loncom/auth/lonroles.pm - view

File: [LON-CAPA] / loncom / auth / lonroles.pm
Revision 1.83: download - view: text, annotated - select for diffs
Tue Jan 27 22:54:59 2004 UTC (20 years, 4 months ago) by albertel
Branches: MAIN
CVS tags: HEAD

- supporting authors on multidomain machines
  - this works, but requires that all users that author have unique usernames
    ( I.e. albertel@basement and albertel@annarbor will end up accessing the same /home/albertel/public_html)
- I plan on isntalling this on s17.lite.msu.edu to support the serway@brookscole user

1: # The LearningOnline Network with CAPA 2: # User Roles Screen 3: # 4: # $Id: lonroles.pm,v 1.83 2004/01/27 22:54:59 albertel Exp $ 5: # 6: # Copyright Michigan State University Board of Trustees 7: # 8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA). 9: # 10: # LON-CAPA is free software; you can redistribute it and/or modify 11: # it under the terms of the GNU General Public License as published by 12: # the Free Software Foundation; either version 2 of the License, or 13: # (at your option) any later version. 14: # 15: # LON-CAPA is distributed in the hope that it will be useful, 16: # but WITHOUT ANY WARRANTY; without even the implied warranty of 17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 18: # GNU General Public License for more details. 19: # 20: # You should have received a copy of the GNU General Public License 21: # along with LON-CAPA; if not, write to the Free Software 22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 23: # 24: # /home/httpd/html/adm/gpl.txt 25: # 26: # http://www.lon-capa.org/ 27: # 28: # (Directory Indexer 29: # (Login Screen 30: # YEAR=1999 31: # 5/21/99,5/22,5/25,5/26,5/31,6/2,6/10,7/12,7/14 Gerd Kortemeyer) 32: # 11/23 Gerd Kortemeyer) 33: # YEAR=2000 34: # 1/14,03/06,06/01,07/22,07/24,07/25, 35: # 09/04,09/06,09/28,09/29,09/30,10/2,10/5,10/26,10/28, 36: # 12/08,12/28, 37: # YEAR=2001 38: # 01/15/01 Gerd Kortemeyer 39: # 03/02,05/03,05/25,05/30,06/01,07/06,08/06 Gerd Kortemeyer 40: # 12/29 Gerd Kortemeyer 41: # 42: ### 43: 44: package Apache::lonroles; 45: 46: use strict; 47: use Apache::lonnet(); 48: use Apache::lonuserstate(); 49: use Apache::Constants qw(:common); 50: use Apache::File(); 51: use Apache::lonmenu; 52: use Apache::loncommon; 53: use Apache::lonannounce; 54: use Apache::lonlocal; 55: 56: sub redirect_user { 57: my ($r,$title,$url,$msg) = @_; 58: $msg = $title if (! defined($msg)); 59: &Apache::loncommon::content_type($r,'text/html'); 60: &Apache::loncommon::no_cache($r); 61: $r->send_http_header; 62: my $swinfo=&Apache::lonmenu::rawconfig(); 63: my $bodytag=&Apache::loncommon::bodytag('Switching Role'); 64: $r->print (<<ENDREDIR); 65: <head><title>$title</title> 66: <meta HTTP-EQUIV="Refresh" CONTENT="1; url=$url"> 67: </head> 68: <html> 69: $bodytag 70: <script> 71: $swinfo 72: </script> 73: <h1>$msg</h1> 74: </body> 75: </html> 76: ENDREDIR 77: return; 78: } 79: 80: sub handler { 81: 82: my $r = shift; 83: 84: my $now=time; 85: my $then=$ENV{'user.login.time'}; 86: my $envkey; 87: 88: 89: # ================================================================== Roles Init 90: 91: if ($ENV{'form.selectrole'}) { 92: if ($ENV{'request.course.id'}) { 93: my %temp=('logout_'.$ENV{'request.course.id'} => time); 94: &Apache::lonnet::put('email_status',\%temp); 95: } 96: &Apache::lonnet::appenv("request.course.id" => '', 97: "request.course.fn" => '', 98: "request.course.uri" => '', 99: "request.course.sec" => '', 100: "request.role" => 'cm', 101: "request.role.adv" => $ENV{'user.adv'}, 102: "request.role.domain" => $ENV{'user.domain'}); 103: foreach $envkey (keys %ENV) { 104: next if ($envkey!~/^user\.role\./); 105: my (undef,undef,$role,@pwhere)=split(/\./,$envkey); 106: my $where=join('.',@pwhere); 107: my $trolecode=$role.'.'.$where; 108: if ($ENV{'form.'.$trolecode}) { 109: my ($tstart,$tend)=split(/\./,$ENV{$envkey}); 110: my $tstatus='is'; 111: if ($tstart) { 112: if ($tstart>$then) { 113: $tstatus='future'; 114: } 115: } 116: if ($tend) { 117: if ($tend<$then) { $tstatus='expired'; } 118: if ($tend<$now) { $tstatus='will_not'; } 119: } 120: if ($tstatus eq 'is') { 121: $where=~s/^\///; 122: my ($cdom,$cnum,$csec)=split(/\//,$where); 123: # check for keyed access 124: if (($role eq 'st') && 125: ($ENV{'course.'.$cdom.'_'.$cnum.'.keyaccess'} eq 'yes')) { 126: unless (&Apache::lonnet::validate_access_key( 127: $ENV{'environment.key.'.$cdom.'_'.$cnum}, 128: $cdom,$cnum)) { 129: # there is no valid key 130: if ($ENV{'form.newkey'}) { 131: # student attempts to register a new key 132: } else { 133: # print form to enter a new key 134: &Apache::loncommon::content_type($r,'text/html'); 135: &Apache::loncommon::no_cache($r); 136: $r->send_http_header; 137: my $swinfo=&Apache::lonmenu::rawconfig(); 138: my $bodytag=&Apache::loncommon::bodytag 139: ('Enter Access Key to Unlock this Course'); 140: $r->print(<<ENDENTERKEY); 141: <head><title>Entering Course Access Key</title> 142: </head> 143: <html> 144: $bodytag 145: <script> 146: $swinfo 147: </script> 148: <form method="post"> 149: <input type="hidden" name="selectrole" value="$ENV{'form.selectrole'}" /> 150: <input type="text" size="20" name="newkey" value="$ENV{'form.newkey'}" /> 151: <input type="submit" value="Enter key" /> 152: </form> 153: </body></html> 154: ENDENTERKEY 155: return OK; 156: } 157: } 158: } 159: my $tadv=0; 160: if (($trolecode!~/^st/) && 161: ($trolecode!~/^ta/) && 162: ($trolecode!~/^cm/)) { $tadv=1; } 163: &Apache::lonnet::appenv( 164: 'request.role' => $trolecode, 165: 'request.role.adv' => $tadv, 166: 'request.role.domain' => $cdom, 167: 'request.course.sec' => $csec); 168: my $msg=&mt('Entering course ...'); 169: 170: if (($cnum) && ($role ne 'ca')) { 171: my ($furl,$ferr)= 172: &Apache::lonuserstate::readmap($cdom.'/'.$cnum); 173: if (($ENV{'form.orgurl'}) && 174: ($ENV{'form.orgurl'}!~/^\/adm\/flip/)) { 175: my $dest=$ENV{'form.orgurl'}; 176: if ( &Apache::lonnet::mod_perl_version() == 2 ) { 177: &Apache::lonnet::cleanenv(); 178: } 179: $r->internal_redirect($dest); 180: return OK; 181: } else { 182: unless ($ENV{'request.course.id'}) { 183: &Apache::lonnet::appenv( 184: "request.course.id" => $cdom.'_'.$cnum); 185: $furl='/adm/roles?tryagain=1'; 186: $msg= 187: '<h1><font color=red>'. 188: &mt('Could not initialize course at this time.'). 189: '</font></h1><h3>'.&mt('Please try again.').'</h3>'.$ferr; 190: } 191: 192: # Check to see if the user is a CC entering a course 193: # for the first time 194: my (undef, undef, $role, $courseid) = split(/\./, $envkey); 195: if (substr($courseid, 0, 1) eq '/') { 196: $courseid = substr($courseid, 1); 197: } 198: $courseid =~ s/\//_/; 199: if ($role eq 'cc' && $ENV{'course.' . $courseid . 200: '.course.helper.not.run'}) { 201: $furl = "/adm/helper/course.initialization.helper"; 202: } 203: # 204: # Send the user to the course they selected 205: &redirect_user($r,&mt('Entering Course'), 206: $furl,$msg); 207: return OK; 208: } 209: } 210: # 211: # Send the user to the construction space they selected 212: if ($role =~ /^(au|ca)$/) { 213: my $redirect_url = '/priv/'; 214: if ($role eq 'au') { 215: $redirect_url.=$ENV{'user.name'}; 216: } else { 217: $where =~ /\/(.*)$/; 218: $redirect_url .= $1; 219: } 220: $redirect_url .= '/'; 221: &redirect_user($r,&mt('Entering Construction Space'), 222: $redirect_url); 223: return OK; 224: } 225: } 226: } 227: } 228: } 229: 230: 231: # =============================================================== No Roles Init 232: 233: &Apache::loncommon::content_type($r,'text/html'); 234: &Apache::loncommon::no_cache($r); 235: $r->send_http_header; 236: return OK if $r->header_only; 237: 238: my $swinfo=&Apache::lonmenu::rawconfig(); 239: my $bodytag=&Apache::loncommon::bodytag('User Roles'); 240: my $helptag='<table><tr><td>'.&Apache::loncommon::help_open_topic 241: ("General_Intro",&mt("Click here for help")).'</td><td>'. 242: &Apache::loncommon::help_open_faq(1,&mt('Click here for FAQ')).'</td><td>'. 243: &Apache::loncommon::help_open_bug('',&mt('Click here to report bugs')).'</td></tr></table>'; 244: $r->print(<<ENDHEADER); 245: <html> 246: <head> 247: <title>LON-CAPA User Roles</title> 248: </head> 249: $bodytag 250: $helptag<br /> 251: <script> 252: $swinfo 253: window.focus(); 254: </script> 255: ENDHEADER 256: 257: # ------------------------------------------ Get Error Message from Environment 258: 259: my ($fn,$priv,$nochoose,$error,$msg)=split(/:/,$ENV{'user.error.msg'}); 260: if ($ENV{'user.error.msg'}) { 261: $r->log_reason( 262: "$msg for $ENV{'user.name'} domain $ENV{'user.domain'} access $priv",$fn); 263: } 264: 265: # ------------------------------------------------- Can this user re-init, etc? 266: 267: my $advanced=$ENV{'user.adv'}; 268: &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['tryagain']); 269: my $tryagain=$ENV{'form.tryagain'}; 270: 271: # -------------------------------------------------------- Generate Page Output 272: # --------------------------------------------------------------- Error Header? 273: if ($error) { 274: $r->print("<h1>LON-CAPA Access Control</h1>"); 275: $r->print("<hr><pre>Access : ". 276: Apache::lonnet::plaintext($priv)."\n"); 277: $r->print("Resource: $fn\n"); 278: $r->print("Action : $msg\n</pre><hr>"); 279: } else { 280: if ($ENV{'user.error.msg'}) { 281: $r->print( 282: '<h3><font color=red>'. 283: &mt('You need to choose another user role or enter a specific course for this function').'</font></h3>'); 284: } 285: } 286: # -------------------------------------------------------- Choice or no choice? 287: if ($nochoose) { 288: if ($advanced) { 289: $r->print("<h2>".&mt('Assigned User Roles')."</h2>\n"); 290: } else { 291: $r->print("<h2>".&mt('Sorry ...')."</h2>\n". 292: &mt('This resource might be part of')); 293: if ($ENV{'request.course.id'}) { 294: $r->print(&mt(' another')); 295: } else { 296: $r->print(&mt(' a certain')); 297: } 298: $r->print(&mt(' course.').'</body></html>'); 299: return OK; 300: } 301: } else { 302: if ($advanced) { 303: $r->print(&mt("Your home server is "). 304: $Apache::lonnet::hostname{&Apache::lonnet::homeserver 305: ($ENV{'user.name'},$ENV{'user.domain'})}. 306: "<br />\n"); 307: $r->print(&mt( 308: "Author and Co-Author roles may not be available on servers other than your home server.")); 309: } else { 310: $r->print("<h2>".&mt('Select a Course to Enter')."</h2>\n"); 311: } 312: if (($ENV{'REDIRECT_QUERY_STRING'}) && ($fn)) { 313: $fn.='?'.$ENV{'REDIRECT_QUERY_STRING'}; 314: } 315: $r->print('<form method=post action="'.(($fn)?$fn:$r->uri).'">'); 316: $r->print('<input type=hidden name=orgurl value="'.$fn.'">'); 317: $r->print('<input type=hidden name=selectrole value=1>'); 318: } 319: if ($ENV{'user.adv'}) { 320: $r->print( 321: '<br />'.&mt('Show all roles').': <input type="checkbox" name="showall"'); 322: if ($ENV{'form.showall'}) { $r->print(' checked'); } 323: $r->print('><input type=submit value="'.&mt('Display').'">'); 324: } 325: # ----------------------------------------------------------------------- Table 326: $r->print('<br /><table><tr>'); 327: unless ($nochoose) { $r->print('<th> </th>'); } 328: $r->print('<th>'.&mt('User Role').'</th><th colspan=2>'.&mt('Extent'). 329: '</th><th>'.&mt('Start').'</th><th>'.&mt('End').'</th><th>'. 330: &mt('Remark').'</th></tr>'."\n"); 331: 332: my (%roletext,%sortrole,%roleclass); 333: foreach $envkey (sort keys %ENV) { 334: my $button = 1; 335: my $switchserver=''; 336: my $roletext; 337: my $sortkey; 338: if ($envkey=~/^user\.role\./) { 339: my (undef,undef,$role,@pwhere)=split(/\./,$envkey); 340: next if (!defined($role) || $role eq ''); 341: my $where=join('.',@pwhere); 342: my $trolecode=$role.'.'.$where; 343: my ($tstart,$tend)=split(/\./,$ENV{$envkey}); 344: my $tremark=''; 345: my $tstatus='is'; 346: my $tpstart=' '; 347: my $tpend=' '; 348: my $tfont='#000000'; 349: if ($tstart) { 350: if ($tstart>$then) { 351: $tstatus='future'; 352: if ($tstart<$now) { $tstatus='will'; } 353: } 354: $tpstart=&Apache::lonlocal::locallocaltime($tstart); 355: } 356: if ($tend) { 357: if ($tend<$then) { 358: $tstatus='expired'; 359: } elsif ($tend<$now) { 360: $tstatus='will_not'; 361: } 362: $tpend=&Apache::lonlocal::locallocaltime($tend); 363: } 364: if ($ENV{'request.role'} eq $trolecode) { 365: $tstatus='selected'; 366: } 367: my $tbg; 368: if (($tstatus eq 'is') || ($tstatus eq 'selected') || 369: ($ENV{'form.showall'})) { 370: if ($tstatus eq 'is') { 371: $tbg='#77FF77'; 372: $tfont='#003300'; 373: } elsif ($tstatus eq 'future') { 374: $tbg='#FFFF77'; 375: $button=0; 376: } elsif ($tstatus eq 'will') { 377: $tbg='#FFAA77'; 378: $tremark.=&mt('Active at next login. '); 379: } elsif ($tstatus eq 'expired') { 380: $tbg='#FF7777'; 381: $tfont='#330000'; 382: $button=0; 383: } elsif ($tstatus eq 'will_not') { 384: $tbg='#AAFF77'; 385: $tremark.=&mt('Expired after logout. '); 386: } elsif ($tstatus eq 'selected') { 387: $tbg='#11CC55'; 388: $tfont='#002200'; 389: $tremark.=&mt('Currently selected. '); 390: } 391: my $trole; 392: if ($role =~ /^cr\//) { 393: my ($rdummy,$rdomain,$rauthor,$rrole)=split(/\//,$role); 394: $tremark.='<br>'.&mt('Defined by ').$rauthor. 395: &mt(' at ').$rdomain.'.'; 396: $trole=$rrole; 397: } else { 398: $trole=Apache::lonnet::plaintext($role); 399: } 400: my $ttype; 401: my $twhere; 402: my ($tdom,$trest,$tsection)= 403: split(/\//,Apache::lonnet::declutter($where)); 404: # First, Co-Authorship roles 405: if ($role eq 'ca') { 406: my $home = &Apache::lonnet::homeserver($trest,$tdom); 407: my $allowed=0; 408: my @ids=&Apache::lonnet::current_machine_ids(); 409: foreach my $id (@ids) { if ($id eq $home) { $allowed=1; } } 410: if (!$allowed) { 411: $button=0; 412: $switchserver=&Apache::lonnet::escape('http://'. 413: $Apache::lonnet::hostname{$home}. 414: '/adm/login?domain='.$ENV{'user.domain'}. 415: '&username='.$ENV{'user.name'}. 416: '&firsturl=/priv/'.$trest); 417: } 418: #next if ($home eq 'no_host'); 419: $home = $Apache::lonnet::hostname{$home}; 420: $ttype='Construction Space'; 421: $twhere=&mt('User').': '.$trest.'<br />'.&mt('Domain'). 422: ': '.$tdom.'<br />'. 423: ' '.&mt('Server').': '.$home; 424: $ENV{'course.'.$tdom.'_'.$trest.'.description'}='ca'; 425: $tremark.=&Apache::lonhtmlcommon::authorbombs('/res/'.$tdom.'/'.$trest.'/'); 426: $sortkey=$role."$trest:$tdom"; 427: } elsif ($role eq 'au') { 428: # Authors 429: my $home = &Apache::lonnet::homeserver 430: ($ENV{'user.name'},$ENV{'user.domain'}); 431: my $allowed=0; 432: my @ids=&Apache::lonnet::current_machine_ids(); 433: foreach my $id (@ids) { if ($id eq $home) { $allowed=1; } } 434: if (!$allowed) { 435: $button=0; 436: $switchserver=&Apache::lonnet::escape('http://'. 437: $Apache::lonnet::hostname{$home}. 438: '/adm/login?domain='.$ENV{'user.domain'}. 439: '&username='.$ENV{'user.name'}. 440: '&firsturl=/priv/'.$ENV{'user.name'}); 441: } 442: #next if ($home eq 'no_host'); 443: $home = $Apache::lonnet::hostname{$home}; 444: $ttype='Construction Space'; 445: $twhere=&mt('Domain').': '.$tdom.'<br />'.&mt('Server'). 446: ': '.$home; 447: $ENV{'course.'.$tdom.'_'.$trest.'.description'}='ca'; 448: $tremark.=&Apache::lonhtmlcommon::authorbombs('/res/'.$tdom.'/'.$ENV{'user.name'}.'/'); 449: $sortkey=$role; 450: } elsif ($trest) { 451: $ttype='Course'; 452: if ($tsection) { 453: $ttype.='<br>'.&mt('Section/Group').': '.$tsection; 454: } 455: my $tcourseid=$tdom.'_'.$trest; 456: if ($ENV{'course.'.$tcourseid.'.description'}) { 457: $twhere=$ENV{'course.'.$tcourseid.'.description'}; 458: $sortkey=$role."\0".$tdom."\0".$twhere."\0".$envkey; 459: unless ($twhere eq &mt('Currently not available')) { 460: $twhere.=' <font size="-2">'. 461: &Apache::loncommon::syllabuswrapper(&mt('Syllabus'),$trest,$tdom,$tfont). 462: '</font>'; 463: } 464: } else { 465: my %newhash=Apache::lonnet::coursedescription 466: ($tcourseid); 467: if (%newhash) { 468: $sortkey=$role."\0".$tdom."\0".$newhash{'description'}. 469: "\0".$envkey; 470: $twhere=$newhash{'description'}. 471: ' <font size="-2">'. 472: &Apache::loncommon::syllabuswrapper(&mt('Syllabus'),$trest,$tdom,$tfont). 473: '</font>'; 474: } else { 475: $twhere=&mt('Currently not available'); 476: $ENV{'course.'.$tcourseid.'.description'}=$twhere; 477: $sortkey=$role."\0".$tdom."\0".$twhere."\0".$envkey; 478: } 479: } 480: if ($role ne 'st') { $twhere.="<br />".&mt('Domain').":".$tdom; } 481: } elsif ($tdom) { 482: $ttype='Domain'; 483: $twhere=$tdom; 484: $sortkey=$role.$twhere; 485: } else { 486: $ttype='System'; 487: $twhere=&mt('system wide'); 488: $sortkey=$role.$twhere; 489: } 490: 491: $roletext.='<tr bgcolor='.$tbg.'>'; 492: unless ($nochoose) { 493: if (!$button) { 494: if ($switchserver) { 495: $roletext.='<td><a href="/adm/logout?handover='. 496: $switchserver.'">'.&mt('Switch Server').'</a></td>'; 497: } else { 498: $roletext.=('<td> </td>'); 499: } 500: } elsif ($tstatus eq 'is') { 501: $roletext.=('<td><input type=submit value="'. 502: &mt('Select').'" name="'. 503: $trolecode.'"></td>'); 504: } elsif ($tryagain) { 505: $roletext.= 506: '<td><input type=submit value="'. 507: &mt('Try Selecting Again').'" name="'.$trolecode.'"></td>'; 508: } elsif ($advanced) { 509: $roletext.= 510: '<td><input type=submit value="'. 511: &mt('Re-Initialize').'" name="'.$trolecode.'"></td>'; 512: } else { 513: $roletext.='<td> </td>'; 514: } 515: } 516: $tremark.=&Apache::lonannounce::showday(time,1, 517: &Apache::lonannounce::readcalendar($tdom.'_'.$trest)); 518: 519: $roletext.='<td><font color="'.$tfont.'">'.$trole. 520: '</font></td><td><font color="'.$tfont.'">'.$ttype. 521: '</font></td><td><font color="'.$tfont.'">'.$twhere. 522: '</font></td><td><font color="'.$tfont.'">'.$tpstart. 523: '</font></td><td><font color="'.$tfont.'">'.$tpend. 524: '</font></td><td><font color="'.$tfont.'">'.$tremark. 525: ' </font></td></tr>'."\n"; 526: $roletext{$envkey}=$roletext; 527: if (!$sortkey) {$sortkey=$twhere."\0".$envkey;} 528: $sortrole{$sortkey}=$envkey; 529: $roleclass{$envkey}=$ttype; 530: } 531: } 532: } 533: my $doheaders=-1; 534: foreach my $type ('Construction Space','Course','Domain','System') { 535: my $haverole=0; 536: foreach my $which (sort {uc($a) cmp uc($b)} (keys(%sortrole))) { 537: if ($roleclass{$sortrole{$which}} =~ /^\Q$type\E/) { 538: $haverole=1; 539: } 540: } 541: if ($haverole) { $doheaders++; } 542: } 543: foreach my $type ('Construction Space','Course','Domain','System') { 544: my $output; 545: foreach my $which (sort {uc($a) cmp uc($b)} (keys(%sortrole))) { 546: if ($roleclass{$sortrole{$which}} =~ /^\Q$type\E/) { 547: $output.=&mt($roletext{$sortrole{$which}}); 548: } 549: } 550: if ($output) { 551: if ($doheaders > 0) { 552: $r->print("<tr bgcolor='#BBffBB'>". 553: "<td align='center' colspan='7'>".&mt($type)."</td>"); 554: } 555: $r->print($output); 556: } 557: } 558: my $tremark=''; 559: my $tfont='#003300'; 560: if ($ENV{'request.role'} eq 'cm') { 561: $r->print('<tr bgcolor="#11CC55">'); 562: $tremark=&mt('Currently selected. '); 563: $tfont='#002200'; 564: } else { 565: $r->print('<tr bgcolor="#77FF77">'); 566: } 567: unless ($nochoose) { 568: if ($ENV{'request.role'} ne 'cm') { 569: $r->print('<td><input type=submit value="'. 570: &mt('Select').'" name="cm"></td>'); 571: } else { 572: $r->print('<td> </td>'); 573: } 574: } 575: $r->print('<td colspan=5><font color="'.$tfont.'">'.&mt('No role specified'). 576: '</font></td><td><font color="'.$tfont.'">'.$tremark. 577: ' </font></td></tr>'."\n"); 578: 579: $r->print('</table>'); 580: unless ($nochoose) { 581: $r->print("</form>\n"); 582: } 583: # ------------------------------------------------------------ Privileges Info 584: if (($advanced) && (($ENV{'user.error.msg'}) || ($error))) { 585: $r->print('<hr><h2>Current Privileges</h2>'); 586: 587: foreach $envkey (sort keys %ENV) { 588: if ($envkey=~/^user\.priv\.$ENV{'request.role'}\./) { 589: my $where=$envkey; 590: $where=~s/^user\.priv\.$ENV{'request.role'}\.//; 591: my $ttype; 592: my $twhere; 593: my ($tdom,$trest,$tsec)= 594: split(/\//,Apache::lonnet::declutter($where)); 595: if ($trest) { 596: if ($ENV{'course.'.$tdom.'_'.$trest.'.description'} eq 'ca') { 597: $ttype='Construction Space'; 598: $twhere='User: '.$trest.', Domain: '.$tdom; 599: } else { 600: $ttype='Course'; 601: $twhere=$ENV{'course.'.$tdom.'_'.$trest.'.description'}; 602: if ($tsec) { 603: $twhere.=' (Section/Group: '.$tsec.')'; 604: } 605: } 606: } elsif ($tdom) { 607: $ttype='Domain'; 608: $twhere=$tdom; 609: } else { 610: $ttype='System'; 611: $twhere='/'; 612: } 613: $r->print("\n<h3>".$ttype.': '.$twhere.'</h3><ul>'); 614: foreach (sort split(/:/,$ENV{$envkey})) { 615: if ($_) { 616: my ($prv,$restr)=split(/\&/,$_); 617: my $trestr=''; 618: if ($restr ne 'F') { 619: my $i; 620: $trestr.=' ('; 621: for ($i=0;$i<length($restr);$i++) { 622: $trestr.= 623: Apache::lonnet::plaintext(substr($restr,$i,1)); 624: if ($i<length($restr)-1) { $trestr.=', '; } 625: } 626: $trestr.=')'; 627: } 628: $r->print('<li>'. 629: Apache::lonnet::plaintext($prv).$trestr. 630: '</li>'); 631: } 632: } 633: $r->print('</ul>'); 634: } 635: } 636: } 637: $r->print(&Apache::lonnet::getannounce()); 638: if ($advanced) { 639: $r->print('<p><small><i>This is LON-CAPA '. 640: $r->dir_config('lonVersion').'</i></small></p>'); 641: } 642: $r->print("</body></html>\n"); 643: return OK; 644: } 645: 646: 1; 647: __END__ 648: 649: =head1 NAME 650: 651: Apache::lonroles - User Roles Screen 652: 653: =head1 SYNOPSIS 654: 655: Invoked by /etc/httpd/conf/srm.conf: 656: 657: <Location /adm/roles> 658: PerlAccessHandler Apache::lonacc 659: SetHandler perl-script 660: PerlHandler Apache::lonroles 661: ErrorDocument 403 /adm/login 662: ErrorDocument 500 /adm/errorhandler 663: </Location> 664: 665: =head1 OVERVIEW 666: 667: =head2 Choosing Roles 668: 669: C<lonroles> is a handler that allows a user to switch roles in 670: mid-session. LON-CAPA attempts to work with "No Role Specified", the 671: default role that a user has before selecting a role, as widely as 672: possible, but certain handlers for example need specification which 673: course they should act on, etc. Both in this scenario, and when the 674: handler determines via C<lonnet>'s C<&allowed> function that a certain 675: action is not allowed, C<lonroles> is used as error handler. This 676: allows the user to select another role which may have permission to do 677: what they were trying to do. C<lonroles> can also be accessed via the 678: B<CRS> button in the Remote Control. 679: 680: =begin latex 681: 682: \begin{figure} 683: \begin{center} 684: \includegraphics[width=0.45\paperwidth,keepaspectratio]{Sample_Roles_Screen} 685: \caption{\label{Sample_Roles_Screen}Sample Roles Screen} 686: \end{center} 687: \end{figure} 688: 689: =end latex 690: 691: =head2 Role Initialization 692: 693: The privileges for a user are established at login time and stored in the session environment. As a consequence, a new role does not become active till the next login. Handlers are able to query for privileges using C<lonnet>'s C<&allowed> function. When a user first logs in, their role is the "common" role, which means that they have the sum of all of their privileges. During a session it might become necessary to choose a particular role, which as a consequence also limits the user to only the privileges in that particular role. 694: 695: =head1 INTRODUCTION 696: 697: This module enables a user to select what role he wishes to 698: operate under (instructor, student, teaching assistant, course 699: coordinator, etc). These roles are pre-established by the actions 700: of upper-level users. 701: 702: This is part of the LearningOnline Network with CAPA project 703: described at http://www.lon-capa.org. 704: 705: =head1 HANDLER SUBROUTINE 706: 707: This routine is called by Apache and mod_perl. 708: 709: =over 4 710: 711: =item * 712: 713: Roles Initialization (yes/no) 714: 715: =item * 716: 717: Get Error Message from Environment 718: 719: =item * 720: 721: Who is this? 722: 723: =item * 724: 725: Generate Page Output 726: 727: =item * 728: 729: Choice or no choice 730: 731: =item * 732: 733: Table 734: 735: =item * 736: 737: Privileges 738: 739: =back 740: 741: =cut