Code
/
islandora
7
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
Browse Source

implement ds xacml checks

pull/544/head
Nelson Hart 10 years ago
parent
a944030c71
commit
9446b04e79
2 changed files with 83 additions and 80 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 150
      ObjectHelper.inc
  2. 13
      fedora_repository.module

150
ObjectHelper.inc
Unescape View File

@ -31,17 +31,17 @@ class ObjectHelper {
module_load_include('inc', 'fedora_repository', 'ConnectionHelper'); module_load_include('inc', 'fedora_repository', 'ConnectionHelper');
$connectionHelper = new ConnectionHelper(); $connectionHelper = new ConnectionHelper();
} }
/** /**
* Get the size of the indicated datastream. * Get the size of the indicated datastream.
* *
* Note that this only works for Inline XML and Managed datastream, as Fedora * Note that this only works for Inline XML and Managed datastream, as Fedora
* does not know anything about external or redirect streams, other than a URI. * does not know anything about external or redirect streams, other than a URI.
* If run on an external or redirect stream, Fedora (and therefore this * If run on an external or redirect stream, Fedora (and therefore this
* function) will return the integer value '0'. * function) will return the integer value '0'.
* This function requires the use of the API-M method getDatastream, and defaults * This function requires the use of the API-M method getDatastream, and defaults
* to returning '0' if it is not accessible. * to returning '0' if it is not accessible.
* *
* @param $pid string * @param $pid string
* A string containing the PID of a Fedora object. * A string containing the PID of a Fedora object.
* @param $dsid string * @param $dsid string
@ -50,7 +50,7 @@ class ObjectHelper {
* @param $quiet boolean * @param $quiet boolean
* A boolean indicating whether SOAP errors should be displayed. * A boolean indicating whether SOAP errors should be displayed.
* @return integer * @return integer
* An integer representing the size of the datastream, or zero if it could not be determined. * An integer representing the size of the datastream, or zero if it could not be determined.
*/ */
static function getDatastreamSize($pid, $dsid, $quiet = FALSE) { static function getDatastreamSize($pid, $dsid, $quiet = FALSE) {
module_load_include('inc', 'fedora_repository', 'api/fedora_item'); module_load_include('inc', 'fedora_repository', 'api/fedora_item');
@ -65,7 +65,7 @@ class ObjectHelper {
/** /**
* Grabs a stream from fedora sets the mimetype and returns it. $dsID is the * Grabs a stream from fedora sets the mimetype and returns it. $dsID is the
* datastream id. If $forceSoap is set, the function will always buffer the datastream from fedora. Otherwise, it will * datastream id. If $forceSoap is set, the function will always buffer the datastream from fedora. Otherwise, it will
* try and use a redirect if possible. * try and use a redirect if possible.
* *
* @global type $user * @global type $user
@ -76,7 +76,7 @@ class ObjectHelper {
* @param type $filePath * @param type $filePath
* @param type $version * @param type $version
* @param type $forceSoap * @param type $forceSoap
* @return type * @return type
*/ */
function makeObject($pid, $dsID, $asAttachment = FALSE, $label = NULL, $filePath=FALSE, $version=NULL, $forceSoap = TRUE) { function makeObject($pid, $dsID, $asAttachment = FALSE, $label = NULL, $filePath=FALSE, $version=NULL, $forceSoap = TRUE) {
global $user; global $user;
@ -93,7 +93,7 @@ class ObjectHelper {
return ' '; return ' ';
} }
if (!fedora_repository_check_perm(OBJECTHELPER :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) { if (!fedora_repository_check_perm(OBJECTHELPER :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user, TRUE, $dsID)) {
drupal_set_message(t("You do not have access Fedora objects within the attempted namespace."), 'error'); drupal_set_message(t("You do not have access Fedora objects within the attempted namespace."), 'error');
drupal_access_denied(); drupal_access_denied();
return ' '; return ' ';
@ -136,7 +136,9 @@ class ObjectHelper {
$fedoraUser = $user->name; $fedoraUser = $user->name;
$fedoraPass = $user->pass; $fedoraPass = $user->pass;
} }
if (function_exists("curl_init")) { if (function_exists("curl_init")) {
$url = variable_get('fedora_base_url', 'http://localhost:8080/fedora') . '/objects/' . $pid . '/datastreams/' . $dsID . '/content'; $url = variable_get('fedora_base_url', 'http://localhost:8080/fedora') . '/objects/' . $pid . '/datastreams/' . $dsID . '/content';
$query_options = array(); $query_options = array();
@ -148,9 +150,10 @@ class ObjectHelper {
'query' => $query_options, 'query' => $query_options,
)); ));
} }
$ch = curl_init($url); $ch = curl_init($url);
$user_agent = "Mozilla/4.0 pp(compatible; MSIE 5.01; Windows NT 5.0)"; $user_agent = "Mozilla/4.0 pp(compatible; MSIE 5.01; Windows NT 5.0)";
$curl_opts = array( $curl_opts = array(
CURLOPT_SSL_VERIFYPEER => FALSE, CURLOPT_SSL_VERIFYPEER => FALSE,
CURLOPT_SSL_VERIFYHOST => FALSE, CURLOPT_SSL_VERIFYHOST => FALSE,
@ -175,17 +178,17 @@ class ObjectHelper {
else { else {
curl_setopt($ch, CURLOPT_NOBODY, TRUE); curl_setopt($ch, CURLOPT_NOBODY, TRUE);
$curl_stat = curl_exec($ch); $curl_stat = curl_exec($ch);
if ($curl_stat !== FALSE) { if ($curl_stat !== FALSE) {
$info = curl_getinfo($ch); $info = curl_getinfo($ch);
// Fixes an IE issue (ISLANDORA-311) // Fixes an IE issue (ISLANDORA-311)
// http://support.microsoft.com/kb/316431 // http://support.microsoft.com/kb/316431
drupal_set_header("Cache-Control: private", TRUE); drupal_set_header("Cache-Control: private", TRUE);
//Set what headers we can... //Set what headers we can...
if ($mimeType = $info['content_type']) { if ($mimeType = $info['content_type']) {
drupal_set_header("Content-Type: $mimeType"); drupal_set_header("Content-Type: $mimeType");
if ($asAttachment) { if ($asAttachment) {
$suggestedFileName = "$label"; $suggestedFileName = "$label";
$pos = strpos($suggestedFileName, '.'); $pos = strpos($suggestedFileName, '.');
@ -213,28 +216,27 @@ class ObjectHelper {
drupal_set_header('Content-Disposition: attachment; filename="' . $suggestedFileName . '"'); drupal_set_header('Content-Disposition: attachment; filename="' . $suggestedFileName . '"');
} }
} }
$effective_url = $info['url']; $effective_url = $info['url'];
//dd($info, 'header/nobody info');
if ($url !== $effective_url) { //Handle redirect streams (the final URL is not the same as the Fedora URL) if ($url !== $effective_url) { //Handle redirect streams (the final URL is not the same as the Fedora URL)
//Add the parameters passed to Drupal, leaving out the 'q' //Add the parameters passed to Drupal, leaving out the 'q'
$query = array(); $query = array();
parse_str($_SERVER['QUERY_STRING'], $query); parse_str($_SERVER['QUERY_STRING'], $query);
if (isset($query['q'])) { if (isset($query['q'])) {
unset($query['q']); unset($query['q']);
} }
drupal_set_header('HTTP/1.1 307 Moved Temporarily'); drupal_set_header('HTTP/1.1 307 Moved Temporarily');
drupal_set_header('Location: ' . url($effective_url, array('query' => $query))); drupal_set_header('Location: ' . url($effective_url, array('query' => $query)));
} }
elseif ((isset($user) && $user->uid != 0) || $forceSoap || isset($_SERVER['HTTPS'])) { //If not anonymous, soap is force or we're using HTTPS elseif ((isset($user) && $user->uid != 0) || $forceSoap || isset($_SERVER['HTTPS'])) { //If not anonymous, soap is force or we're using HTTPS
//Have the webserver mediate the transfer (download and restream) //Have the webserver mediate the transfer (download and restream)
if (($contentSize = self::getDatastreamSize($pid, $dsID, TRUE)) > 0) { if (($contentSize = self::getDatastreamSize($pid, $dsID, TRUE)) > 0) {
drupal_set_header("Content-Length: $contentSize"); drupal_set_header("Content-Length: $contentSize");
} }
$opts = array( $opts = array(
CURLOPT_NOBODY => FALSE, CURLOPT_NOBODY => FALSE,
CURLOPT_HTTPGET => TRUE, //CURLOPT_NOBODY sets it to 'HEAD' CURLOPT_HTTPGET => TRUE, //CURLOPT_NOBODY sets it to 'HEAD'
@ -242,7 +244,7 @@ class ObjectHelper {
); );
curl_setopt_array($ch, $opts); curl_setopt_array($ch, $opts);
$curl_stat = curl_exec($ch); $curl_stat = curl_exec($ch);
if (!$curl_stat) { if (!$curl_stat) {
watchdog('fedora_repository', 'Error in ObjectHelper->makeObject() for @pid/@dsid. See link for attempted URL.', array( watchdog('fedora_repository', 'Error in ObjectHelper->makeObject() for @pid/@dsid. See link for attempted URL.', array(
'@pid' => $pid, '@pid' => $pid,
@ -261,7 +263,7 @@ class ObjectHelper {
'%dsid' => $dsID, '%dsid' => $dsID,
'!info' => print_r(curl_getinfo($ch), TRUE), '!info' => print_r(curl_getinfo($ch), TRUE),
), WATCHDOG_WARNING); ), WATCHDOG_WARNING);
} }
} }
curl_close($ch); curl_close($ch);
} }
@ -275,7 +277,7 @@ class ObjectHelper {
* *
* @param type $pid * @param type $pid
* @param type $query * @param type $query
* @return type * @return type
*/ */
function getCollectionInfo($pid, $query = NULL) { function getCollectionInfo($pid, $query = NULL) {
module_load_include('inc', 'fedora_repository', 'CollectionClass'); module_load_include('inc', 'fedora_repository', 'CollectionClass');
@ -290,7 +292,7 @@ class ObjectHelper {
* @global type $user * @global type $user
* @param type $pid * @param type $pid
* @param type $dsID * @param type $dsID
* @return type * @return type
*/ */
function getMimeType($pid, $dsID) { function getMimeType($pid, $dsID) {
global $user; global $user;
@ -298,7 +300,7 @@ class ObjectHelper {
drupal_set_message(t('You must specify an object pid and datastream ID.'), 'error'); drupal_set_message(t('You must specify an object pid and datastream ID.'), 'error');
return ''; return '';
} }
if (!fedora_repository_check_perm(ObjectHelper :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) { if (!fedora_repository_check_perm(ObjectHelper :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user, TRUE, $dsID)) {
drupal_set_message(t('You do not have the appropriate permissions'), 'error'); drupal_set_message(t('You do not have the appropriate permissions'), 'error');
return; return;
} }
@ -325,7 +327,7 @@ class ObjectHelper {
* @global type $user * @global type $user
* @param type $pid * @param type $pid
* @param type $dsID * @param type $dsID
* @return type * @return type
*/ */
function getDatastreamInfo($pid, $dsID) { function getDatastreamInfo($pid, $dsID) {
global $user; global $user;
@ -333,7 +335,7 @@ class ObjectHelper {
drupal_set_message(t('You must specify an object pid and datastream ID.'), 'error'); drupal_set_message(t('You must specify an object pid and datastream ID.'), 'error');
return ''; return '';
} }
if (!fedora_repository_check_perm(ObjectHelper :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) { if (!fedora_repository_check_perm(ObjectHelper :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user, TRUE, $dsID)) {
drupal_set_message(t('You do not have the appropriate permissions'), 'error'); drupal_set_message(t('You do not have the appropriate permissions'), 'error');
return; return;
} }
@ -414,7 +416,7 @@ class ObjectHelper {
'target' => '_blank', 'target' => '_blank',
), ),
)); ));
$downloadVersion = drupal_get_form('fedora_repository_download_datastream_form', $pid, $id, $label_deslashed); $downloadVersion = drupal_get_form('fedora_repository_download_datastream_form', $pid, $id, $label_deslashed);
return array( return array(
@ -440,7 +442,7 @@ class ObjectHelper {
* getFormattedDC ?? * getFormattedDC ??
* @global type $base_url * @global type $base_url
* @param type $item * @param type $item
* @return type * @return type
*/ */
function getFormattedDC($item) { function getFormattedDC($item) {
global $base_url; global $base_url;
@ -448,11 +450,11 @@ class ObjectHelper {
$dsid = array_key_exists('QDC', $item->get_datastreams_list_as_array()) ? 'QDC' : 'DC'; $dsid = array_key_exists('QDC', $item->get_datastreams_list_as_array()) ? 'QDC' : 'DC';
$xmlstr = $item->get_datastream_dissemination($dsid); $xmlstr = $item->get_datastream_dissemination($dsid);
if (empty($xmlstr)) { if (empty($xmlstr)) {
return ''; return '';
} }
if (($xsl_path = "$path/xsl/convertQDC.xsl") && if (($xsl_path = "$path/xsl/convertQDC.xsl") &&
(is_readable($xsl_path)) && (is_readable($xsl_path)) &&
($xsl = DOMDocument::load($xsl_path)) && //Fails loading XSLT -> FALSE ($xsl = DOMDocument::load($xsl_path)) && //Fails loading XSLT -> FALSE
@ -491,11 +493,11 @@ class ObjectHelper {
else { else {
$rendered_data = (string)$child; $rendered_data = (string)$child;
} }
if ($data) { if ($data) {
$rendered_data = theme('item_list', $data); $rendered_data = theme('item_list', $data);
} }
if ($rendered_data) { if ($rendered_data) {
$rows[] = array( $rows[] = array(
array( array(
@ -508,8 +510,8 @@ class ObjectHelper {
), ),
); );
} }
} }
} }
@ -597,17 +599,17 @@ class ObjectHelper {
$DSs = array(); $DSs = array();
foreach ($object as $datastream) { foreach ($object as $datastream) {
foreach ($datastream as $datastreamValue) { foreach ($datastream as $datastreamValue) {
if (variable_get('fedora_object_restrict_datastreams', FALSE) == FALSE || ((isset($user) && in_array('administrator', $user->roles)) || in_array($datastreamValue->ID, $cmDatastreams))) { if (variable_get('fedora_object_restrict_datastreams', FALSE) == FALSE || ((isset($user) && in_array('administrator', $user->roles)) || in_array($datastreamValue->ID, $cmDatastreams))) {
//create the links to each datastream //create the links to each datastream
$DSs []= $this->create_link_for_ds($object_pid, $datastreamValue); $DSs []= $this->create_link_for_ds($object_pid, $datastreamValue);
} }
} }
} }
$dataStreamBody = theme('table', $headers, $DSs); $dataStreamBody = theme('table', $headers, $DSs);
//if they have access let them add a datastream //if they have access let them add a datastream
if (fedora_repository_check_perm(ObjectHelper::$ADD_FEDORA_STREAMS, $object_pid) && //If allowed throw Drupal if (fedora_repository_check_perm(ObjectHelper::$ADD_FEDORA_STREAMS, $object_pid) && //If allowed throw Drupal
((module_exists('fedora_fesl') && fedora_fesl_check_roles($object_pid, 'write')) || //And allowed throw FESL ((module_exists('fedora_fesl') && fedora_fesl_check_roles($object_pid, 'write')) || //And allowed throw FESL
!module_exists('fedora_fesl'))) { //Or not using FESL, draw the add datastream form. !module_exists('fedora_fesl'))) { //Or not using FESL, draw the add datastream form.
$dataStreamBody .= drupal_get_form('add_stream_form', $object_pid); $dataStreamBody .= drupal_get_form('add_stream_form', $object_pid);
} }
@ -632,7 +634,7 @@ class ObjectHelper {
* this now returns an array of pids as in Fedora 3 we can have more then one Cmodel for an object * this now returns an array of pids as in Fedora 3 we can have more then one Cmodel for an object
* @param type $pid * @param type $pid
* @param type $include_fedora_system_content_models * @param type $include_fedora_system_content_models
* @return array * @return array
*/ */
function get_content_models_list($pid, $include_fedora_system_content_models = FALSE) { function get_content_models_list($pid, $include_fedora_system_content_models = FALSE) {
module_load_include('inc', 'fedora_repository', 'CollectionClass'); module_load_include('inc', 'fedora_repository', 'CollectionClass');
@ -679,7 +681,7 @@ class ObjectHelper {
* @param $pid string * @param $pid string
* A string containing a Fedora PID to find the parents for. * A string containing a Fedora PID to find the parents for.
* @return string * @return string
* A string containing an iTQL query, selecting something into $object and $title * A string containing an iTQL query, selecting something into $object and $title
*/ */
static function parentQuery($pid) { static function parentQuery($pid) {
return 'select $object $title from <#ri> return 'select $object $title from <#ri>
@ -688,7 +690,7 @@ class ObjectHelper {
and $object <fedora-model:state> <info:fedora/fedora-system:def/model#Active>) and $object <fedora-model:state> <info:fedora/fedora-system:def/model#Active>)
order by $title'; order by $title';
} }
/** /**
* Gets the parent objects that this object is related to * Gets the parent objects that this object is related to
* *
@ -709,7 +711,7 @@ class ObjectHelper {
* get_parent_objects_asHTML ?? * get_parent_objects_asHTML ??
* @global type $base_url * @global type $base_url
* @param type $pid * @param type $pid
* @return string * @return string
*/ */
function get_parent_objects_asHTML($pid) { function get_parent_objects_asHTML($pid) {
module_load_include('inc', 'fedora_repository', 'CollectionClass'); module_load_include('inc', 'fedora_repository', 'CollectionClass');
@ -723,10 +725,10 @@ class ObjectHelper {
$parent = array( $parent = array(
'data' => l($collection_title, $path), 'data' => l($collection_title, $path),
); );
$parent_collections[] = $parent; $parent_collections[] = $parent;
} }
if (!empty($parent_collections)) { if (!empty($parent_collections)) {
return theme('item_list', $parent_collections, t('Belongs to these collections'), 'ul'); return theme('item_list', $parent_collections, t('Belongs to these collections'), 'ul');
} }
@ -739,7 +741,7 @@ class ObjectHelper {
* @param type $pid * @param type $pid
* @param type $contentModel * @param type $contentModel
* @param type $page_number * @param type $page_number
* @return type * @return type
*/ */
function createExtraFieldsets($pid, $contentModel, $page_number) { function createExtraFieldsets($pid, $contentModel, $page_number) {
//$models = $collectionHelper->getContentModels($collectionPid, FALSE); //$models = $collectionHelper->getContentModels($collectionPid, FALSE);
@ -783,7 +785,7 @@ class ObjectHelper {
* XXX: Is this still required, without basket being in? * XXX: Is this still required, without basket being in?
* *
* @param type $pid * @param type $pid
* @return type * @return type
*/ */
function get_all_related_pids($pid) { function get_all_related_pids($pid) {
if (!$pid) { if (!$pid) {
@ -791,14 +793,14 @@ class ObjectHelper {
} }
module_load_include('inc', 'fedora_repository', 'api/fedora_utils'); module_load_include('inc', 'fedora_repository', 'api/fedora_utils');
// Get title and descriptions for $pid // Get title and descriptions for $pid
$query_string = 'select $title $description from <#ri> $query_string = 'select $title $description from <#ri>
where $o <fedora-model:label> $title where $o <fedora-model:label> $title
and $o <dc:description> $desc and $o <dc:description> $desc
and $o <mulgara:is> <info:fedora/' . $pid . '>'; and $o <mulgara:is> <info:fedora/' . $pid . '>';
$results = self::performItqlQuery($query_string); $results = self::performItqlQuery($query_string);
$pids = array(); $pids = array();
//There should only be one... Anyway. //There should only be one... Anyway.
foreach($results as $result) { foreach($results as $result) {
@ -814,7 +816,7 @@ class ObjectHelper {
* Get children of PID - but only 2 levels deep * Get children of PID - but only 2 levels deep
* *
* @param type $pids * @param type $pids
* @return type * @return type
*/ */
function get_child_pids($pids) { function get_child_pids($pids) {
//Build the parts which are used to filter to the list of input. //Build the parts which are used to filter to the list of input.
@ -827,7 +829,7 @@ class ObjectHelper {
'where $s <info:fedora/fedora-system:def/relations-external#hasMember> $o ' . 'where $s <info:fedora/fedora-system:def/relations-external#hasMember> $o ' .
'and $o <fedora-model:label> $title ' . 'and $o <fedora-model:label> $title ' .
'and ( ' . implode(' or ', $query_chunks) . ' )'; 'and ( ' . implode(' or ', $query_chunks) . ' )';
$results = self::performItqlQuery($query_string); $results = self::performItqlQuery($query_string);
$child_pids = array(); $child_pids = array();
@ -850,7 +852,7 @@ class ObjectHelper {
* @param type $pid * @param type $pid
* @param type $context * @param type $context
* @param type $format * @param type $format
* @return type * @return type
*/ */
function getObject($pid, $context = 'archive', $format = FOXML_11) { function getObject($pid, $context = 'archive', $format = FOXML_11) {
module_load_include('inc', 'fedora_repository', 'api/fedora_utils'); module_load_include('inc', 'fedora_repository', 'api/fedora_utils');
@ -861,14 +863,14 @@ class ObjectHelper {
} }
/** /**
* Builds an array of drupal links for use in breadcrumbs. * Builds an array of drupal links for use in breadcrumbs.
* *
* @todo Make fully recursive... * @todo Make fully recursive...
* *
* @global type $base_url * @global type $base_url
* @param type $pid * @param type $pid
* @param type $breadcrumbs * @param type $breadcrumbs
* @param type $level * @param type $level
*/ */
function getBreadcrumbs($pid, &$breadcrumbs) { function getBreadcrumbs($pid, &$breadcrumbs) {
module_load_include('inc', 'fedora_repository', 'api/fedora_utils'); module_load_include('inc', 'fedora_repository', 'api/fedora_utils');
@ -876,13 +878,13 @@ class ObjectHelper {
global $base_url; global $base_url;
static $max_level = 10; static $max_level = 10;
static $level = -1; static $level = -1;
if (count($breadcrumbs) === 0) { if (count($breadcrumbs) === 0) {
$level = $max_level; $level = $max_level;
} }
$root = variable_get('fedora_repository_pid', 'islandora:root'); $root = variable_get('fedora_repository_pid', 'islandora:root');
if ($pid == $root) { if ($pid == $root) {
$breadcrumbs[] = l(menu_get_active_title(), 'fedora/repository'); $breadcrumbs[] = l(menu_get_active_title(), 'fedora/repository');
$breadcrumbs[] = l(t('Home'), '<front>'); $breadcrumbs[] = l(t('Home'), '<front>');
@ -912,7 +914,7 @@ EOQ;
$results = self::performSparqlQuery($sparql_query_string); $results = self::performSparqlQuery($sparql_query_string);
$next_pid = NULL; $next_pid = NULL;
if (count($results) > 0 && $level > 0) { if (count($results) > 0 && $level > 0) {
$parent_pid = $results[0]['parentObject']; $parent_pid = $results[0]['parentObject'];
$parent_title = $results[0]['title']; $parent_title = $results[0]['title'];
@ -920,11 +922,11 @@ EOQ;
if (empty($this_title)) { if (empty($this_title)) {
$this_title = t('Unlabeled Object'); $this_title = t('Unlabeled Object');
} }
if ($parent_pid != $root) { if ($parent_pid != $root) {
$breadcrumbs[] = l($parent_title, "fedora/repository/$parent_pid"); $breadcrumbs[] = l($parent_title, "fedora/repository/$parent_pid");
} }
$next_pid = $parent_pid; $next_pid = $parent_pid;
} }
else { else {
@ -932,7 +934,7 @@ EOQ;
$breadcrumbs[] = '...'; //Add an non-link, as we don't know how to get back to the root. $breadcrumbs[] = '...'; //Add an non-link, as we don't know how to get back to the root.
$next_pid = $root; //And cue the last two links to render and break recursion (on the next pass). $next_pid = $root; //And cue the last two links to render and break recursion (on the next pass).
} }
if ($next_pid !== NULL) { if ($next_pid !== NULL) {
$level--; $level--;
$this->getBreadcrumbs($next_pid, $breadcrumbs); $this->getBreadcrumbs($next_pid, $breadcrumbs);
@ -942,7 +944,7 @@ EOQ;
/** /**
* warnIfMisconfigured ?? * warnIfMisconfigured ??
* @param type $app * @param type $app
*/ */
public static function warnIfMisconfigured($app) { public static function warnIfMisconfigured($app) {
$messMap = array( $messMap = array(
@ -972,16 +974,16 @@ EOQ;
public static function parseSparqlResults($sparql) { public static function parseSparqlResults($sparql) {
//Load the results into a SimpleXMLElement //Load the results into a SimpleXMLElement
$doc = new SimpleXMLElement($sparql, 0, FALSE, 'http://www.w3.org/2001/sw/DataAccess/rf1/result'); $doc = new SimpleXMLElement($sparql, 0, FALSE, 'http://www.w3.org/2001/sw/DataAccess/rf1/result');
$results = array(); //Storage. $results = array(); //Storage.
//Build the results. //Build the results.
foreach ($doc->results->children() as $result) { foreach ($doc->results->children() as $result) {
//Built a single result. //Built a single result.
$r = array(); $r = array();
foreach ($result->children() as $element) { foreach ($result->children() as $element) {
$val = NULL; $val = NULL;
$attrs = $element->attributes(); $attrs = $element->attributes();
if (!empty($attrs['uri'])) { if (!empty($attrs['uri'])) {
$val = self::pidUriToBarePid((string)$attrs['uri']); $val = self::pidUriToBarePid((string)$attrs['uri']);
@ -1001,17 +1003,17 @@ EOQ;
else { else {
$val = (string)$element; $val = (string)$element;
} }
//Map the name to the value in the array. //Map the name to the value in the array.
$r[$element->getName()] = $val; $r[$element->getName()] = $val;
} }
//Add the single result to the set to return. //Add the single result to the set to return.
$results[] = $r; $results[] = $r;
} }
return $results; return $results;
} }
/** /**
* Performs the given Resource Index query and return the results. * Performs the given Resource Index query and return the results.
* *
@ -1024,7 +1026,7 @@ EOQ;
* @param $offset int * @param $offset int
* An integer, used to offset the results (results should be ordered, to * An integer, used to offset the results (results should be ordered, to
* maintain consistency. * maintain consistency.
* *
* @return array * @return array
* Indexed (numerical) array, containing a number of associative arrays, * Indexed (numerical) array, containing a number of associative arrays,
* with keys being the same as the variable names in the query. * with keys being the same as the variable names in the query.
@ -1048,20 +1050,20 @@ EOQ;
if ($offset > 0) { if ($offset > 0) {
$options['offset'] = $offset; $options['offset'] = $offset;
} }
//Construct the query URL. //Construct the query URL.
$queryUrl = url(variable_get('fedora_repository_url', 'http://localhost:8080/fedora/risearch'), array('query' => $options)); $queryUrl = url(variable_get('fedora_repository_url', 'http://localhost:8080/fedora/risearch'), array('query' => $options));
//Perform the query. //Perform the query.
module_load_include('inc', 'fedora_repository', 'api/fedora_utils'); module_load_include('inc', 'fedora_repository', 'api/fedora_utils');
$curl_result = do_curl_ext($queryUrl); $curl_result = do_curl_ext($queryUrl);
//If the query failed, write message to the logs and return. //If the query failed, write message to the logs and return.
if (!$curl_result[0]) { if (!$curl_result[0]) {
watchdog('fedora_repository', 'Failed to perform %type resource index query: %query', array('%type' => $type, '%query' => $query), WATCHDOG_ERROR); watchdog('fedora_repository', 'Failed to perform %type resource index query: %query', array('%type' => $type, '%query' => $query), WATCHDOG_ERROR);
return FALSE; return FALSE;
} }
//Pass the query's results off to a decent parser. //Pass the query's results off to a decent parser.
return self::parseSparqlResults($curl_result[0]); return self::parseSparqlResults($curl_result[0]);
} }

13
fedora_repository.module
Unescape View File

@ -962,7 +962,7 @@ function makeObject($pid, $dsID) {
return ' '; return ' ';
} }
global $user, $conf; global $user, $conf;
if (!fedora_repository_check_perm(OBJECTHELPER :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) { if (!fedora_repository_check_perm(OBJECTHELPER :: $OBJECT_HELPER_VIEW_FEDORA, $pid, $user, TRUE, $dsID)) {
drupal_access_denied(); drupal_access_denied();
return; return;
drupal_set_message(t("You do not have access to Fedora objects within the attempted namespace."), 'error'); drupal_set_message(t("You do not have access to Fedora objects within the attempted namespace."), 'error');
@ -1077,7 +1077,8 @@ function fedora_repository_get_items($pid = NULL, $dsId = NULL, $collection = NU
module_load_include('inc', 'fedora_repository', 'ObjectHelper'); module_load_include('inc', 'fedora_repository', 'ObjectHelper');
module_load_include('inc', 'fedora_repository', 'api/fedora_utils'); module_load_include('inc', 'fedora_repository', 'api/fedora_utils');
module_load_include('inc', 'fedora_repository', 'api/fedora_item'); module_load_include('inc', 'fedora_repository', 'api/fedora_item');
global $user; global $user, $conf;;
$conf['cache'] = CACHE_DISABLED;
if (!fedora_available()) { if (!fedora_available()) {
drupal_set_message(t('The Fedora repository server is currently unavailable. Please contact the site administrator.'), 'warning', FALSE); drupal_set_message(t('The Fedora repository server is currently unavailable. Please contact the site administrator.'), 'warning', FALSE);
@ -1108,7 +1109,7 @@ function fedora_repository_get_items($pid = NULL, $dsId = NULL, $collection = NU
drupal_set_message(t("Invalid dsID!"), 'error'); drupal_set_message(t("Invalid dsID!"), 'error');
return ' '; return ' ';
} }
if (!fedora_repository_check_perm(OBJECTHELPER::$OBJECT_HELPER_VIEW_FEDORA, $pid, $user)) { if (!fedora_repository_check_perm(OBJECTHELPER::$OBJECT_HELPER_VIEW_FEDORA, $pid, $user, TRUE, $dsId)) {
if (user_access('access administration pages')) { if (user_access('access administration pages')) {
drupal_set_message(t("PIDs may be added to allowed namespaces, or all namespace restrictions removed !here", array('!here' => l('here', 'admin/settings/fedora_repository'))), 'warning'); drupal_set_message(t("PIDs may be added to allowed namespaces, or all namespace restrictions removed !here", array('!here' => l('here', 'admin/settings/fedora_repository'))), 'warning');
} }
@ -1702,7 +1703,7 @@ function fedora_repository_access() {
* A boolean indicating if the operation should be permitted (TRUE) or denied * A boolean indicating if the operation should be permitted (TRUE) or denied
* (FALSE). * (FALSE).
*/ */
function fedora_repository_check_perm($op, $pid = NULL, $as_user = NULL, $reset_cache = FALSE) { function fedora_repository_check_perm($op, $pid = NULL, $as_user = NULL, $reset_cache = FALSE, $dsid = NULL) {
static $cache = array(); static $cache = array();
if ($reset_cache) { if ($reset_cache) {
@ -1719,7 +1720,7 @@ function fedora_repository_check_perm($op, $pid = NULL, $as_user = NULL, $reset_
// Populate the cache on a miss. // Populate the cache on a miss.
if (!isset($cache[$op][$pid][$as_user->uid])) { if (!isset($cache[$op][$pid][$as_user->uid])) {
$results = module_invoke_all('fedora_repository_check_perm', $op, $pid, $as_user); $results = module_invoke_all('fedora_repository_check_perm', $op, $pid, $as_user, $dsid);
// Nothing returned FALSE, and something returned TRUE. // Nothing returned FALSE, and something returned TRUE.
$cache[$op][$pid][$as_user->uid] = (!in_array(FALSE, $results, TRUE) && in_array(TRUE, $results, TRUE)); $cache[$op][$pid][$as_user->uid] = (!in_array(FALSE, $results, TRUE) && in_array(TRUE, $results, TRUE));
} }
@ -1846,4 +1847,4 @@ function islandora_guarantee_root_collection($pid) {
} }
$item = Fedora_item::ingest_new_item($pid, 'A', 'Islandora Root Collection', 'admin'); $item = Fedora_item::ingest_new_item($pid, 'A', 'Islandora Root Collection', 'admin');
$item->add_relationship('hasModel', 'islandora:collectionCModel', FEDORA_MODEL_URI); $item->add_relationship('hasModel', 'islandora:collectionCModel', FEDORA_MODEL_URI);
} }

Write Preview
Loading…
Cancel
Save