------- There was an entry
2186: if ($syval) {
2187: unless ($syval=~/\_\d+$/) {
2188: unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
2189: &appenv('request.ambiguous' => $thisfn);
2190: return '';
2191: }
2192: $syval.=$1;
2193: }
2194: } else {
2195: # ------------------------------------------------------- Was not in symb table
2196: if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
2197: &GDBM_READER,0640)) {
2198: # ---------------------------------------------- Get ID(s) for current resource
2199: my $ids=$bighash{'ids_/res/'.$thisfn};
2200: unless ($ids) {
2201: $ids=$bighash{'ids_/'.$thisfn};
2202: }
2203: if ($ids) {
2204: # ------------------------------------------------------------------- Has ID(s)
2205: my @possibilities=split(/\,/,$ids);
2206: if ($#possibilities==0) {
2207: # ----------------------------------------------- There is only one possibility
2208: my ($mapid,$resid)=split(/\./,$ids);
2209: $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
2210: } else {
2211: # ------------------------------------------ There is more than one possibility
2212: my $realpossible=0;
2213: map {
2214: my $file=$bighash{'src_'.$_};
2215: if (&allowed('bre',$file)) {
2216: my ($mapid,$resid)=split(/\./,$_);
2217: if ($bighash{'map_type_'.$mapid} ne 'page') {
2218: $realpossible++;
2219: $syval=declutter($bighash{'map_id_'.$mapid}).
2220: '___'.$resid;
2221: }
2222: }
2223: } @possibilities;
2224: if ($realpossible!=1) { $syval=''; }
2225: }
2226: }
2227: untie(%bighash)
2228: }
2229: }
2230: if ($syval) {
2231: return $syval.'___'.$thisfn;
2232: }
2233: }
2234: &appenv('request.ambiguous' => $thisfn);
2235: return '';
2236: }
2237:
2238: # ---------------------------------------------------------- Return random seed
2239:
2240: sub numval {
2241: my $txt=shift;
2242: $txt=~tr/A-J/0-9/;
2243: $txt=~tr/a-j/0-9/;
2244: $txt=~tr/K-T/0-9/;
2245: $txt=~tr/k-t/0-9/;
2246: $txt=~tr/U-Z/0-5/;
2247: $txt=~tr/u-z/0-5/;
2248: $txt=~s/\D//g;
2249: return int($txt);
2250: }
2251:
2252: sub rndseed {
2253: my ($symb,$courseid,$domain,$username)=@_;
2254: if (!$symb) {
2255: unless ($symb=&symbread()) { return time; }
2256: }
2257: if (!$courseid) { $courseid=$ENV{'request.course.id'};}
2258: if (!$domain) {$domain=$ENV{'user.domain'};}
2259: if (!$username) {$username=$ENV{'user.name'};}
2260: {
2261: use integer;
2262: my $symbchck=unpack("%32C*",$symb) << 27;
2263: my $symbseed=numval($symb) << 22;
2264: my $namechck=unpack("%32C*",$username) << 17;
2265: my $nameseed=numval($username) << 12;
2266: my $domainseed=unpack("%32C*",$domain) << 7;
2267: my $courseseed=unpack("%32C*",$courseid);
2268: my $num=$symbseed+$nameseed+$domainseed+$courseseed+$namechck+$symbchck;
2269: #uncommenting these lines can break things!
2270: #&Apache::lonxml::debug("$symbseed:$nameseed;$domainseed|$courseseed;$namechck:$symbchck");
2271: #&Apache::lonxml::debug("rndseed :$num:$symb");
2272: return $num;
2273: }
2274: }
2275:
2276: sub ireceipt {
2277: my ($funame,$fudom,$fucourseid,$fusymb)=@_;
2278: my $cuname=unpack("%32C*",$funame);
2279: my $cudom=unpack("%32C*",$fudom);
2280: my $cucourseid=unpack("%32C*",$fucourseid);
2281: my $cusymb=unpack("%32C*",$fusymb);
2282: my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
2283: return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
2284: ($cunique%$cuname+
2285: $cunique%$cudom+
2286: $cusymb%$cuname+
2287: $cusymb%$cudom+
2288: $cucourseid%$cuname+
2289: $cucourseid%$cudom);
2290: }
2291:
2292: sub receipt {
2293: return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
2294: $ENV{'request.course.id'},&symbread());
2295: }
2296:
2297: # ------------------------------------------------------------ Serves up a file
2298: # returns either the contents of the file or a -1
2299: sub getfile {
2300: my $file=shift;
2301: &repcopy($file);
2302: if (! -e $file ) { return -1; };
2303: my $fh=Apache::File->new($file);
2304: my $a='';
2305: while (<$fh>) { $a .=$_; }
2306: return $a
2307: }
2308:
2309: sub filelocation {
2310: my ($dir,$file) = @_;
2311: my $location;
2312: $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
2313: if ($file=~m:^/~:) { # is a contruction space reference
2314: $location = $file;
2315: $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
2316: } else {
2317: $file=~s/^$perlvar{'lonDocRoot'}//;
2318: $file=~s:^/*res::;
2319: if ( !( $file =~ m:^/:) ) {
2320: $location = $dir. '/'.$file;
2321: } else {
2322: $location = '/home/httpd/html/res'.$file;
2323: }
2324: }
2325: $location=~s://+:/:g; # remove duplicate /
2326: while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
2327: return $location;
2328: }
2329:
2330: sub hreflocation {
2331: my ($dir,$file)=@_;
2332: unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
2333: my $finalpath=filelocation($dir,$file);
2334: $finalpath=~s/^\/home\/httpd\/html//;
2335: return $finalpath;
2336: } else {
2337: return $file;
2338: }
2339: }
2340:
2341: # ------------------------------------------------------------- Declutters URLs
2342:
2343: sub declutter {
2344: my $thisfn=shift;
2345: $thisfn=~s/^$perlvar{'lonDocRoot'}//;
2346: $thisfn=~s/^\///;
2347: $thisfn=~s/^res\///;
2348: return $thisfn;
2349: }
2350:
2351: # -------------------------------------------------------- Escape Special Chars
2352:
2353: sub escape {
2354: my $str=shift;
2355: $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
2356: return $str;
2357: }
2358:
2359: # ----------------------------------------------------- Un-Escape Special Chars
2360:
2361: sub unescape {
2362: my $str=shift;
2363: $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
2364: return $str;
2365: }
2366:
2367: # ================================================================ Main Program
2368:
2369: sub BEGIN {
2370: unless ($readit) {
2371: # ------------------------------------------------------------ Read access.conf
2372: {
2373: my $config=Apache::File->new("/etc/httpd/conf/access.conf");
2374:
2375: while (my $configline=<$config>) {
2376: if ($configline =~ /PerlSetVar/) {
2377: my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
2378: chomp($varvalue);
2379: $perlvar{$varname}=$varvalue;
2380: }
2381: }
2382: }
2383:
2384: # ------------------------------------------------------------- Read hosts file
2385: {
2386: my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
2387:
2388: while (my $configline=<$config>) {
2389: chomp($configline);
2390: my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
2391: $hostname{$id}=$name;
2392: $hostdom{$id}=$domain;
2393: $hostip{$id}=$ip;
2394: if ($role eq 'library') { $libserv{$id}=$name; }
2395: }
2396: }
2397:
2398: # ------------------------------------------------------ Read spare server file
2399: {
2400: my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
2401:
2402: while (my $configline=<$config>) {
2403: chomp($configline);
2404: if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
2405: $spareid{$configline}=1;
2406: }
2407: }
2408: }
2409: # ------------------------------------------------------------ Read permissions
2410: {
2411: my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
2412:
2413: while (my $configline=<$config>) {
2414: chomp($configline);
2415: if ($configline) {
2416: my ($role,$perm)=split(/ /,$configline);
2417: if ($perm ne '') { $pr{$role}=$perm; }
2418: }
2419: }
2420: }
2421:
2422: # -------------------------------------------- Read plain texts for permissions
2423: {
2424: my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
2425:
2426: while (my $configline=<$config>) {
2427: chomp($configline);
2428: if ($configline) {
2429: my ($short,$plain)=split(/:/,$configline);
2430: if ($plain ne '') { $prp{$short}=$plain; }
2431: }
2432: }
2433: }
2434:
2435: # ---------------------------------------------------------- Read package table
2436: {
2437: my $config=Apache::File->new("$perlvar{'lonTabDir'}/packages.tab");
2438:
2439: while (my $configline=<$config>) {
2440: chomp($configline);
2441: my ($short,$plain)=split(/:/,$configline);
2442: my ($pack,$name)=split(/\&/,$short);
2443: if ($plain ne '') {
2444: $packagetab{$pack.'&'.$name.'&name'}=$name;
2445: $packagetab{$short}=$plain;
2446: }
2447: }
2448: }
2449:
2450: # ------------------------------------------------------------- Read file types
2451: {
2452: my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
2453:
2454: while (my $configline=<$config>) {
2455: chomp($configline);
2456: my ($ending,$emb,@descr)=split(/\s+/,$configline);
2457: if ($descr[0] ne '') {
2458: $fe{$ending}=$emb;
2459: $fd{$ending}=join(' ',@descr);
2460: }
2461: }
2462: }
2463:
2464: %metacache=();
2465:
2466: $readit='done';
2467: &logtouch();
2468: &logthis('<font color=yellow>INFO: Read configuration</font>');
2469: }
2470: }
2471: 1;
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/back.gif){kind=icon}
Return to lonnet.pm CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / loncom / lonnet / perl