--- loncom/publisher/lonunauthorized.pm 2009/05/14 15:36:29 1.9 +++ loncom/publisher/lonunauthorized.pm 2016/06/19 04:27:58 1.18 @@ -1,7 +1,7 @@ # The LearningOnline Network # Unauthorized to access construction space # -# $Id: lonunauthorized.pm,v 1.9 2009/05/14 15:36:29 bisitz Exp $ +# $Id: lonunauthorized.pm,v 1.18 2016/06/19 04:27:58 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -32,9 +32,9 @@ use strict; use Apache::Constants qw(:common); use Apache::loncommon; use Apache::lonnet; -use Apache::loncacc; use Apache::lonlocal; use LONCAPA(); +use HTML::Entities(); sub handler { my $r = shift; @@ -45,53 +45,229 @@ sub handler { # ------------------------------------------------------------ Print the screen # Figure out who the user is and what they wanted to access - my ($ownername,$ownerdomain)= - &Apache::loncacc::constructaccess($env{'request.editurl'},$r->dir_config('lonDefDomain')); + my ($ownername,$ownerdomain,$ownerhome); + if ($env{'request.editurl'} ne '') { + ($ownername,$ownerdomain,$ownerhome) = + &Apache::lonnet::constructaccess($env{'request.editurl'}); + } + + # Breadcrumbs + &Apache::lonhtmlcommon::clear_breadcrumbs(); + if ($env{'request.role'} =~ /^(au|ca|aa)/) { + &Apache::lonhtmlcommon::add_breadcrumb({ + 'text' => 'Authoring Space', + 'href' => &Apache::loncommon::authorspace($env{'request.editurl'}), + }); + } elsif (($env{'request.course.id'}) && + (&Apache::lonnet::allowed('mdc',$env{'request.course.id'}))) { + &Apache::lonhtmlcommon::add_breadcrumb({ + 'text' => 'Course Contents', + 'href' => '/adm/coursedocs', + }); + } + # print header - $r->print(&Apache::loncommon::start_page("Failed Access to Construction Space", + $r->print(&Apache::loncommon::start_page("Failed Access to Authoring Space", undef, - {'domain' => $ownerdomain,})); + {'domain' => $ownerdomain,}). + &Apache::lonhtmlcommon::breadcrumbs()); # figure out what went wrong if ($ownerdomain) { - $r->print('

' - .&mt('The construction space for this resource is located on another server.') - .'

' - .'

' - .&mt('Choose another server.') - .'

'); - my $ownerhome=&Apache::lonnet::homeserver($ownername,$ownerdomain); - unless ($ownerhome eq 'no_host') { - $r->print('

' - .&mt('Please log into [_1] to edit.' - ,''.&Apache::lonnet::hostname($ownerhome).'') - .'

'); + if ($ownerhome eq 'no_host') { + $r->print('

'. + &mt('Unable to determine home server for this resource: [_1]', + ''.$env{'request.editurl'}.''). + '

'); + } else { + my @hosts = &Apache::lonnet::current_machine_ids(); + if (!grep(/^\Q$ownerhome\E$/,@hosts)) { + my $switchlink = '/adm/switchserver?otherserver='.$ownerhome. + '&origurl='.&HTML::Entities::encode($env{'request.editurl'},'<>&"'); + $r->print('

'. + &mt('The Authoring Space for this resource is located on a different server: [_1]', + ''.&Apache::lonnet::hostname($ownerhome).''). + '

'. + '

'. + &mt('Switch Server').''. + '

'); + } else { + $r->print('

'. + &mt('You do not have authoring privileges for this resource').' '. + ''.$env{'request.editurl'}.''. + '

'); + } + } + } elsif (!$env{'request.editurl'}) { + if ($ENV{'REDIRECT_URL'} =~ m{^/adm/([^/]+)}) { + my $action = $1; + my ($option,$filename,$filename1,$filename2,$decompress, + $qualifiedfilename); + if ($ENV{'REDIRECT_QUERY_STRING'} ne '') { + foreach my $pair (split(/&/,$ENV{'REDIRECT_QUERY_STRING'})) { + my ($name,$value) = split(/=/,$pair); + if ($name eq 'filename') { + if (($action eq 'publish') || ($action eq 'cfile')) { + $filename = &LONCAPA::unescape($value); + } else { + $filename = $value; + } + } elsif ($name eq 'filename1') { + $filename1 = $value; + } elsif ($name eq 'filename2') { + $filename2 = $value; + } elsif ($name eq 'decompress') { + $decompress = $value; + $option = 'decompress'; + } elsif ($name eq 'qualifiedfilename') { + $qualifiedfilename = $value; + } elsif ($name eq 'versionone') { + if ($value eq 'priv') { + $option = 'cstr'; + } + } elsif ($name eq 'versiontwo') { + if ($value eq 'priv') { + $option = 'cstr'; + } + } elsif ($name eq 'filetwo') { + $option = $value; + } + } + if (($action eq 'upload') || ($action eq 'testbank')) { + if (($filename1 ne '') && ($filename ne '')) { + $filename = $filename1.$filename2; + } + } elsif ($action eq 'cfile') { + if ($decompress ne '') { + $filename = $decompress; + } elsif ($qualifiedfilename ne '') { + $filename = $qualifiedfilename; + } + } + my %deniedactions = &get_denied_action_text(); + my $warning; + if ($option eq 'decompress') { + $warning = $deniedactions{$option}; + } else { + $warning = $deniedactions{$action}; + } + if ($warning) { + if (($action eq 'diff') && ($option ne 'cstr')) { + $r->print('

'. + $deniedactions{$action}.'

'. + &mt('You do not have privileges to view the published resource').' '. + ''.$filename.''. + '

'); + } else { + if (($action eq 'diff') && ($option eq 'cstr')) { + $filename =~ s{^/res/}{/priv/}; + } + $r->print('

'. + $deniedactions{$action}.'

'. + &mt('You do not have authoring privileges for this resource').' '. + ''.$filename.''. + '

'); + } + } else { + $r->print('

'. + &mt('You are not permitted to take this action.'). + '

'); + } + } + } elsif ($r->uri =~ m{priv/.+\.\d+\.[^.]+$}) { + $r->print('

'. + &mt('There is a problem with the filename').' '. + ''.$r->uri.'

'. + '

'. + &mt('You may be attempting to edit a versioned file (files in Authoring Space may not include a version number before the extension).'). + '

'); + } else { + $r->print('

'. + &mt('You are not permitted to take this action.'). + '

'); } + } elsif ($env{'request.editurl'} =~ m{priv/.+\.\d+\.[^.]+$}) { + $r->print('

'. + &mt('There is a problem with the filename').' '. + ''.$env{'request.editurl'}.'

'. + '

'. + &mt('You may be attempting to edit a versioned file (files in Authoring Space may not include a version number before the extension).'). + '

'); } else { $r->print('

' - .&mt('You do not have authoring privileges for this resource') + .&mt('You do not have authoring privileges for this resource').' ' + .''.$env{'request.editurl'}.'' .'

'); - my ($realownername)= - ($env{'request.editurl'}=~m{/(?:~|priv/|home/)($LONCAPA::username_re)}); + my ($realownerdom,$realownername) = + ($env{'request.editurl'}=~m{^/priv/($LONCAPA::domain_re)/($LONCAPA::username_re)}); my $realownerhome= - &Apache::lonnet::homeserver($realownername, - $r->dir_config('lonDefDomain')); + &Apache::lonnet::homeserver($realownername,$realownerdom); unless ($realownerhome eq 'no_host') { - my $plainname=&Apache::loncommon::plainname($realownername,$r->dir_config('lonDefDomain')); - my $user=$realownername.':'.$r->dir_config('lonDefDomain'); - my $userlink=&Apache::loncommon::aboutmewrapper( - $plainname.' ('.$user.')' - ,$realownername - ,$r->dir_config('lonDefDomain')); - $r->print('

' - .&mt('Contact [_1] for access.',$userlink) - .'

'); + if (&Apache::lonnet::is_course($realownerdom,$realownername)) { + my $ccrole = 'cc'; + my %crsenv = &Apache::lonnet::coursedescription("$realownerdom/$realownername",{one_time => 1}); + my $cdesc = $crsenv{'description'}; + my $crstype = $crsenv{'type'}; + if ($crstype eq 'Community') { + $ccrole = 'co'; + } + my $rolename = $crsenv{$ccrole.'.plaintext'}; + if ($rolename eq '') { + $rolename = &Apache::lonnet::plaintext($ccrole,$crstype,$realownerdom.'_'.$realownername,1); + } + my $allowed = &Apache::lonnet::allowed('mdc',$realownerdom.'_'.$realownername); + if (!$allowed) { + my %roleshash = &Apache::lonnet::get_my_roles('','','userroles',['active'], + [$ccrole],[$realownerdom]); + if (exists($roleshash{$realownername.':'.$realownerdom.':'.$ccrole})) { + $r->print(&mt('[_1]Switch role[_2] for access', + '&"'). + '&orgurl='.&HTML::Entities::encode($env{'request.editurl'},'<>&"'). + '">','')); + } else { + if ($crstype eq 'Community') { + $r->print('

' + .&mt('Contact a [_1] in the community ([_2]) for access.',$rolename,$cdesc) + .'

'); + } else { + $r->print('

' + .&mt('Contact a [_1] in the course ([_2]) for access.',$rolename,$cdesc) + .'

'); + } + } + } + } else { + my $plainname=&Apache::loncommon::plainname($realownername,$realownerdom); + my $user=$realownername.':'.$realownerdom; + my $userlink=&Apache::loncommon::aboutmewrapper( + $plainname.' ('.$user.')' + ,$realownername + ,$realownerdom); + $r->print('

' + .&mt('Contact [_1] for access.',$userlink) + .'

'); + } } } - $r->print(&Apache::loncommon::end_page()); return OK; -} +} + +sub get_denied_action_text { + my %deniedtext = + &Apache::lonlocal::texthash( + cfile => 'Copying, moving, renaming or creating file not allowed.', + publish => 'Publishing not allowed.', + upload => 'Uploading file not allowed.', + testbank => 'Uploading testbank file not allowed', + retrieve => 'Retrieving version information not allowed.', + cleanup => 'Clean up of file not allowed.', + diff => 'Display of differences between file versions disallowed.', + decompress => 'Decompression of archive file disallowed.', + ); + return %deniedtext; +} 1; __END__