File:
[LON-CAPA] /
loncom /
auth /
publiccheck.pm
Revision
1.15:
download - view:
text,
annotated -
select for diffs
Tue Oct 2 01:09:59 2007 UTC (16 years, 11 months ago) by
albertel
Branches:
MAIN
CVS tags:
version_2_7_X,
version_2_7_99_1,
version_2_7_99_0,
version_2_7_1,
version_2_7_0,
version_2_6_X,
version_2_6_99_1,
version_2_6_99_0,
version_2_6_3,
version_2_6_2,
version_2_6_1,
version_2_6_0,
version_2_5_99_1,
version_2_5_99_0,
HEAD
- convert exisiting cookie reads/validations to use
lonnet::check_for_valid_session
# The LearningOnline Network
# Cookie Based Access Handler
#
# $Id: publiccheck.pm,v 1.15 2007/10/02 01:09:59 albertel Exp $
#
# Copyright Michigan State University Board of Trustees
#
# This file is part of the LearningOnline Network with CAPA (LON-CAPA).
#
# LON-CAPA is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# LON-CAPA is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with LON-CAPA; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
# /home/httpd/html/adm/gpl.txt
#
# http://www.lon-capa.org/
#
###
package Apache::publiccheck;
use strict;
use Apache::Constants qw(:common :http :methods);
use Apache::lonnet;
use Apache::loncommon();
use Apache::lonlocal;
use Fcntl qw(:flock);
use Apache::lonacc();
use LONCAPA();
sub handler {
my $r = shift;
my $requrl=$r->uri;
if (&Apache::lonnet::is_domainimage($requrl)) {
return OK;
}
my $handle = &Apache::lonnet::check_for_valid_session($r);
if ($handle ne '') {
my $lonidsdir=$r->dir_config('lonIDsDir');
&Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
if ($env{'user.name'} ne 'public'
&& $env{'user.domain'} ne 'public') {
return OK;
}
}
if ($requrl=~m|^/public/|
|| $requrl=~m|^/adm/help/.*\.hlp$|
|| $requrl=~m|^/adm/[^/]+/[^/]+/aboutme/portfolio$|
|| (&Apache::lonnet::metadata($requrl,'copyright') eq 'public')) {
&process_public($r,$requrl);
return OK;
} elsif (&Apache::lonnet::is_portfolio_url($requrl)) {
my (undef,$udom,$unum,$file_name,$group) =
&Apache::lonnet::parse_portfolio_url($requrl);
my $access = &process_portfolio($udom,$unum,$file_name,$group);
if ($access) {
&process_public($r,$requrl,$access);
return OK;
}
} elsif ($requrl eq '/adm/restrictedaccess') {
&process_public($r,$requrl);
return OK;
} elsif ($requrl eq '/adm/blockedaccess') {
&process_public($r,$requrl);
return OK;
}
return DECLINED;
}
sub process_public {
my ($r,$requrl,$access) = @_;
&Apache::lonnet::logthis('Granting public access: '.$requrl);
if ($env{'user.name'} ne 'public' && $env{'user.domain'} ne 'public') {
my $cookie=&Apache::lonauth::success($r,'public','public','public');
my $lonidsdir=$r->dir_config('lonIDsDir');
&Apache::lonnet::transfer_profile_to_env($lonidsdir,$cookie);
$r->err_header_out('Set-cookie',"lonID=$cookie; path=/");
}
&Apache::lonacc::get_posted_cgi($r);
$env{'request.state'} = "published";
$env{'request.publicaccess'} = 1;
$env{'request.filename'} = $r->filename;
return;
}
sub process_portfolio {
my ($udom,$unum,$file_name,$group) = @_;
my $current_perms = &Apache::lonnet::get_portfile_permissions($udom,$unum);
my %access_controls = &Apache::lonnet::get_access_controls($current_perms,$group,$file_name);
my $access = '';
my $now = time;
foreach my $key (keys(%{$access_controls{$file_name}})) {
my ($num,$scope,$end,$start) = ($key =~ /^([^:]+):([a-z]+)_(\d*)_?(\d*)$/);
if ($start > $now) {
next;
}
if ($end && $end<$now) {
next;
}
if ($scope eq 'public') {
$access = 'public';
last;
}
if ($scope eq 'guest') {
$access = 'guest';
}
}
return $access;
}
1;
__END__
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>