File:  [LON-CAPA] / loncom / lonnet / perl / lonnet.pm
Revision 1.91: download - view: text, annotated - select for diffs
Tue Jan 9 22:27:07 2001 UTC (23 years, 6 months ago) by albertel
Branches: MAIN
CVS tags: HEAD
- more messages

    1: # The LearningOnline Network
    2: # TCP networking package
    3: #
    4: # Functions for use by content handlers:
    5: #
    6: # plaintext(short)   : plain text explanation of short term
    7: # fileembstyle(ext)  : embed style in page for file extension
    8: # filedescription(ext) : descriptor text for file extension
    9: # allowed(short,url) : returns codes for allowed actions 
   10: #                      F: full access
   11: #                      U,I,K: authentication modes (cxx only)
   12: #                      '': forbidden
   13: #                      1: user needs to choose course
   14: #                      2: browse allowed
   15: # definerole(rolename,sys,dom,cou) : define a custom role rolename
   16: #                      set priviledges in format of lonTabs/roles.tab for
   17: #                      system, domain and course level, 
   18: # assignrole(udom,uname,url,role,end,start) : give a role to a user for the
   19: #                      level given by url. Optional start and end dates
   20: #                      (leave empty string or zero for "no date") 
   21: # assigncustomrole (udom,uname,url,rdom,rnam,rolename,end,start) : give a
   22: #                      custom role to a user for the level given by url.
   23: #                      Specify name and domain of role author, and role name
   24: # revokerole (udom,uname,url,role) : Revoke a role for url
   25: # revokecustomrole (udom,uname,url,rdom,rnam,rolename) : Revoke a custom role
   26: # appenv(hash)       : adds hash to session environment
   27: # delenv(varname)    : deletes all environment entries starting with varname
   28: # store(hash)        : stores hash permanently for this url
   29: # cstore(hash)       : critical store
   30: # restore            : returns hash for this url
   31: # eget(namesp,array) : returns hash with keys from array filled in from namesp
   32: # get(namesp,array)  : returns hash with keys from array filled in from namesp
   33: # del(namesp,array)  : deletes keys out of array from namesp
   34: # put(namesp,hash)   : stores hash in namesp
   35: # cput(namesp,hash)  : critical put
   36: # dump(namesp)       : dumps the complete namespace into a hash
   37: # ssi(url,hash)      : does a complete request cycle on url to localhost, posts
   38: #                      hash
   39: # coursedescription(id) : returns and caches course description for id
   40: # repcopy(filename)  : replicate file
   41: # dirlist(url)       : gets a directory listing
   42: # directcondval(index) : reading condition value of single condition from 
   43: #                        state string
   44: # condval(index)     : value of condition index based on state
   45: # EXT(name)          : value of a variable
   46: # symblist(map,hash) : Updates symbolic storage links
   47: # symbread([filename]) : returns the data handle (filename optional)
   48: # rndseed()          : returns a random seed 
   49: # receipt()          : returns a receipt to be given out to users 
   50: # getfile(filename)  : returns the contents of filename, or a -1 if it can't
   51: #                      be found, replicates and subscribes to the file
   52: # filelocation(dir,file) : returns a farily clean absolute reference to file 
   53: #                          from the directory dir
   54: # hreflocation(dir,file) : same as filelocation, but for hrefs
   55: # log(domain,user,home,msg) : write to permanent log for user
   56: # usection(domain,user,courseid) : output of section name/number or '' for
   57: #                                  "not in course" and '-1' for "no section"
   58: # userenvironment(domain,user,what) : puts out any environment parameter 
   59: #                                     for a user
   60: # idput(domain,hash) : writes IDs for users from hash (name=>id,name=>id)
   61: # idget(domain,array): returns hash with usernames (id=>name,id=>name) for
   62: #                      an array of IDs
   63: # idrget(domain,array): returns hash with IDs for usernames (name=>id,...) for
   64: #                       an array of names
   65: # metadata(file,entry): returns the metadata entry for a file. entry='keys'
   66: #                       returns a comma separated list of keys
   67: #
   68: # 6/1/99,6/2,6/10,6/11,6/12,6/14,6/26,6/28,6/29,6/30,
   69: # 7/1,7/2,7/9,7/10,7/12,7/14,7/15,7/19,
   70: # 11/8,11/16,11/18,11/22,11/23,12/22,
   71: # 01/06,01/13,02/24,02/28,02/29,
   72: # 03/01,03/02,03/06,03/07,03/13,
   73: # 04/05,05/29,05/31,06/01,
   74: # 06/05,06/26 Gerd Kortemeyer
   75: # 06/26 Ben Tyszka
   76: # 06/30,07/15,07/17,07/18,07/20,07/21,07/22,07/25 Gerd Kortemeyer
   77: # 08/14 Ben Tyszka
   78: # 08/22,08/28,08/31,09/01,09/02,09/04,09/05,09/25,09/28,09/30 Gerd Kortemeyer
   79: # 10/04 Gerd Kortemeyer
   80: # 10/04 Guy Albertelli
   81: # 10/06,10/09,10/10,10/11,10/14,10/20,10/23,10/25,10/26,10/27,10/28,10/29, 
   82: # 10/30,10/31,
   83: # 11/2,11/14,11/15,11/16,11/20,11/21,11/22,11/25,11/27,
   84: # 12/02,12/12,12/13,12/14,12/28,12/29 Gerd Kortemeyer
   85: # 05/01/01 Guy Albertelli
   86: # 05/01,06/01,09/01 Gerd Kortemeyer
   87: 
   88: package Apache::lonnet;
   89: 
   90: use strict;
   91: use Apache::File;
   92: use LWP::UserAgent();
   93: use HTTP::Headers;
   94: use vars 
   95: qw(%perlvar %hostname %homecache %spareid %hostdom %libserv %pr %prp %fe %fd $readit %metacache);
   96: use IO::Socket;
   97: use GDBM_File;
   98: use Apache::Constants qw(:common :http);
   99: use HTML::TokeParser;
  100: use Fcntl qw(:flock);
  101: 
  102: # --------------------------------------------------------------------- Logging
  103: 
  104: sub logthis {
  105:     my $message=shift;
  106:     my $execdir=$perlvar{'lonDaemons'};
  107:     my $now=time;
  108:     my $local=localtime($now);
  109:     my $fh=Apache::File->new(">>$execdir/logs/lonnet.log");
  110:     print $fh "$local ($$): $message\n";
  111:     return 1;
  112: }
  113: 
  114: sub logperm {
  115:     my $message=shift;
  116:     my $execdir=$perlvar{'lonDaemons'};
  117:     my $now=time;
  118:     my $local=localtime($now);
  119:     my $fh=Apache::File->new(">>$execdir/logs/lonnet.perm.log");
  120:     print $fh "$now:$message:$local\n";
  121:     return 1;
  122: }
  123: 
  124: # -------------------------------------------------- Non-critical communication
  125: sub subreply {
  126:     my ($cmd,$server)=@_;
  127:     my $peerfile="$perlvar{'lonSockDir'}/$server";
  128:     my $client=IO::Socket::UNIX->new(Peer    =>"$peerfile",
  129:                                      Type    => SOCK_STREAM,
  130:                                      Timeout => 10)
  131:        or return "con_lost";
  132:     print $client "$cmd\n";
  133:     my $answer=<$client>;
  134:     if (!$answer) { $answer="con_lost"; }
  135:     chomp($answer);
  136:     return $answer;
  137: }
  138: 
  139: sub reply {
  140:     my ($cmd,$server)=@_;
  141:     my $answer=subreply($cmd,$server);
  142:     if ($answer eq 'con_lost') { $answer=subreply($cmd,$server); }
  143:     if (($answer=~/^refused/) || ($answer=~/^rejected/)) {
  144:        &logthis("<font color=blue>WARNING:".
  145:                 " $cmd to $server returned $answer</font>");
  146:     }
  147:     return $answer;
  148: }
  149: 
  150: # ----------------------------------------------------------- Send USR1 to lonc
  151: 
  152: sub reconlonc {
  153:     my $peerfile=shift;
  154:     &logthis("Trying to reconnect for $peerfile");
  155:     my $loncfile="$perlvar{'lonDaemons'}/logs/lonc.pid";
  156:     if (my $fh=Apache::File->new("$loncfile")) {
  157: 	my $loncpid=<$fh>;
  158:         chomp($loncpid);
  159:         if (kill 0 => $loncpid) {
  160: 	    &logthis("lonc at pid $loncpid responding, sending USR1");
  161:             kill USR1 => $loncpid;
  162:             sleep 1;
  163:             if (-e "$peerfile") { return; }
  164:             &logthis("$peerfile still not there, give it another try");
  165:             sleep 5;
  166:             if (-e "$peerfile") { return; }
  167:             &logthis(
  168:   "<font color=blue>WARNING: $peerfile still not there, giving up</font>");
  169:         } else {
  170: 	    &logthis(
  171:                "<font color=blue>WARNING:".
  172:                " lonc at pid $loncpid not responding, giving up</font>");
  173:         }
  174:     } else {
  175:      &logthis('<font color=blue>WARNING: lonc not running, giving up</font>');
  176:     }
  177: }
  178: 
  179: # ------------------------------------------------------ Critical communication
  180: 
  181: sub critical {
  182:     my ($cmd,$server)=@_;
  183:     unless ($hostname{$server}) {
  184:         &logthis("<font color=blue>WARNING:".
  185:                " Critical message to unknown server ($server)</font>");
  186:         return 'no_such_host';
  187:     }
  188:     my $answer=reply($cmd,$server);
  189:     if ($answer eq 'con_lost') {
  190:         my $pingreply=reply('ping',$server);
  191: 	&reconlonc("$perlvar{'lonSockDir'}/$server");
  192:         my $pongreply=reply('pong',$server);
  193:         &logthis("Ping/Pong for $server: $pingreply/$pongreply");
  194:         $answer=reply($cmd,$server);
  195:         if ($answer eq 'con_lost') {
  196:             my $now=time;
  197:             my $middlename=$cmd;
  198:             $middlename=substr($middlename,0,16);
  199:             $middlename=~s/\W//g;
  200:             my $dfilename=
  201:              "$perlvar{'lonSockDir'}/delayed/$now.$middlename.$server";
  202:             {
  203:              my $dfh;
  204:              if ($dfh=Apache::File->new(">$dfilename")) {
  205:                 print $dfh "$cmd\n";
  206: 	     }
  207:             }
  208:             sleep 2;
  209:             my $wcmd='';
  210:             {
  211: 	     my $dfh;
  212:              if ($dfh=Apache::File->new("$dfilename")) {
  213:                 $wcmd=<$dfh>;
  214: 	     }
  215:             }
  216:             chomp($wcmd);
  217:             if ($wcmd eq $cmd) {
  218: 		&logthis("<font color=blue>WARNING: ".
  219:                          "Connection buffer $dfilename: $cmd</font>");
  220:                 &logperm("D:$server:$cmd");
  221: 	        return 'con_delayed';
  222:             } else {
  223:                 &logthis("<font color=red>CRITICAL:"
  224:                         ." Critical connection failed: $server $cmd</font>");
  225:                 &logperm("F:$server:$cmd");
  226:                 return 'con_failed';
  227:             }
  228:         }
  229:     }
  230:     return $answer;
  231: }
  232: 
  233: # ---------------------------------------------------------- Append Environment
  234: 
  235: sub appenv {
  236:     my %newenv=@_;
  237:     my ($in,$out);
  238:     map {
  239: 	if (($newenv{$_}=~/^user\.role/) || ($newenv{$_}=~/^user\.priv/)) {
  240:             &logthis("<font color=blue>WARNING: ".
  241:                 "Attempt to modify environment ".$_." to ".$newenv{$_});
  242: 	    delete($newenv{$_});
  243:         } else {
  244:             $ENV{$_}=$newenv{$_};
  245:         }
  246:     } keys %newenv;
  247:     my @oldenv;
  248:     {
  249:      my $fh;
  250:      unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
  251: 	return 'error';
  252:      }
  253:      unless (flock($fh,LOCK_SH)) {
  254:          &logthis("<font color=blue>WARNING: ".
  255:                   'Could not obtain shared lock in appenv: '.$!);
  256:          $fh->close();
  257:          return 'error: '.$!;
  258:      }
  259:      &logthis("<font color=green>appenv LOCK_SH gotten");
  260:      @oldenv=<$fh>;
  261:      $in=$#oldenv+1;
  262:      &logthis("<font color=green>appenv LOCK_SH to be closed");
  263:      $fh->close();
  264:     }
  265:     &logthis("<font color=green>Number of elements read appenv: ".$in."from".join(" ",caller));
  266:     for (my $i=0; $i<=$#oldenv; $i++) {
  267:         chomp($oldenv[$i]);
  268:         if ($oldenv[$i] ne '') {
  269:            my ($name,$value)=split(/=/,$oldenv[$i]);
  270:            unless (defined($newenv{$name})) {
  271: 	      $newenv{$name}=$value;
  272: 	   }
  273:         }
  274:     }
  275:     {
  276:      my $fh;
  277:      unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
  278: 	return 'error';
  279:      }
  280:      my $newname;
  281:      unless (flock($fh,LOCK_EX)) {
  282:          &logthis("<font color=blue>WARNING: ".
  283:                   'Could not obtain exclusive lock in appenv: '.$!);
  284:          $fh->close();
  285:          return 'error: '.$!;
  286:      }
  287:      &logthis("<font color=green>appenv LOCK_EX gotten");
  288:      $out=0;
  289:      foreach $newname (sort keys %newenv) {
  290: 	 print $fh "$newname=$newenv{$newname}\n";
  291: 	 $out++;
  292:      }
  293:      &logthis("<font color=green>appenv LOCK_EX to be closed");
  294:      $fh->close();
  295:     }
  296:     &logthis("<font color=green>Number of elements read appenv: ".$in." number out:".$out."from".join(" ",caller));
  297:     return 'ok';
  298: }
  299: # ----------------------------------------------------- Delete from Environment
  300: 
  301: sub delenv {
  302:     my $delthis=shift;
  303:     my %newenv=();
  304:     if (($delthis=~/user\.role/) || ($delthis=~/user\.priv/)) {
  305:         &logthis("<font color=blue>WARNING: ".
  306:                 "Attempt to delete from environment ".$delthis);
  307:         return 'error';
  308:     }
  309:     my @oldenv;
  310:     {
  311:      my $fh;
  312:      unless ($fh=Apache::File->new("$ENV{'user.environment'}")) {
  313: 	return 'error';
  314:      }
  315:      unless (flock($fh,LOCK_SH)) {
  316:          &logthis("<font color=blue>WARNING: ".
  317:                   'Could not obtain shared lock in delenv: '.$!);
  318:          $fh->close();
  319:          return 'error: '.$!;
  320:      }
  321:      @oldenv=<$fh>;
  322:      $fh->close();
  323:     }
  324:     {
  325:      my $fh;
  326:      unless ($fh=Apache::File->new(">$ENV{'user.environment'}")) {
  327: 	return 'error';
  328:      }
  329:      unless (flock($fh,LOCK_EX)) {
  330:          &logthis("<font color=blue>WARNING: ".
  331:                   'Could not obtain exclusive lock in delenv: '.$!);
  332:          $fh->close();
  333:          return 'error: '.$!;
  334:      }
  335:      map {
  336: 	 unless ($_=~/^$delthis/) { print $fh $_; }
  337:      } @oldenv;
  338:      $fh->close();
  339:     }
  340:     return 'ok';
  341: }
  342: 
  343: # ------------------------------ Find server with least workload from spare.tab
  344: 
  345: sub spareserver {
  346:     my $tryserver;
  347:     my $spareserver='';
  348:     my $lowestserver=100;
  349:     foreach $tryserver (keys %spareid) {
  350:        my $answer=reply('load',$tryserver);
  351:        if (($answer =~ /\d/) && ($answer<$lowestserver)) {
  352: 	   $spareserver="http://$hostname{$tryserver}";
  353:            $lowestserver=$answer;
  354:        }
  355:     }    
  356:     return $spareserver;
  357: }
  358: 
  359: # --------- Try to authenticate user from domain's lib servers (first this one)
  360: 
  361: sub authenticate {
  362:     my ($uname,$upass,$udom)=@_;
  363:     $upass=escape($upass);
  364:     if (($perlvar{'lonRole'} eq 'library') && 
  365:         ($udom eq $perlvar{'lonDefDomain'})) {
  366:     my $answer=reply("encrypt:auth:$udom:$uname:$upass",$perlvar{'lonHostID'});
  367:         if ($answer =~ /authorized/) {
  368:               if ($answer eq 'authorized') {
  369:                  &logthis("User $uname at $udom authorized by local server"); 
  370:                  return $perlvar{'lonHostID'}; 
  371:               }
  372:               if ($answer eq 'non_authorized') {
  373:                  &logthis("User $uname at $udom rejected by local server"); 
  374:                  return 'no_host'; 
  375:               }
  376: 	}
  377:     }
  378: 
  379:     my $tryserver;
  380:     foreach $tryserver (keys %libserv) {
  381: 	if ($hostdom{$tryserver} eq $udom) {
  382:            my $answer=reply("encrypt:auth:$udom:$uname:$upass",$tryserver);
  383:            if ($answer =~ /authorized/) {
  384:               if ($answer eq 'authorized') {
  385:                  &logthis("User $uname at $udom authorized by $tryserver"); 
  386:                  return $tryserver; 
  387:               }
  388:               if ($answer eq 'non_authorized') {
  389:                  &logthis("User $uname at $udom rejected by $tryserver");
  390:                  return 'no_host';
  391:               } 
  392: 	   }
  393:        }
  394:     }
  395:     &logthis("User $uname at $udom could not be authenticated");    
  396:     return 'no_host';
  397: }
  398: 
  399: # ---------------------- Find the homebase for a user from domain's lib servers
  400: 
  401: sub homeserver {
  402:     my ($uname,$udom)=@_;
  403: 
  404:     my $index="$uname:$udom";
  405:     if ($homecache{$index}) { return "$homecache{$index}"; }
  406: 
  407:     my $tryserver;
  408:     foreach $tryserver (keys %libserv) {
  409: 	if ($hostdom{$tryserver} eq $udom) {
  410:            my $answer=reply("home:$udom:$uname",$tryserver);
  411:            if ($answer eq 'found') { 
  412: 	      $homecache{$index}=$tryserver;
  413:               return $tryserver; 
  414: 	   }
  415:        }
  416:     }    
  417:     return 'no_host';
  418: }
  419: 
  420: # ------------------------------------- Find the usernames behind a list of IDs
  421: 
  422: sub idget {
  423:     my ($udom,@ids)=@_;
  424:     my %returnhash=();
  425:     
  426:     my $tryserver;
  427:     foreach $tryserver (keys %libserv) {
  428:        if ($hostdom{$tryserver} eq $udom) {
  429: 	  my $idlist=join('&',@ids);
  430:           $idlist=~tr/A-Z/a-z/; 
  431: 	  my $reply=&reply("idget:$udom:".$idlist,$tryserver);
  432:           my @answer=();
  433:           if (($reply ne 'con_lost') && ($reply!~/^error\:/)) {
  434: 	      @answer=split(/\&/,$reply);
  435:           }                    ;
  436:           my $i;
  437:           for ($i=0;$i<=$#ids;$i++) {
  438:               if ($answer[$i]) {
  439: 		  $returnhash{$ids[$i]}=$answer[$i];
  440:               } 
  441:           }
  442:        }
  443:     }    
  444:     return %returnhash;
  445: }
  446: 
  447: # ------------------------------------- Find the IDs behind a list of usernames
  448: 
  449: sub idrget {
  450:     my ($udom,@unames)=@_;
  451:     my %returnhash=();
  452:     map {
  453:         $returnhash{$_}=(&userenvironment($udom,$_,'id'))[1];
  454:     } @unames;
  455:     return %returnhash;
  456: }
  457: 
  458: # ------------------------------- Store away a list of names and associated IDs
  459: 
  460: sub idput {
  461:     my ($udom,%ids)=@_;
  462:     my %servers=();
  463:     map {
  464:         my $uhom=&homeserver($_,$udom);
  465:         if ($uhom ne 'no_host') {
  466:             my $id=&escape($ids{$_});
  467:             $id=~tr/A-Z/a-z/;
  468:             my $unam=&escape($_);
  469: 	    if ($servers{$uhom}) {
  470: 		$servers{$uhom}.='&'.$id.'='.$unam;
  471:             } else {
  472:                 $servers{$uhom}=$id.'='.$unam;
  473:             }
  474:             &critical('put:'.$udom.':'.$unam.':environment:id='.$id,$uhom);
  475:         }
  476:     } keys %ids;
  477:     map {
  478:         &critical('idput:'.$udom.':'.$servers{$_},$_);
  479:     } keys %servers;
  480: }
  481: 
  482: # ------------------------------------- Find the section of student in a course
  483: 
  484: sub usection {
  485:     my ($udom,$unam,$courseid)=@_;
  486:     $courseid=~s/\_/\//g;
  487:     $courseid=~s/^(\w)/\/$1/;
  488:     map {
  489:         my ($key,$value)=split(/\=/,$_);
  490:         $key=&unescape($key);
  491:         if ($key=~/^$courseid(?:\/)*(\w+)*\_st$/) {
  492:             my $section=$1;
  493:             if ($key eq $courseid.'_st') { $section=''; }
  494: 	    my ($dummy,$end,$start)=split(/\_/,&unescape($value));
  495:             my $now=time;
  496:             my $notactive=0;
  497:             if ($start) {
  498: 		if ($now<$start) { $notactive=1; }
  499:             }
  500:             if ($end) {
  501:                 if ($now>$end) { $notactive=1; }
  502:             } 
  503:             unless ($notactive) { return $section; }
  504:         }
  505:     } split(/\&/,&reply('dump:'.$udom.':'.$unam.':roles',
  506:                         &homeserver($unam,$udom)));
  507:     return '-1';
  508: }
  509: 
  510: # ------------------------------------- Read an entry from a user's environment
  511: 
  512: sub userenvironment {
  513:     my ($udom,$unam,@what)=@_;
  514:     my %returnhash=();
  515:     my @answer=split(/\&/,
  516:                 &reply('get:'.$udom.':'.$unam.':environment:'.join('&',@what),
  517:                       &homeserver($unam,$udom)));
  518:     my $i;
  519:     for ($i=0;$i<=$#what;$i++) {
  520: 	$returnhash{$what[$i]}=&unescape($answer[$i]);
  521:     }
  522:     return %returnhash;
  523: }
  524: 
  525: # ----------------------------- Subscribe to a resource, return URL if possible
  526: 
  527: sub subscribe {
  528:     my $fname=shift;
  529:     my $author=$fname;
  530:     $author=~s/\/home\/httpd\/html\/res\/([^\/]*)\/([^\/]*).*/$1\/$2/;
  531:     my ($udom,$uname)=split(/\//,$author);
  532:     my $home=homeserver($uname,$udom);
  533:     if (($home eq 'no_host') || ($home eq $perlvar{'lonHostID'})) { 
  534:         return 'not_found'; 
  535:     }
  536:     my $answer=reply("sub:$fname",$home);
  537:     if (($answer eq 'con_lost') || ($answer eq 'rejected')) {
  538: 	$answer.=' by '.$home;
  539:     }
  540:     return $answer;
  541: }
  542:     
  543: # -------------------------------------------------------------- Replicate file
  544: 
  545: sub repcopy {
  546:     my $filename=shift;
  547:     $filename=~s/\/+/\//g;
  548:     my $transname="$filename.in.transfer";
  549:     if ((-e $filename) || (-e $transname)) { return OK; }
  550:     my $remoteurl=subscribe($filename);
  551:     if ($remoteurl =~ /^con_lost by/) {
  552: 	   &logthis("Subscribe returned $remoteurl: $filename");
  553:            return HTTP_SERVICE_UNAVAILABLE;
  554:     } elsif ($remoteurl eq 'not_found') {
  555: 	   &logthis("Subscribe returned not_found: $filename");
  556: 	   return HTTP_NOT_FOUND;
  557:     } elsif ($remoteurl =~ /^rejected by/) {
  558: 	   &logthis("Subscribe returned $remoteurl: $filename");
  559:            return FORBIDDEN;
  560:     } elsif ($remoteurl eq 'directory') {
  561:            return OK;
  562:     } else {
  563:            my @parts=split(/\//,$filename);
  564:            my $path="/$parts[1]/$parts[2]/$parts[3]/$parts[4]";
  565:            if ($path ne "$perlvar{'lonDocRoot'}/res") {
  566:                &logthis("Malconfiguration for replication: $filename");
  567: 	       return HTTP_BAD_REQUEST;
  568:            }
  569:            my $count;
  570:            for ($count=5;$count<$#parts;$count++) {
  571:                $path.="/$parts[$count]";
  572:                if ((-e $path)!=1) {
  573: 		   mkdir($path,0777);
  574:                }
  575:            }
  576:            my $ua=new LWP::UserAgent;
  577:            my $request=new HTTP::Request('GET',"$remoteurl");
  578:            my $response=$ua->request($request,$transname);
  579:            if ($response->is_error()) {
  580: 	       unlink($transname);
  581:                my $message=$response->status_line;
  582:                &logthis("<font color=blue>WARNING:"
  583:                        ." LWP get: $message: $filename</font>");
  584:                return HTTP_SERVICE_UNAVAILABLE;
  585:            } else {
  586: 	       if ($remoteurl!~/\.meta$/) {
  587:                   my $mrequest=new HTTP::Request('GET',$remoteurl.'.meta');
  588:                   my $mresponse=$ua->request($mrequest,$filename.'.meta');
  589:                   if ($mresponse->is_error()) {
  590: 		      unlink($filename.'.meta');
  591:                       &logthis(
  592:                      "<font color=yellow>INFO: No metadata: $filename</font>");
  593:                   }
  594: 	       }
  595:                rename($transname,$filename);
  596:                return OK;
  597:            }
  598:     }
  599: }
  600: 
  601: # --------------------------------------------------------- Server Side Include
  602: 
  603: sub ssi {
  604: 
  605:     my ($fn,%form)=@_;
  606: 
  607:     my $ua=new LWP::UserAgent;
  608:     
  609:     my $request;
  610:     
  611:     if (%form) {
  612:       $request=new HTTP::Request('POST',"http://".$ENV{'HTTP_HOST'}.$fn);
  613:       $request->content(join '&', map { "$_=$form{$_}" } keys %form);
  614:     } else {
  615:       $request=new HTTP::Request('GET',"http://".$ENV{'HTTP_HOST'}.$fn);
  616:     }
  617: 
  618:     $request->header(Cookie => $ENV{'HTTP_COOKIE'});
  619:     my $response=$ua->request($request);
  620: 
  621:     return $response->content;
  622: }
  623: 
  624: # ------------------------------------------------------------------------- Log
  625: 
  626: sub log {
  627:     my ($dom,$nam,$hom,$what)=@_;
  628:     return critical("log:$dom:$nam:$what",$hom);
  629: }
  630: 
  631: # ----------------------------------------------------------------------- Store
  632: 
  633: sub store {
  634:     my %storehash=@_;
  635:     my $symb;
  636:     unless ($symb=escape(&symbread())) { return ''; }
  637:     my $namespace;
  638:     unless ($namespace=$ENV{'request.course.id'}) { return ''; }
  639:     my $namevalue='';
  640:     map {
  641:         $namevalue.=escape($_).'='.escape($storehash{$_}).'&';
  642:     } keys %storehash;
  643:     $namevalue=~s/\&$//;
  644:     return reply(
  645:      "store:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$symb:$namevalue",
  646: 		 "$ENV{'user.home'}");
  647: }
  648: 
  649: # -------------------------------------------------------------- Critical Store
  650: 
  651: sub cstore {
  652:     my %storehash=@_;
  653:     my $symb;
  654:     unless ($symb=escape(&symbread())) { return ''; }
  655:     my $namespace;
  656:     unless ($namespace=$ENV{'request.course.id'}) { return ''; }
  657:     my $namevalue='';
  658:     map {
  659:         $namevalue.=escape($_).'='.escape($storehash{$_}).'&';
  660:     } keys %storehash;
  661:     $namevalue=~s/\&$//;
  662:     return critical(
  663:      "store:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$symb:$namevalue",
  664: 		 "$ENV{'user.home'}");
  665: }
  666: 
  667: # --------------------------------------------------------------------- Restore
  668: 
  669: sub restore {
  670:     my $symb;
  671:     unless ($symb=escape(&symbread())) { return ''; }
  672:     my $namespace;
  673:     unless ($namespace=$ENV{'request.course.id'}) { return ''; }
  674:     my $answer=reply(
  675:               "restore:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$symb",
  676:               "$ENV{'user.home'}");
  677:     my %returnhash=();
  678:     map {
  679: 	my ($name,$value)=split(/\=/,$_);
  680:         $returnhash{&unescape($name)}=&unescape($value);
  681:     } split(/\&/,$answer);
  682:     my $version;
  683:     for ($version=1;$version<=$returnhash{'version'};$version++) {
  684:        map {
  685:           $returnhash{$_}=$returnhash{$version.':'.$_};
  686:        } split(/\:/,$returnhash{$version.':keys'});
  687:     }
  688:     return %returnhash;
  689: }
  690: 
  691: # ---------------------------------------------------------- Course Description
  692: 
  693: sub coursedescription {
  694:     my $courseid=shift;
  695:     $courseid=~s/^\///;
  696:     $courseid=~s/\_/\//g;
  697:     my ($cdomain,$cnum)=split(/\//,$courseid);
  698:     my $chome=homeserver($cnum,$cdomain);
  699:     if ($chome ne 'no_host') {
  700:        my $rep=reply("dump:$cdomain:$cnum:environment",$chome);
  701:        if ($rep ne 'con_lost') {
  702:            my $normalid=$courseid;
  703:            $normalid=~s/\//\_/g;
  704:            my %envhash=();
  705:            my %returnhash=('home'   => $chome, 
  706:                            'domain' => $cdomain,
  707:                            'num'    => $cnum);
  708:            map {
  709:                my ($name,$value)=split(/\=/,$_);
  710:                $name=&unescape($name);
  711:                $value=&unescape($value);
  712:                $returnhash{$name}=$value;
  713:                $envhash{'course.'.$normalid.'.'.$name}=$value;
  714:            } split(/\&/,$rep);
  715:            $returnhash{'url'}='/res/'.declutter($returnhash{'url'});
  716:            $returnhash{'fn'}=$perlvar{'lonDaemons'}.'/tmp/'.
  717: 	       $ENV{'user.name'}.'_'.$cdomain.'_'.$cnum;
  718:            $envhash{'course.'.$normalid.'.last_cache'}=time;
  719:            $envhash{'course.'.$normalid.'.home'}=$chome;
  720:            $envhash{'course.'.$normalid.'.domain'}=$cdomain;
  721:            $envhash{'course.'.$normalid.'.num'}=$cnum;
  722:            &appenv(%envhash);
  723:            return %returnhash;
  724:        }
  725:     }
  726:     return ();
  727: }
  728: 
  729: # -------------------------------------------------------- Get user priviledges
  730: 
  731: sub rolesinit {
  732:     my ($domain,$username,$authhost)=@_;
  733:     my $rolesdump=reply("dump:$domain:$username:roles",$authhost);
  734:     if (($rolesdump eq 'con_lost') || ($rolesdump eq '')) { return ''; }
  735:     my %allroles=();
  736:     my %thesepriv=();
  737:     my $now=time;
  738:     my $userroles="user.login.time=$now\n";
  739:     my $thesestr;
  740: 
  741:     if ($rolesdump ne '') {
  742:         map {
  743: 	  if ($_!~/^rolesdef\&/) {
  744:             my ($area,$role)=split(/=/,$_);
  745:             $area=~s/\_\w\w$//;
  746:             my ($trole,$tend,$tstart)=split(/_/,$role);
  747:             $userroles.='user.role.'.$trole.'.'.$area.'='.
  748:                         $tstart.'.'.$tend."\n";
  749:             if ($tend!=0) {
  750: 	        if ($tend<$now) {
  751: 	            $trole='';
  752:                 } 
  753:             }
  754:             if ($tstart!=0) {
  755:                 if ($tstart>$now) {
  756:                    $trole='';        
  757:                 }
  758:             }
  759:             if (($area ne '') && ($trole ne '')) {
  760: 	       my $spec=$trole.'.'.$area;
  761:                my ($tdummy,$tdomain,$trest)=split(/\//,$area);
  762:                if ($trole =~ /^cr\//) {
  763: 		   my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$trole);
  764:                    my $homsvr=homeserver($rauthor,$rdomain);
  765:                    if ($hostname{$homsvr} ne '') {
  766:                       my $roledef=
  767: 			  reply("get:$rdomain:$rauthor:roles:rolesdef_$rrole",
  768:                                 $homsvr);
  769:                       if (($roledef ne 'con_lost') && ($roledef ne '')) {
  770:                          my ($syspriv,$dompriv,$coursepriv)=
  771: 			     split(/\_/,unescape($roledef));
  772:  	                 $allroles{'cm./'}.=':'.$syspriv;
  773:                          $allroles{$spec.'./'}.=':'.$syspriv;
  774:                          if ($tdomain ne '') {
  775:                              $allroles{'cm./'.$tdomain.'/'}.=':'.$dompriv;
  776:                              $allroles{$spec.'./'.$tdomain.'/'}.=':'.$dompriv;
  777:                              if ($trest ne '') {
  778: 		                $allroles{'cm.'.$area}.=':'.$coursepriv;
  779: 		                $allroles{$spec.'.'.$area}.=':'.$coursepriv;
  780:                              }
  781: 	                 }
  782:                       }
  783:                    }
  784:                } else {
  785: 	           $allroles{'cm./'}.=':'.$pr{$trole.':s'};
  786: 	           $allroles{$spec.'./'}.=':'.$pr{$trole.':s'};
  787:                    if ($tdomain ne '') {
  788:                      $allroles{'cm./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
  789:                      $allroles{$spec.'./'.$tdomain.'/'}.=':'.$pr{$trole.':d'};
  790:                       if ($trest ne '') {
  791: 		          $allroles{'cm.'.$area}.=':'.$pr{$trole.':c'};
  792: 		          $allroles{$spec.'.'.$area}.=':'.$pr{$trole.':c'};
  793:                       }
  794: 	           }
  795: 	       }
  796:             }
  797:           } 
  798:         } split(/&/,$rolesdump);
  799:         map {
  800:             %thesepriv=();
  801:             map {
  802:                 if ($_ ne '') {
  803: 		    my ($priviledge,$restrictions)=split(/&/,$_);
  804:                     if ($restrictions eq '') {
  805: 			$thesepriv{$priviledge}='F';
  806:                     } else {
  807:                         if ($thesepriv{$priviledge} ne 'F') {
  808: 			    $thesepriv{$priviledge}.=$restrictions;
  809:                         }
  810:                     }
  811:                 }
  812:             } split(/:/,$allroles{$_});
  813:             $thesestr='';
  814:             map { $thesestr.=':'.$_.'&'.$thesepriv{$_}; } keys %thesepriv;
  815:             $userroles.='user.priv.'.$_.'='.$thesestr."\n";
  816:         } keys %allroles;            
  817:     }
  818:     return $userroles;  
  819: }
  820: 
  821: # --------------------------------------------------------------- get interface
  822: 
  823: sub get {
  824:    my ($namespace,@storearr)=@_;
  825:    my $items='';
  826:    map {
  827:        $items.=escape($_).'&';
  828:    } @storearr;
  829:    $items=~s/\&$//;
  830:  my $rep=reply("get:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
  831:                  $ENV{'user.home'});
  832:    my @pairs=split(/\&/,$rep);
  833:    my %returnhash=();
  834:    my $i=0;
  835:    map {
  836:       $returnhash{$_}=unescape($pairs[$i]);
  837:       $i++;
  838:    } @storearr;
  839:    return %returnhash;
  840: }
  841: 
  842: # --------------------------------------------------------------- del interface
  843: 
  844: sub del {
  845:    my ($namespace,@storearr)=@_;
  846:    my $items='';
  847:    map {
  848:        $items.=escape($_).'&';
  849:    } @storearr;
  850:    $items=~s/\&$//;
  851:    return reply("del:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
  852:                  $ENV{'user.home'});
  853: }
  854: 
  855: # -------------------------------------------------------------- dump interface
  856: 
  857: sub dump {
  858:    my $namespace=shift;
  859:    my $rep=reply("dump:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace",
  860:                 $ENV{'user.home'});
  861:    my @pairs=split(/\&/,$rep);
  862:    my %returnhash=();
  863:    map {
  864:       my ($key,$value)=split(/=/,$_);
  865:       $returnhash{unescape($key)}=unescape($value);
  866:    } @pairs;
  867:    return %returnhash;
  868: }
  869: 
  870: # --------------------------------------------------------------- put interface
  871: 
  872: sub put {
  873:    my ($namespace,%storehash)=@_;
  874:    my $items='';
  875:    map {
  876:        $items.=escape($_).'='.escape($storehash{$_}).'&';
  877:    } keys %storehash;
  878:    $items=~s/\&$//;
  879:    return reply("put:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
  880:                  $ENV{'user.home'});
  881: }
  882: 
  883: # ------------------------------------------------------ critical put interface
  884: 
  885: sub cput {
  886:    my ($namespace,%storehash)=@_;
  887:    my $items='';
  888:    map {
  889:        $items.=escape($_).'='.escape($storehash{$_}).'&';
  890:    } keys %storehash;
  891:    $items=~s/\&$//;
  892:    return critical
  893:            ("put:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
  894:                  $ENV{'user.home'});
  895: }
  896: 
  897: # -------------------------------------------------------------- eget interface
  898: 
  899: sub eget {
  900:    my ($namespace,@storearr)=@_;
  901:    my $items='';
  902:    map {
  903:        $items.=escape($_).'&';
  904:    } @storearr;
  905:    $items=~s/\&$//;
  906:  my $rep=reply("eget:$ENV{'user.domain'}:$ENV{'user.name'}:$namespace:$items",
  907:                  $ENV{'user.home'});
  908:    my @pairs=split(/\&/,$rep);
  909:    my %returnhash=();
  910:    my $i=0;
  911:    map {
  912:       $returnhash{$_}=unescape($pairs[$i]);
  913:       $i++;
  914:    } @storearr;
  915:    return %returnhash;
  916: }
  917: 
  918: # ------------------------------------------------- Check for a user priviledge
  919: 
  920: sub allowed {
  921:     my ($priv,$uri)=@_;
  922:     $uri=&declutter($uri);
  923: 
  924: # Free bre access to adm and meta resources
  925: 
  926:     if ((($uri=~/^adm\//) || ($uri=~/\.meta$/)) && ($priv eq 'bre')) {
  927: 	return 'F';
  928:     }
  929: 
  930:     my $thisallowed='';
  931:     my $statecond=0;
  932:     my $courseprivid='';
  933: 
  934: # Course
  935: 
  936:     if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'}=~/$priv\&([^\:]*)/) {
  937:        $thisallowed.=$1;
  938:     }
  939: 
  940: # Domain
  941: 
  942:     if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.(split(/\//,$uri))[0].'/'}
  943:        =~/$priv\&([^\:]*)/) {
  944:        $thisallowed.=$1;
  945:     }
  946: 
  947: # Course: uri itself is a course
  948:     my $courseuri=$uri;
  949:     $courseuri=~s/\_(\d)/\/$1/;
  950:     $courseuri=~s/^([^\/])/\/$1/;
  951: 
  952:     if ($ENV{'user.priv.'.$ENV{'request.role'}.'.'.$courseuri}
  953:        =~/$priv\&([^\:]*)/) {
  954:        $thisallowed.=$1;
  955:     }
  956: 
  957: # Full access at system, domain or course-wide level? Exit.
  958: 
  959:     if ($thisallowed=~/F/) {
  960: 	return 'F';
  961:     }
  962: 
  963: # If this is generating or modifying users, exit with special codes
  964: 
  965:     if (':csu:cdc:ccc:cin:cta:cep:ccr:cst:cad:cli:cau:cdg:'=~/\:$priv\:/) {
  966: 	return $thisallowed;
  967:     }
  968: #
  969: # Gathered so far: system, domain and course wide priviledges
  970: #
  971: # Course: See if uri or referer is an individual resource that is part of 
  972: # the course
  973: 
  974:     if ($ENV{'request.course.id'}) {
  975:        $courseprivid=$ENV{'request.course.id'};
  976:        if ($ENV{'request.course.sec'}) {
  977:           $courseprivid.='/'.$ENV{'request.course.sec'};
  978:        }
  979:        $courseprivid=~s/\_/\//;
  980:        my $checkreferer=1;
  981:        my @uriparts=split(/\//,$uri);
  982:        my $filename=$uriparts[$#uriparts];
  983:        my $pathname=$uri;
  984:        $pathname=~s/\/$filename$//;
  985:        if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
  986:            /\&$filename\:([\d\|]+)\&/) {
  987:            $statecond=$1;
  988:            if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
  989:                =~/$priv\&([^\:]*)/) {
  990:                $thisallowed.=$1;
  991:                $checkreferer=0;
  992:            }
  993:        }
  994:        
  995:        if (($ENV{'HTTP_REFERER'}) && ($checkreferer)) {
  996: 	  my $refuri=$ENV{'HTTP_REFERER'};
  997:           $refuri=~s/^http\:\/\/$ENV{'request.host'}//i;
  998:           $refuri=&declutter($refuri);
  999:           my @uriparts=split(/\//,$refuri);
 1000:           my $filename=$uriparts[$#uriparts];
 1001:           my $pathname=$refuri;
 1002:           $pathname=~s/\/$filename$//;
 1003:           my @filenameparts=split(/\./,$uri);
 1004:           if (&fileembstyle($filenameparts[$#filenameparts]) ne 'ssi') {
 1005:             if ($ENV{'acc.res.'.$ENV{'request.course.id'}.'.'.$pathname}=~
 1006:               /\&$filename\:([\d\|]+)\&/) {
 1007:               my $refstatecond=$1;
 1008:               if ($ENV{'user.priv.'.$ENV{'request.role'}.'./'.$courseprivid}
 1009:                   =~/$priv\&([^\:]*)/) {
 1010:                   $thisallowed.=$1;
 1011:                   $uri=$refuri;
 1012:                   $statecond=$refstatecond;
 1013:               }
 1014:             }
 1015:           }
 1016:        }
 1017:    }
 1018: 
 1019: #
 1020: # Gathered now: all priviledges that could apply, and condition number
 1021: # 
 1022: #
 1023: # Full or no access?
 1024: #
 1025: 
 1026:     if ($thisallowed=~/F/) {
 1027: 	return 'F';
 1028:     }
 1029: 
 1030:     unless ($thisallowed) {
 1031:         return '';
 1032:     }
 1033: 
 1034: # Restrictions exist, deal with them
 1035: #
 1036: #   C:according to course preferences
 1037: #   R:according to resource settings
 1038: #   L:unless locked
 1039: #   X:according to user session state
 1040: #
 1041: 
 1042: # Possibly locked functionality, check all courses
 1043: # Locks might take effect only after 10 minutes cache expiration for other
 1044: # courses, and 2 minutes for current course
 1045: 
 1046:     my $envkey;
 1047:     if ($thisallowed=~/L/) {
 1048:         foreach $envkey (keys %ENV) {
 1049:            if ($envkey=~/^user\.role\.(st|ta)\.([^\.]*)/) {
 1050:                my $courseid=$2;
 1051:                my $roleid=$1.'.'.$2;
 1052:                my $expiretime=600;
 1053:                if ($ENV{'request.role'} eq $roleid) {
 1054: 		  $expiretime=120;
 1055:                }
 1056: 	       my ($cdom,$cnum,$csec)=split(/\//,$courseid);
 1057:                my $prefix='course.'.$cdom.'_'.$cnum.'.';
 1058:                if ((time-$ENV{$prefix.'last_cache'})>$expiretime) {
 1059: 		   &coursedescription($courseid);
 1060:                }
 1061:                if (($ENV{$prefix.'res.'.$uri.'.lock.sections'}=~/\,$csec\,/)
 1062:                 || ($ENV{$prefix.'res.'.$uri.'.lock.sections'} eq 'all')) {
 1063: 		   if ($ENV{$prefix.'res.'.$uri.'.lock.expire'}>time) {
 1064:                        &log($ENV{'user.domain'},$ENV{'user.name'},
 1065:                             $ENV{'user.host'},
 1066:                             'Locked by res: '.$priv.' for '.$uri.' due to '.
 1067:                             $cdom.'/'.$cnum.'/'.$csec.' expire '.
 1068:                             $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
 1069: 		       return '';
 1070:                    }
 1071:                }
 1072:                if (($ENV{$prefix.'priv.'.$priv.'.lock.sections'}=~/\,$csec\,/)
 1073:                 || ($ENV{$prefix.'priv.'.$priv.'.lock.sections'} eq 'all')) {
 1074: 		   if ($ENV{'priv.'.$priv.'.lock.expire'}>time) {
 1075:                        &log($ENV{'user.domain'},$ENV{'user.name'},
 1076:                             $ENV{'user.host'},
 1077:                             'Locked by priv: '.$priv.' for '.$uri.' due to '.
 1078:                             $cdom.'/'.$cnum.'/'.$csec.' expire '.
 1079:                             $ENV{$prefix.'priv.'.$priv.'.lock.expire'});
 1080: 		       return '';
 1081:                    }
 1082:                }
 1083: 	   }
 1084:        }
 1085:     }
 1086:    
 1087: #
 1088: # Rest of the restrictions depend on selected course
 1089: #
 1090: 
 1091:     unless ($ENV{'request.course.id'}) {
 1092:        return '1';
 1093:     }
 1094: 
 1095: #
 1096: # Now user is definitely in a course
 1097: #
 1098: 
 1099: 
 1100: # Course preferences
 1101: 
 1102:    if ($thisallowed=~/C/) {
 1103:        my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
 1104:        if ($ENV{'course.'.$ENV{'request.course.id'}.'.'.$priv.'.roles.denied'}
 1105: 	   =~/\,$rolecode\,/) {
 1106:            &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
 1107:                 'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode.' in '.
 1108:                 $ENV{'request.course.id'});
 1109:            return '';
 1110:        }
 1111:    }
 1112: 
 1113: # Resource preferences
 1114: 
 1115:    if ($thisallowed=~/R/) {
 1116:        my $rolecode=(split(/\./,$ENV{'request.role'}))[0];
 1117:        my $filename=$perlvar{'lonDocRoot'}.'/res/'.$uri.'.meta';
 1118:        if (-e $filename) {
 1119:            my @content;
 1120:            {
 1121: 	     my $fh=Apache::File->new($filename);
 1122:              @content=<$fh>;
 1123: 	   }
 1124:            if (join('',@content)=~
 1125:                     /\<roledeny[^\>]*\>[^\<]*$rolecode[^\<]*\<\/roledeny\>/) {
 1126: 	       &log($ENV{'user.domain'},$ENV{'user.name'},$ENV{'user.host'},
 1127:                     'Denied by role: '.$priv.' for '.$uri.' as '.$rolecode);
 1128:            return '';
 1129: 
 1130:            }
 1131:        }
 1132:    }
 1133: 
 1134: # Restricted by state?
 1135: 
 1136:    if ($thisallowed=~/X/) {
 1137:       if (&condval($statecond)) {
 1138: 	 return '2';
 1139:       } else {
 1140:          return '';
 1141:       }
 1142:    }
 1143: 
 1144:    return 'F';
 1145: }
 1146: 
 1147: # ----------------------------------------------------------------- Define Role
 1148: 
 1149: sub definerole {
 1150:   if (allowed('mcr','/')) {
 1151:     my ($rolename,$sysrole,$domrole,$courole)=@_;
 1152:     map {
 1153: 	my ($crole,$cqual)=split(/\&/,$_);
 1154:         if ($pr{'cr:s'}!~/$crole/) { return "refused:s:$crole"; }
 1155:         if ($pr{'cr:s'}=~/$crole\&/) {
 1156: 	    if ($pr{'cr:s'}!~/$crole\&\w*$cqual/) { 
 1157:                return "refused:s:$crole&$cqual"; 
 1158:             }
 1159:         }
 1160:     } split('/',$sysrole);
 1161:     map {
 1162: 	my ($crole,$cqual)=split(/\&/,$_);
 1163:         if ($pr{'cr:d'}!~/$crole/) { return "refused:d:$crole"; }
 1164:         if ($pr{'cr:d'}=~/$crole\&/) {
 1165: 	    if ($pr{'cr:d'}!~/$crole\&\w*$cqual/) { 
 1166:                return "refused:d:$crole&$cqual"; 
 1167:             }
 1168:         }
 1169:     } split('/',$domrole);
 1170:     map {
 1171: 	my ($crole,$cqual)=split(/\&/,$_);
 1172:         if ($pr{'cr:c'}!~/$crole/) { return "refused:c:$crole"; }
 1173:         if ($pr{'cr:c'}=~/$crole\&/) {
 1174: 	    if ($pr{'cr:c'}!~/$crole\&\w*$cqual/) { 
 1175:                return "refused:c:$crole&$cqual"; 
 1176:             }
 1177:         }
 1178:     } split('/',$courole);
 1179:     my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
 1180:                 "$ENV{'user.domain'}:$ENV{'user.name'}:".
 1181: 	        "rolesdef_$rolename=".
 1182:                 escape($sysrole.'_'.$domrole.'_'.$courole);
 1183:     return reply($command,$ENV{'user.home'});
 1184:   } else {
 1185:     return 'refused';
 1186:   }
 1187: }
 1188: 
 1189: # ------------------------------------------------------------------ Plain Text
 1190: 
 1191: sub plaintext {
 1192:     my $short=shift;
 1193:     return $prp{$short};
 1194: }
 1195: 
 1196: # ------------------------------------------------------------------ Plain Text
 1197: 
 1198: sub fileembstyle {
 1199:     my $ending=shift;
 1200:     return $fe{$ending};
 1201: }
 1202: 
 1203: # ------------------------------------------------------------ Description Text
 1204: 
 1205: sub filedescription {
 1206:     my $ending=shift;
 1207:     return $fd{$ending};
 1208: }
 1209: 
 1210: # ----------------------------------------------------------------- Assign Role
 1211: 
 1212: sub assignrole {
 1213:     my ($udom,$uname,$url,$role,$end,$start)=@_;
 1214:     my $mrole;
 1215:     if ($role =~ /^cr\//) {
 1216: 	unless (&allowed('ccr',$url)) { return 'refused'; }
 1217:         $mrole='cr';
 1218:     } else {
 1219:         my $cwosec=$url;
 1220:         $cwosec=~s/^\/(\w+)\/(\w+)\/.*/$1\/$2/;
 1221:         unless (&allowed('c'.$role,$cwosec)) { return 'refused'; }
 1222:         $mrole=$role;
 1223:     }
 1224:     my $command="encrypt:rolesput:$ENV{'user.domain'}:$ENV{'user.name'}:".
 1225:                 "$udom:$uname:$url".'_'."$mrole=$role";
 1226:     if ($end) { $command.='_'.$end; }
 1227:     if ($start) {
 1228: 	if ($end) { 
 1229:            $command.='_'.$start; 
 1230:         } else {
 1231:            $command.='_0_'.$start;
 1232:         }
 1233:     }
 1234:     return &reply($command,&homeserver($uname,$udom));
 1235: }
 1236: 
 1237: # --------------------------------------------------------------- Modify a user
 1238: 
 1239: 
 1240: sub modifyuser {
 1241:     my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene)=@_;
 1242:     &logthis('Call to modify user '.$udom.', '.$uname.', '.$uid.', '.
 1243:              $umode.', '.$first.', '.$middle.', '.
 1244: 	     $last.', '.$gene.' by '.
 1245:              $ENV{'user.name'}.' at '.$ENV{'user.domain'});  
 1246:     my $uhome=&homeserver($uname,$udom);
 1247: # ----------------------------------------------------------------- Create User
 1248:     if (($uhome eq 'no_host') && ($umode) && ($upass)) {
 1249:         my $unhome='';
 1250: 	if ($ENV{'course.'.$ENV{'request.course.id'}.'.domain'} eq $udom) {
 1251: 	    $unhome=$ENV{'course.'.$ENV{'request.course.id'}.'.home'};
 1252:         } else {
 1253:             my $tryserver;
 1254:             my $loadm=10000000;
 1255:             foreach $tryserver (keys %libserv) {
 1256: 	       if ($hostdom{$tryserver} eq $udom) {
 1257:                   my $answer=reply('load',$tryserver);
 1258:                   if (($answer=~/\d+/) && ($answer<$loadm)) {
 1259: 		      $loadm=$answer;
 1260:                       $unhome=$tryserver;
 1261:                   }
 1262: 	       }
 1263: 	    }
 1264:         }
 1265:         if (($unhome eq '') || ($unhome eq 'no_host')) {
 1266: 	    return 'error: find home';
 1267:         }
 1268:         my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':'.$umode.':'.
 1269:                          &escape($upass),$unhome);
 1270: 	unless ($reply eq 'ok') {
 1271:             return 'error: '.$reply;
 1272:         }   
 1273:         $uhome=&homeserver($uname,$udom);
 1274:         if (($uhome eq '') || ($uhome eq 'no_host') || ($uhome ne $unhome)) {
 1275: 	    return 'error: verify home';
 1276:         }
 1277:     }
 1278: # ---------------------------------------------------------------------- Add ID
 1279:     if ($uid) {
 1280:        $uid=~tr/A-Z/a-z/;
 1281:        my %uidhash=&idrget($udom,$uname);
 1282:        if (($uidhash{$uname}) && ($uidhash{$uname}!~/error\:/)) {
 1283: 	  unless ($uid eq $uidhash{$uname}) {
 1284: 	      return 'error: mismatch '.$uidhash{$uname}.' versus '.$uid;
 1285:           }
 1286:        } else {
 1287: 	  &idput($udom,($uname => $uid));
 1288:        }
 1289:     }
 1290: # -------------------------------------------------------------- Add names, etc
 1291:     my $names=&reply('get:'.$udom.':'.$uname.
 1292:                      ':environment:firstname&middlename&lastname&generation',
 1293:                      $uhome);
 1294:     my ($efirst,$emiddle,$elast,$egene)=split(/\&/,$names);
 1295:     if ($first)  { $efirst  = &escape($first); }
 1296:     if ($middle) { $emiddle = &escape($middle); }
 1297:     if ($last)   { $elast   = &escape($last); }
 1298:     if ($gene)   { $egene   = &escape($gene); }
 1299:     my $reply=&reply('put:'.$udom.':'.$uname.
 1300:            ':environment:firstname='.$efirst.
 1301:                       '&middlename='.$emiddle.
 1302:                         '&lastname='.$elast.
 1303:                       '&generation='.$egene,$uhome);
 1304:     if ($reply ne 'ok') {
 1305: 	return 'error: '.$reply;
 1306:     }
 1307:     &logthis('Success modifying user '.$udom.', '.$uname.', '.$uid.', '.
 1308:              $umode.', '.$first.', '.$middle.', '.
 1309: 	     $last.', '.$gene.' by '.
 1310:              $ENV{'user.name'}.' at '.$ENV{'user.domain'});
 1311:     return 'ok'; 
 1312: }
 1313: 
 1314: # -------------------------------------------------------------- Modify student
 1315: 
 1316: sub modifystudent {
 1317:     my ($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene,$usec,
 1318:         $end,$start)=@_;
 1319:     my $cid='';
 1320:     unless ($cid=$ENV{'request.course.id'}) {
 1321: 	return 'not_in_class';
 1322:     }
 1323: # --------------------------------------------------------------- Make the user
 1324:     my $reply=&modifyuser
 1325: 	($udom,$uname,$uid,$umode,$upass,$first,$middle,$last,$gene);
 1326:     unless ($reply eq 'ok') { return $reply; }
 1327:     my $uhome=&homeserver($uname,$udom);
 1328:     if (($uhome eq '') || ($uhome eq 'no_host')) { 
 1329: 	return 'error: no such user';
 1330:     }
 1331: # -------------------------------------------------- Add student to course list
 1332:     my $reply=critical('put:'.$ENV{'course.'.$cid.'.domain'}.':'.
 1333: 	              $ENV{'course.'.$cid.'.num'}.':classlist:'.
 1334:                       &escape($uname.':'.$udom).'='.
 1335:                       &escape($end.':'.$start),
 1336: 	              $ENV{'course.'.$cid.'.home'});
 1337:     unless (($reply eq 'ok') || ($reply eq 'delayed')) {
 1338: 	return 'error: '.$reply;
 1339:     }
 1340: # ---------------------------------------------------- Add student role to user
 1341:     my $uurl='/'.$cid;
 1342:     $uurl=~s/\_/\//g;
 1343:     if ($usec) {
 1344: 	$uurl.='/'.$usec;
 1345:     }
 1346:     return &assignrole($udom,$uname,$uurl,'st',$end,$start);
 1347: }
 1348: 
 1349: # ------------------------------------------------- Write to course preferences
 1350: 
 1351: sub writecoursepref {
 1352:     my ($courseid,%prefs)=@_;
 1353:     $courseid=~s/^\///;
 1354:     $courseid=~s/\_/\//g;
 1355:     my ($cdomain,$cnum)=split(/\//,$courseid);
 1356:     my $chome=homeserver($cnum,$cdomain);
 1357:     if (($chome eq '') || ($chome eq 'no_host')) { 
 1358: 	return 'error: no such course';
 1359:     }
 1360:     my $cstring='';
 1361:     map {
 1362: 	$cstring.=escape($_).'='.escape($prefs{$_}).'&';
 1363:     } keys %prefs;
 1364:     $cstring=~s/\&$//;
 1365:     return reply('put:'.$cdomain.':'.$cnum.':environment:'.$cstring,$chome);
 1366: }
 1367: 
 1368: # ---------------------------------------------------------- Make/modify course
 1369: 
 1370: sub createcourse {
 1371:     my ($udom,$description,$url)=@_;
 1372:     $url=&declutter($url);
 1373:     my $cid='';
 1374:     unless (&allowed('ccc',$ENV{'user.domain'})) {
 1375:         return 'refused';
 1376:     }
 1377:     unless ($udom eq $ENV{'user.domain'}) {
 1378:         return 'refused';
 1379:     }
 1380: # ------------------------------------------------------------------- Create ID
 1381:    my $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
 1382:        unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
 1383: # ----------------------------------------------- Make sure that does not exist
 1384:    my $uhome=&homeserver($uname,$udom);
 1385:    unless (($uhome eq '') || ($uhome eq 'no_host')) {
 1386:        $uname=substr($$.time,0,5).unpack("H8",pack("I32",time)).
 1387:         unpack("H2",pack("I32",int(rand(255)))).$perlvar{'lonHostID'};
 1388:        $uhome=&homeserver($uname,$udom);       
 1389:        unless (($uhome eq '') || ($uhome eq 'no_host')) {
 1390:            return 'error: unable to generate unique course-ID';
 1391:        } 
 1392:    }
 1393: # ------------------------------------------------------------- Make the course
 1394:     my $reply=&reply('encrypt:makeuser:'.$udom.':'.$uname.':none::',
 1395:                       $ENV{'user.home'});
 1396:     unless ($reply eq 'ok') { return 'error: '.$reply; }
 1397:     my $uhome=&homeserver($uname,$udom);
 1398:     if (($uhome eq '') || ($uhome eq 'no_host')) { 
 1399: 	return 'error: no such course';
 1400:     }
 1401:     &writecoursepref($udom.'_'.$uname,
 1402:                      ('description' => $description,
 1403:                       'url'         => $url));
 1404:     return '/'.$udom.'/'.$uname;
 1405: }
 1406: 
 1407: # ---------------------------------------------------------- Assign Custom Role
 1408: 
 1409: sub assigncustomrole {
 1410:     my ($udom,$uname,$url,$rdom,$rnam,$rolename,$end,$start)=@_;
 1411:     return &assignrole($udom,$uname,$url,'cr/'.$rdom.'/'.$rnam.'/'.$rolename,
 1412:                        $end,$start);
 1413: }
 1414: 
 1415: # ----------------------------------------------------------------- Revoke Role
 1416: 
 1417: sub revokerole {
 1418:     my ($udom,$uname,$url,$role)=@_;
 1419:     my $now=time;
 1420:     return &assignrole($udom,$uname,$url,$role,$now);
 1421: }
 1422: 
 1423: # ---------------------------------------------------------- Revoke Custom Role
 1424: 
 1425: sub revokecustomrole {
 1426:     my ($udom,$uname,$url,$rdom,$rnam,$rolename)=@_;
 1427:     my $now=time;
 1428:     return &assigncustomrole($udom,$uname,$url,$rdom,$rnam,$rolename,$now);
 1429: }
 1430: 
 1431: # ------------------------------------------------------------ Directory lister
 1432: 
 1433: sub dirlist {
 1434:     my $uri=shift;
 1435:     $uri=~s/^\///;
 1436:     $uri=~s/\/$//;
 1437:     my ($res,$udom,$uname,@rest)=split(/\//,$uri);
 1438:     if ($udom) {
 1439:      if ($uname) {
 1440:        my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/'.$uri,
 1441:                       homeserver($uname,$udom));
 1442:        return split(/:/,$listing);
 1443:      } else {
 1444:        my $tryserver;
 1445:        my %allusers=();
 1446:        foreach $tryserver (keys %libserv) {
 1447: 	  if ($hostdom{$tryserver} eq $udom) {
 1448:              my $listing=reply('ls:'.$perlvar{'lonDocRoot'}.'/res/'.$udom,
 1449: 			       $tryserver);
 1450:              if (($listing ne 'no_such_dir') && ($listing ne 'empty')
 1451:               && ($listing ne 'con_lost')) {
 1452:                 map {
 1453:                   my ($entry,@stat)=split(/&/,$_);
 1454:                   $allusers{$entry}=1;
 1455:                 } split(/:/,$listing);
 1456:              }
 1457: 	  }
 1458:        }
 1459:        my $alluserstr='';
 1460:        map {
 1461:            $alluserstr.=$_.'&user:';
 1462:        } sort keys %allusers;
 1463:        $alluserstr=~s/:$//;
 1464:        return split(/:/,$alluserstr);
 1465:      } 
 1466:    } else {
 1467:        my $tryserver;
 1468:        my %alldom=();
 1469:        foreach $tryserver (keys %libserv) {
 1470: 	   $alldom{$hostdom{$tryserver}}=1;
 1471:        }
 1472:        my $alldomstr='';
 1473:        map {
 1474:           $alldomstr.=$perlvar{'lonDocRoot'}.'/res/'.$_.'&domain:';
 1475:        } sort keys %alldom;
 1476:        $alldomstr=~s/:$//;
 1477:        return split(/:/,$alldomstr);       
 1478:    }
 1479: }
 1480: 
 1481: # -------------------------------------------------------- Value of a Condition
 1482: 
 1483: sub directcondval {
 1484:     my $number=shift;
 1485:     if ($ENV{'user.state.'.$ENV{'request.course.id'}}) {
 1486:        return substr($ENV{'user.state.'.$ENV{'request.course.id'}},$number,1);
 1487:     } else {
 1488:        return 2;
 1489:     }
 1490: }
 1491: 
 1492: sub condval {
 1493:     my $condidx=shift;
 1494:     my $result=0;
 1495:     my $allpathcond='';
 1496:     map {
 1497:        if (defined($ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_})) {
 1498: 	   $allpathcond.=
 1499:                '('.$ENV{'acc.cond.'.$ENV{'request.course.id'}.'.'.$_}.')|';
 1500:        }
 1501:     } split(/\|/,$condidx);
 1502:     $allpathcond=~s/\|$//;
 1503:     if ($ENV{'request.course.id'}) {
 1504:        if ($allpathcond) {
 1505:           my $operand='|';
 1506: 	  my @stack;
 1507:           map {
 1508:               if ($_ eq '(') {
 1509:                  push @stack,($operand,$result)
 1510:               } elsif ($_ eq ')') {
 1511:                   my $before=pop @stack;
 1512: 		  if (pop @stack eq '&') {
 1513: 		      $result=$result>$before?$before:$result;
 1514:                   } else {
 1515:                       $result=$result>$before?$result:$before;
 1516:                   }
 1517:               } elsif (($_ eq '&') || ($_ eq '|')) {
 1518:                   $operand=$_;
 1519:               } else {
 1520:                   my $new=directcondval($_);
 1521:                   if ($operand eq '&') {
 1522:                      $result=$result>$new?$new:$result;
 1523:                   } else {
 1524:                      $result=$result>$new?$result:$new;
 1525:                   }                  
 1526:               }
 1527:           } ($allpathcond=~/(\d+|\(|\)|\&|\|)/g);
 1528:        }
 1529:     }
 1530:     return $result;
 1531: }
 1532: 
 1533: # --------------------------------------------------------- Value of a Variable
 1534: 
 1535: sub EXT {
 1536:     my $varname=shift;
 1537:     unless ($varname) { return ''; }
 1538:     my ($realm,$space,$qualifier,@therest)=split(/\./,$varname);
 1539:     my $rest;
 1540:     if ($therest[0]) {
 1541:        $rest=join('.',@therest);
 1542:     } else {
 1543:        $rest='';
 1544:     }
 1545:     my $qualifierrest=$qualifier;
 1546:     if ($rest) { $qualifierrest.='.'.$rest; }
 1547:     my $spacequalifierrest=$space;
 1548:     if ($qualifierrest) { $spacequalifierrest.='.'.$qualifierrest; }
 1549:     if ($realm eq 'user') {
 1550: # --------------------------------------------------------------- user.resource
 1551: 	if ($space eq 'resource') {
 1552: 	    my %restored=&restore;
 1553:             return $restored{$qualifierrest};
 1554: # ----------------------------------------------------------------- user.access
 1555:         } elsif ($space eq 'access') {
 1556:             return &allowed($qualifier,$rest);
 1557: # ------------------------------------------ user.preferences, user.environment
 1558:         } elsif (($space eq 'preferences') || ($space eq 'environment')) {
 1559:             return $ENV{join('.',('environment',$qualifierrest))};
 1560: # ----------------------------------------------------------------- user.course
 1561:         } elsif ($space eq 'course') {
 1562:             return $ENV{join('.',('request.course',$qualifier))};
 1563: # ------------------------------------------------------------------- user.role
 1564:         } elsif ($space eq 'role') {
 1565:             my ($role,$where)=split(/\./,$ENV{'request.role'});
 1566:             if ($qualifier eq 'value') {
 1567: 		return $role;
 1568:             } elsif ($qualifier eq 'extent') {
 1569:                 return $where;
 1570:             }
 1571: # ----------------------------------------------------------------- user.domain
 1572:         } elsif ($space eq 'domain') {
 1573:             return $ENV{'user.domain'};
 1574: # ------------------------------------------------------------------- user.name
 1575:         } elsif ($space eq 'name') {
 1576:             return $ENV{'user.name'};
 1577: # ---------------------------------------------------- Any other user namespace
 1578:         } else {
 1579:             my $item=($rest)?$qualifier.'.'.$rest:$qualifier;
 1580:             my %reply=&get($space,$item);
 1581:             return $reply{$item};
 1582:         }
 1583:     } elsif ($realm eq 'request') {
 1584: # ------------------------------------------------------------- request.browser
 1585:         if ($space eq 'browser') {
 1586: 	    return $ENV{'browser.'.$qualifier};
 1587: # ------------------------------------------------------------ request.filename
 1588:         } else {
 1589:             return $ENV{'request.'.$spacequalifierrest};
 1590:         }
 1591:     } elsif ($realm eq 'course') {
 1592: # ---------------------------------------------------------- course.description
 1593:         my $section='';
 1594:         if ($ENV{'request.course.sec'}) {
 1595: 	    $section='_'.$ENV{'request.course.sec'};
 1596:         }
 1597:         return $ENV{'course.'.$ENV{'request.course.id'}.$section.'.'.
 1598:                               $spacequalifierrest};
 1599:     } elsif ($realm eq 'resource') {
 1600:       if ($ENV{'request.course.id'}) {
 1601: # ----------------------------------------------------- Cascading lookup scheme
 1602:        my $symbp=&symbread();
 1603:        my $mapp=(split(/\_\_\_/,$symbp))[0];
 1604: 
 1605:        my $symbparm=$symbp.'.'.$spacequalifierrest;
 1606:        my $mapparm=$mapp.'___(all).'.$spacequalifierrest;
 1607: 
 1608:        my $seclevel=
 1609:             $ENV{'request.course.id'}.'.['.
 1610: 		$ENV{'request.course.sec'}.'].'.$spacequalifierrest;
 1611:        my $seclevelr=
 1612:             $ENV{'request.course.id'}.'.['.
 1613: 		$ENV{'request.course.sec'}.'].'.$symbparm;
 1614:        my $seclevelm=
 1615:             $ENV{'request.course.id'}.'.['.
 1616: 		$ENV{'request.course.sec'}.'].'.$mapparm;
 1617: 
 1618:        my $courselevel=
 1619:             $ENV{'request.course.id'}.'.'.$spacequalifierrest;
 1620:        my $courselevelr=
 1621:             $ENV{'request.course.id'}.'.'.$symbparm;
 1622:        my $courselevelm=
 1623:             $ENV{'request.course.id'}.'.'.$mapparm;
 1624: 
 1625: 
 1626: # ----------------------------------------------------------- first, check user
 1627:       my %resourcedata=get('resourcedata',
 1628:                            ($courselevelr,$courselevelm,$courselevel));
 1629:       if ($resourcedata{$courselevelr}!~/^error\:/) {
 1630: 
 1631:        if ($resourcedata{$courselevelr}) { 
 1632:           return $resourcedata{$courselevelr}; }
 1633:        if ($resourcedata{$courselevelm}) { 
 1634:           return $resourcedata{$courselevelm}; }
 1635:        if ($resourcedata{$courselevel}) { return $resourcedata{$courselevel}; }
 1636: 
 1637:       }
 1638: # -------------------------------------------------------- second, check course
 1639:         my $section='';
 1640:         if ($ENV{'request.course.sec'}) {
 1641: 	    $section='_'.$ENV{'request.course.sec'};
 1642:         }
 1643:         my $reply=&reply('get:'.
 1644:               $ENV{'course.'.$ENV{'request.course.id'}.$section.'.domain'}.':'.
 1645:               $ENV{'course.'.$ENV{'request.course.id'}.$section.'.num'}.
 1646: 	      ':resourcedata:'.
 1647:    &escape($seclevelr).'&'.&escape($seclevelm).'&'.&escape($seclevel).'&'.
 1648:    &escape($courselevelr).'&'.&escape($courselevelm).'&'.&escape($courselevel),
 1649: 		   $ENV{'course.'.$ENV{'request.course.id'}.$section.'.home'});
 1650:       if ($reply!~/^error\:/) {
 1651: 	  map {
 1652: 	      if ($_) { return &unescape($_); }
 1653:           } split(/\&/,$reply);
 1654:       }
 1655: 
 1656: # ------------------------------------------------------ third, check map parms
 1657:        my %parmhash=();
 1658:        my $thisparm='';       
 1659:        if (tie(%parmhash,'GDBM_File',
 1660:           $ENV{'request.course.fn'}.'_parms.db',&GDBM_READER,0640)) {
 1661:            $thisparm=$parmhash{$symbparm};
 1662: 	   untie(%parmhash);
 1663:        }
 1664:        if ($thisparm) { return $thisparm; }
 1665:      }
 1666:      
 1667: # --------------------------------------------- last, look in resource metadata
 1668: 
 1669:       $spacequalifierrest=~s/\./\_/;
 1670:       my $metadata=&metadata($ENV{'request.filename'},$spacequalifierrest);
 1671:       if ($metadata) { return $metadata; }
 1672:       $metadata=&metadata($ENV{'request.filename'},
 1673:                                          'parameter_'.$spacequalifierrest);
 1674:       if ($metadata) { return $metadata; }
 1675: 
 1676: # ---------------------------------------------------- Any other user namespace
 1677:     } elsif ($realm eq 'environment') {
 1678: # ----------------------------------------------------------------- environment
 1679:         return $ENV{$spacequalifierrest};
 1680:     } elsif ($realm eq 'system') {
 1681: # ----------------------------------------------------------------- system.time
 1682: 	if ($space eq 'time') {
 1683: 	    return time;
 1684:         }
 1685:     }
 1686:     return '';
 1687: }
 1688: 
 1689: # ---------------------------------------------------------------- Get metadata
 1690: 
 1691: sub metadata {
 1692:     my ($uri,$what)=@_;
 1693: 
 1694:     $uri=&declutter($uri);
 1695:     my $filename=$uri;
 1696:     $uri=~s/\.meta$//;
 1697:     unless ($metacache{$uri.':keys'}) {
 1698:         unless ($filename=~/\.meta$/) { $filename.='.meta'; }
 1699: 	my $metastring=&getfile($perlvar{'lonDocRoot'}.'/res/'.$filename);
 1700:         my $parser=HTML::TokeParser->new(\$metastring);
 1701:         my $token;
 1702:         while ($token=$parser->get_token) {
 1703:            if ($token->[0] eq 'S') {
 1704: 	      my $entry=$token->[1];
 1705:               my $unikey=$entry;
 1706:               if (defined($token->[2]->{'part'})) { 
 1707:                  $unikey.='_'.$token->[2]->{'part'}; 
 1708: 	      }
 1709:               if (defined($token->[2]->{'name'})) { 
 1710:                  $unikey.='_'.$token->[2]->{'name'}; 
 1711: 	      }
 1712:               if ($metacache{$uri.':keys'}) {
 1713:                  $metacache{$uri.':keys'}.=','.$unikey;
 1714:               } else {
 1715:                  $metacache{$uri.':keys'}=$unikey;
 1716: 	      }
 1717:               map {
 1718: 		  $metacache{$uri.':'.$unikey.'.'.$_}=$token->[2]->{$_};
 1719:               } @{$token->[3]};
 1720:               unless (
 1721:                  $metacache{$uri.':'.$unikey}=$parser->get_text('/'.$entry)
 1722: 		      ) { $metacache{$uri.':'.$unikey}=
 1723: 			      $metacache{$uri.':'.$unikey.'.default'};
 1724: 		      }
 1725:           }
 1726:        }
 1727:     }
 1728:     return $metacache{$uri.':'.$what};
 1729: }
 1730: 
 1731: # ------------------------------------------------- Update symbolic store links
 1732: 
 1733: sub symblist {
 1734:     my ($mapname,%newhash)=@_;
 1735:     $mapname=declutter($mapname);
 1736:     my %hash;
 1737:     if (($ENV{'request.course.fn'}) && (%newhash)) {
 1738:         if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
 1739:                       &GDBM_WRCREAT,0640)) {
 1740: 	    map {
 1741:                 $hash{declutter($_)}=$mapname.'___'.$newhash{$_};
 1742:             } keys %newhash;
 1743:             if (untie(%hash)) {
 1744: 		return 'ok';
 1745:             }
 1746:         }
 1747:     }
 1748:     return 'error';
 1749: }
 1750: 
 1751: # ------------------------------------------------------ Return symb list entry
 1752: 
 1753: sub symbread {
 1754:     my $thisfn=shift;
 1755:     unless ($thisfn) {
 1756: 	$thisfn=$ENV{'request.filename'};
 1757:     }
 1758:     $thisfn=declutter($thisfn);
 1759:     my %hash;
 1760:     my %bighash;
 1761:     my $syval='';
 1762:     if (($ENV{'request.course.fn'}) && ($thisfn)) {
 1763:         if (tie(%hash,'GDBM_File',$ENV{'request.course.fn'}.'_symb.db',
 1764:                       &GDBM_READER,0640)) {
 1765: 	    $syval=$hash{$thisfn};
 1766:             untie(%hash);
 1767:         }
 1768: # ---------------------------------------------------------- There was an entry
 1769:         if ($syval) {
 1770:            unless ($syval=~/\_\d+$/) {
 1771: 	       unless ($ENV{'form.request.prefix'}=~/\.(\d+)\_$/) {
 1772:                   &appenv('request.ambiguous' => $thisfn);
 1773:                   return '';
 1774:                }    
 1775:                $syval.=$1;
 1776: 	   }
 1777:         } else {
 1778: # ------------------------------------------------------- Was not in symb table
 1779:            if (tie(%bighash,'GDBM_File',$ENV{'request.course.fn'}.'.db',
 1780:                             &GDBM_READER,0640)) {
 1781: # ---------------------------------------------- Get ID(s) for current resource
 1782:               my $ids=$bighash{'ids_/res/'.$thisfn};
 1783:               unless ($ids) { 
 1784:                  $ids=$bighash{'ids_/'.$thisfn};
 1785:               }
 1786:               if ($ids) {
 1787: # ------------------------------------------------------------------- Has ID(s)
 1788:                  my @possibilities=split(/\,/,$ids);
 1789:                  if ($#possibilities==0) {
 1790: # ----------------------------------------------- There is only one possibility
 1791: 		     my ($mapid,$resid)=split(/\./,$ids);
 1792:                      $syval=declutter($bighash{'map_id_'.$mapid}).'___'.$resid;
 1793:                  } else {
 1794: # ------------------------------------------ There is more than one possibility
 1795:                      my $realpossible=0;
 1796:                      map {
 1797: 			 my $file=$bighash{'src_'.$_};
 1798:                          if (&allowed('bre',$file)) {
 1799:          		    my ($mapid,$resid)=split(/\./,$_);
 1800:                             if ($bighash{'map_type_'.$mapid} ne 'page') {
 1801: 				$realpossible++;
 1802:                                 $syval=declutter($bighash{'map_id_'.$mapid}).
 1803:                                        '___'.$resid;
 1804:                             }
 1805: 			 }
 1806:                      } @possibilities;
 1807: 		     if ($realpossible!=1) { $syval=''; }
 1808:                  }
 1809: 	      }
 1810:               untie(%bighash)
 1811:            } 
 1812:         }
 1813:         if ($syval) {
 1814:            return $syval.'___'.$thisfn; 
 1815:         }
 1816:     }
 1817:     &appenv('request.ambiguous' => $thisfn);
 1818:     return '';
 1819: }
 1820: 
 1821: # ---------------------------------------------------------- Return random seed
 1822: 
 1823: sub numval {
 1824:     my $txt=shift;
 1825:     $txt=~tr/A-J/0-9/;
 1826:     $txt=~tr/a-j/0-9/;
 1827:     $txt=~tr/K-T/0-9/;
 1828:     $txt=~tr/k-t/0-9/;
 1829:     $txt=~tr/U-Z/0-5/;
 1830:     $txt=~tr/u-z/0-5/;
 1831:     $txt=~s/\D//g;
 1832:     return int($txt);
 1833: }    
 1834: 
 1835: sub rndseed {
 1836:     my $symb;
 1837:     unless ($symb=&symbread()) { return time; }
 1838:     my $symbchck=unpack("%32C*",$symb);
 1839:     my $symbseed=numval($symb)%$symbchck;
 1840:     my $namechck=unpack("%32C*",$ENV{'user.name'});
 1841:     my $nameseed=numval($ENV{'user.name'})%$namechck;
 1842:     return int( $symbseed
 1843: 	       .$nameseed
 1844:                .unpack("%32C*",$ENV{'user.domain'})
 1845:                .unpack("%32C*",$ENV{'request.course.id'})
 1846:                .$namechck
 1847:                .$symbchck);
 1848: }
 1849: 
 1850: sub ireceipt {
 1851:     my ($funame,$fudom,$fucourseid,$fusymb)=@_;
 1852:     my $cuname=unpack("%32C*",$funame);
 1853:     my $cudom=unpack("%32C*",$fudom);
 1854:     my $cucourseid=unpack("%32C*",$fucourseid);
 1855:     my $cusymb=unpack("%32C*",$fusymb);
 1856:     my $cunique=unpack("%32C*",$perlvar{'lonReceipt'});
 1857:     return unpack("%32C*",$perlvar{'lonHostID'}).'-'.
 1858:            ($cunique%$cuname+
 1859:             $cunique%$cudom+
 1860:             $cusymb%$cuname+
 1861:             $cusymb%$cudom+
 1862:             $cucourseid%$cuname+
 1863:             $cucourseid%$cudom);
 1864: }
 1865: 
 1866: sub receipt {
 1867:     return &ireceipt($ENV{'user.name'},$ENV{'user.domain'},
 1868:                      $ENV{'request.course.id'},&symbread());
 1869: }
 1870:   
 1871: # ------------------------------------------------------------ Serves up a file
 1872: # returns either the contents of the file or a -1
 1873: sub getfile {
 1874:   my $file=shift;
 1875:   &repcopy($file);
 1876:   if (! -e $file ) { return -1; };
 1877:   my $fh=Apache::File->new($file);
 1878:   my $a='';
 1879:   while (<$fh>) { $a .=$_; }
 1880:   return $a
 1881: }
 1882: 
 1883: sub filelocation {
 1884:   my ($dir,$file) = @_;
 1885:   my $location;
 1886:   $file=~ s/^\s*(\S+)\s*$/$1/; ## strip off leading and trailing spaces
 1887:   if ($file=~m:^/~:) { # is a contruction space reference
 1888:     $location = $file;
 1889:     $location =~ s:/~(.*?)/(.*):/home/$1/public_html/$2:;
 1890:   } else {
 1891:     $file=~s/^$perlvar{'lonDocRoot'}//;
 1892:     $file=~s:^/*res::;
 1893:     if ( !( $file =~ m:^/:) ) {
 1894:       $location = $dir. '/'.$file;
 1895:     } else {
 1896:       $location = '/home/httpd/html/res'.$file;
 1897:     }
 1898:   }
 1899:   $location=~s://+:/:g; # remove duplicate /
 1900:   while ($location=~m:/\.\./:) {$location=~ s:/[^/]+/\.\./:/:g;} #remove dir/..
 1901:   return $location;
 1902: }
 1903: 
 1904: sub hreflocation {
 1905:     my ($dir,$file)=@_;
 1906:     unless (($_=~/^http:\/\//i) || ($_=~/^\//)) {
 1907:        my $finalpath=filelocation($dir,$file);
 1908:        $finalpath=~s/^\/home\/httpd\/html//;
 1909:        return $finalpath;
 1910:     } else {
 1911:        return $file;
 1912:     }
 1913: }
 1914: 
 1915: # ------------------------------------------------------------- Declutters URLs
 1916: 
 1917: sub declutter {
 1918:     my $thisfn=shift;
 1919:     $thisfn=~s/^$perlvar{'lonDocRoot'}//;
 1920:     $thisfn=~s/^\///;
 1921:     $thisfn=~s/^res\///;
 1922:     return $thisfn;
 1923: }
 1924: 
 1925: # -------------------------------------------------------- Escape Special Chars
 1926: 
 1927: sub escape {
 1928:     my $str=shift;
 1929:     $str =~ s/(\W)/"%".unpack('H2',$1)/eg;
 1930:     return $str;
 1931: }
 1932: 
 1933: # ----------------------------------------------------- Un-Escape Special Chars
 1934: 
 1935: sub unescape {
 1936:     my $str=shift;
 1937:     $str =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
 1938:     return $str;
 1939: }
 1940: 
 1941: # ================================================================ Main Program
 1942: 
 1943: sub BEGIN {
 1944: if ($readit ne 'done') {
 1945: # ------------------------------------------------------------ Read access.conf
 1946: {
 1947:     my $config=Apache::File->new("/etc/httpd/conf/access.conf");
 1948: 
 1949:     while (my $configline=<$config>) {
 1950:         if ($configline =~ /PerlSetVar/) {
 1951: 	   my ($dummy,$varname,$varvalue)=split(/\s+/,$configline);
 1952:            chomp($varvalue);
 1953:            $perlvar{$varname}=$varvalue;
 1954:         }
 1955:     }
 1956: }
 1957: 
 1958: # ------------------------------------------------------------- Read hosts file
 1959: {
 1960:     my $config=Apache::File->new("$perlvar{'lonTabDir'}/hosts.tab");
 1961: 
 1962:     while (my $configline=<$config>) {
 1963:        my ($id,$domain,$role,$name,$ip)=split(/:/,$configline);
 1964:        $hostname{$id}=$name;
 1965:        $hostdom{$id}=$domain;
 1966:        if ($role eq 'library') { $libserv{$id}=$name; }
 1967:     }
 1968: }
 1969: 
 1970: # ------------------------------------------------------ Read spare server file
 1971: {
 1972:     my $config=Apache::File->new("$perlvar{'lonTabDir'}/spare.tab");
 1973: 
 1974:     while (my $configline=<$config>) {
 1975:        chomp($configline);
 1976:        if (($configline) && ($configline ne $perlvar{'lonHostID'})) {
 1977:           $spareid{$configline}=1;
 1978:        }
 1979:     }
 1980: }
 1981: # ------------------------------------------------------------ Read permissions
 1982: {
 1983:     my $config=Apache::File->new("$perlvar{'lonTabDir'}/roles.tab");
 1984: 
 1985:     while (my $configline=<$config>) {
 1986:        chomp($configline);
 1987:        my ($role,$perm)=split(/ /,$configline);
 1988:        if ($perm ne '') { $pr{$role}=$perm; }
 1989:     }
 1990: }
 1991: 
 1992: # -------------------------------------------- Read plain texts for permissions
 1993: {
 1994:     my $config=Apache::File->new("$perlvar{'lonTabDir'}/rolesplain.tab");
 1995: 
 1996:     while (my $configline=<$config>) {
 1997:        chomp($configline);
 1998:        my ($short,$plain)=split(/:/,$configline);
 1999:        if ($plain ne '') { $prp{$short}=$plain; }
 2000:     }
 2001: }
 2002: 
 2003: # ------------------------------------------------------------- Read file types
 2004: {
 2005:     my $config=Apache::File->new("$perlvar{'lonTabDir'}/filetypes.tab");
 2006: 
 2007:     while (my $configline=<$config>) {
 2008:        chomp($configline);
 2009:        my ($ending,$emb,@descr)=split(/\s+/,$configline);
 2010:        if ($descr[0] ne '') { 
 2011:          $fe{$ending}=$emb;
 2012:          $fd{$ending}=join(' ',@descr);
 2013:        }
 2014:     }
 2015: }
 2016: 
 2017: %metacache=();
 2018: 
 2019: $readit='done';
 2020: &logthis('<font color=yellow>INFO: Read configuration</font>');
 2021: }
 2022: }
 2023: 1;

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>