--- loncom/auth/lonacc.pm 1999/10/13 17:48:52 1.1.1.1 +++ loncom/auth/lonacc.pm 2001/09/26 14:07:45 1.21 @@ -1,12 +1,18 @@ # The LearningOnline Network # Cookie Based Access Handler -# 5/21/99,5/22,5/29,5/31,6/15 Gerd Kortemeyer +# 5/21/99,5/22,5/29,5/31,6/15,16/11,22/11, +# 01/06,01/13,05/31,06/01,09/06,09/25,09/28,10/30,11/6, +# 12/25,12/26, +# 01/06/01,05/28,8/11,9/26 Gerd Kortemeyer package Apache::lonacc; use strict; -use Apache::Constants qw(:common); +use Apache::Constants qw(:common :http :methods); +use Apache::File; +use Apache::lonnet; use CGI::Cookie(); +use Fcntl qw(:flock); sub handler { my $r = shift; @@ -19,25 +25,133 @@ sub handler { $handle=~s/\W//g; my $lonidsdir=$r->dir_config('lonIDsDir'); if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) { - return OK; + +# ------------------------------------------- Transfer profile into environment + + my @profile; + { + my $idf=Apache::File->new("$lonidsdir/$handle.id"); + flock($idf,LOCK_SH); + @profile=<$idf>; + $idf->close(); + } + my $envi; + for ($envi=0;$envi<=$#profile;$envi++) { + chomp($profile[$envi]); + my ($envname,$envvalue)=split(/=/,$profile[$envi]); + $ENV{$envname} = $envvalue; + } + $ENV{'user.environment'} = "$lonidsdir/$handle.id"; + if ($requrl=~/^\/res\//) { + $ENV{'request.state'} = "published"; + } else { + $ENV{'request.state'} = 'unknown'; + } + $ENV{'request.filename'} = $r->filename; + +# -------------------------------------------------------- Load POST parameters + + + + my $buffer; + + $r->read($buffer,$r->header_in('Content-length')); + + unless ($buffer=~/^(\-+\w+)\s+Content\-Disposition\:\s*form\-data/si) { + my @pairs=split(/&/,$buffer); + my $pair; + foreach $pair (@pairs) { + my ($name,$value) = split(/=/,$pair); + $value =~ tr/+/ /; + $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; + $name =~ tr/+/ /; + $name =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg; + $ENV{"form.$name"}=$value; + } + } else { + my $contentsep=$1; + my @lines = split (/\n/,$buffer); + my $name=''; + my $value=''; + my $fname=''; + my $fmime=''; + my $i; + for ($i=0;$i<=$#lines;$i++) { + if ($lines[$i]=~/^$contentsep/) { + if ($name) { + chomp($value); + if ($fname) { + $ENV{"form.$name.filename"}=$fname; + $ENV{"form.$name.mimetype"}=$fmime; + } else { + $value=~s/\s+$//s; + } + $ENV{"form.$name"}=$value; + } + if ($i<$#lines) { + $i++; + $lines[$i]=~ + /Content\-Disposition\:\s*form\-data\;\s*name\=\"([^\"]+)\"/i; + $name=$1; + $value=''; + if ($lines[$i]=~/filename\=\"([^\"]+)\"/i) { + $fname=$1; + if + ($lines[$i+1]=~/Content\-Type\:\s*([\w\-\/]+)/i) { + $fmime=$1; + $i++; + } else { + $fmime=''; + } + } else { + $fname=''; + $fmime=''; + } + $i++; + } + } else { + $value.=$lines[$i]."\n"; + } + } + } + $r->method_number(M_GET); + $r->method('GET'); + $r->headers_in->unset('Content-length'); + +# ---------------------------------------------------------------- Check access + + if ($requrl!~/^\/adm\//) { + my $access=&Apache::lonnet::allowed('bre',$requrl); + if ($access eq '1') { + $ENV{'user.error.msg'}="$requrl:bre:0:0:Choose Course"; + return HTTP_NOT_ACCEPTABLE; + } + if (($access ne '2') && ($access ne 'F')) { + $ENV{'user.error.msg'}="$requrl:bre:1:1:Access Denied"; + return HTTP_NOT_ACCEPTABLE; + } + } + return OK; } else { - $r->log_reason("Cookie $handle not valid", $r->filename) + $r->log_reason("Cookie $handle not valid", $r->filename) }; } - $cookie=CGI::Cookie->new(-name => 'lonURL', - -value => $requrl, - -path => '/'); - $r->err_headers_out->add('Set-Cookie' => $cookie); + +# -------------------------------------------- See if this is a public resource + if (&Apache::lonnet::metadata($requrl,'copyright') eq 'public') { + &Apache::lonnet::logthis('Granting public access: '.$requrl); + $ENV{'user.name'}='public'; + $ENV{'user.domain'}='public'; + $ENV{'request.state'} = "published"; + $ENV{'request.publicaccess'} = 1; + $ENV{'request.filename'} = $r->filename; + return OK; + } +# ----------------------------------------------- Store where they wanted to go + + $ENV{'request.firsturl'}=$requrl; return FORBIDDEN; } 1; __END__ - - - - - - - -