connectivity/source/drivers/hsqldb/HUser.cxx

   1 /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
   2 /*
   3  * This file is part of the LibreOffice project.
   4  *
   5  * This Source Code Form is subject to the terms of the Mozilla Public
   6  * License, v. 2.0. If a copy of the MPL was not distributed with this
   7  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
   8  *
   9  * This file incorporates work covered by the following license notice:
  10  *
  11  *   Licensed to the Apache Software Foundation (ASF) under one or more
  12  *   contributor license agreements. See the NOTICE file distributed
  13  *   with this work for additional information regarding copyright
  14  *   ownership. The ASF licenses this file to you under the Apache
  15  *   License, Version 2.0 (the "License"); you may not use this file
  16  *   except in compliance with the License. You may obtain a copy of
  17  *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
  18  */
  19
  20 #include "hsqldb/HUser.hxx"
  21 #include <com/sun/star/sdbc/XRow.hpp>
  22 #include <com/sun/star/sdbc/XResultSet.hpp>
  23 #include <connectivity/dbtools.hxx>
  24 #include <connectivity/dbexception.hxx>
  25 #include <com/sun/star/sdbcx/Privilege.hpp>
  26 #include <com/sun/star/sdbcx/PrivilegeObject.hpp>
  27 #include "TConnection.hxx"
  28 #include "resource/hsqldb_res.hrc"
  29
  30 using namespace connectivity;
  31 using namespace connectivity::hsqldb;
  32 using namespace ::com::sun::star::uno;
  33 using namespace ::com::sun::star::beans;
  34 using namespace ::com::sun::star::sdbcx;
  35 using namespace ::com::sun::star::sdbc;
  36 using namespace ::com::sun::star::container;
  37 using namespace ::com::sun::star::lang;
  38
  39 OHSQLUser::OHSQLUser(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : connectivity::sdbcx::OUser(true)
  40                 ,m_xConnection(_xConnection)
  41 {
  42     construct();
  43 }
  44
  45 OHSQLUser::OHSQLUser(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection,
  46                 const OUString& Name
  47             ) : connectivity::sdbcx::OUser(Name,true)
  48                 ,m_xConnection(_xConnection)
  49 {
  50     construct();
  51 }
  52
  53 void OHSQLUser::refreshGroups()
  54 {
  55 }
  56
  57 OUserExtend::OUserExtend(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : OHSQLUser(_xConnection)
  58 {
  59     construct();
  60 }
  61
  62 void OUserExtend::construct()
  63 {
  64     registerProperty(OMetaConnection::getPropMap().getNameByIndex(PROPERTY_ID_PASSWORD),    PROPERTY_ID_PASSWORD,0,&m_Password,::cppu::UnoType<OUString>::get());
  65 }
  66
  67 cppu::IPropertyArrayHelper* OUserExtend::createArrayHelper() const
  68 {
  69     Sequence< Property > aProps;
  70     describeProperties(aProps);
  71     return new cppu::OPropertyArrayHelper(aProps);
  72 }
  73
  74 cppu::IPropertyArrayHelper & OUserExtend::getInfoHelper()
  75 {
  76     return *OUserExtend_PROP::getArrayHelper();
  77 }
  78 typedef connectivity::sdbcx::OUser_BASE OUser_BASE_RBHELPER;
  79
  80 sal_Int32 SAL_CALL OHSQLUser::getPrivileges( const OUString& objName, sal_Int32 objType ) throw(SQLException, RuntimeException, std::exception)
  81 {
  82     ::osl::MutexGuard aGuard(m_aMutex);
  83     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
  84
  85     sal_Int32 nRights,nRightsWithGrant;
  86     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
  87     return nRights;
  88 }
  89
  90 void OHSQLUser::findPrivilegesAndGrantPrivileges(const OUString& objName, sal_Int32 objType,sal_Int32& nRights,sal_Int32& nRightsWithGrant) throw(SQLException, RuntimeException)
  91 {
  92     nRightsWithGrant = nRights = 0;
  93     // first we need to create the sql stmt to select the privs
  94     Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
  95     OUString sCatalog,sSchema,sTable;
  96     ::dbtools::qualifiedNameComponents(xMeta,objName,sCatalog,sSchema,sTable,::dbtools::EComposeRule::InDataManipulation);
  97     Reference<XResultSet> xRes;
  98     switch(objType)
  99     {
 100         case PrivilegeObject::TABLE:
 101         case PrivilegeObject::VIEW:
 102             {
 103                 Any aCatalog;
 104                 if ( !sCatalog.isEmpty() )
 105                     aCatalog <<= sCatalog;
 106                 xRes = xMeta->getTablePrivileges(aCatalog,sSchema,sTable);
 107             }
 108             break;
 109
 110         case PrivilegeObject::COLUMN:
 111             {
 112                 Any aCatalog;
 113                 if ( !sCatalog.isEmpty() )
 114                     aCatalog <<= sCatalog;
 115                 xRes = xMeta->getColumnPrivileges(aCatalog,sSchema,sTable,"%");
 116             }
 117             break;
 118     }
 119
 120     if ( xRes.is() )
 121     {
 122         static const char sYes      [] = "YES";
 123
 124         nRightsWithGrant = nRights = 0;
 125
 126         Reference<XRow> xCurrentRow(xRes,UNO_QUERY);
 127         while( xCurrentRow.is() && xRes->next() )
 128         {
 129             OUString sGrantee    = xCurrentRow->getString(5);
 130             OUString sPrivilege  = xCurrentRow->getString(6);
 131             OUString sGrantable  = xCurrentRow->getString(7);
 132
 133             if (!m_Name.equalsIgnoreAsciiCase(sGrantee))
 134                 continue;
 135
 136             if (sPrivilege.equalsIgnoreAsciiCase("SELECT"))
 137             {
 138                 nRights |= Privilege::SELECT;
 139                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 140                     nRightsWithGrant |= Privilege::SELECT;
 141             }
 142             else if (sPrivilege.equalsIgnoreAsciiCase("INSERT"))
 143             {
 144                 nRights |= Privilege::INSERT;
 145                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 146                     nRightsWithGrant |= Privilege::INSERT;
 147             }
 148             else if (sPrivilege.equalsIgnoreAsciiCase("UPDATE"))
 149             {
 150                 nRights |= Privilege::UPDATE;
 151                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 152                     nRightsWithGrant |= Privilege::UPDATE;
 153             }
 154             else if (sPrivilege.equalsIgnoreAsciiCase("DELETE"))
 155             {
 156                 nRights |= Privilege::DELETE;
 157                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 158                     nRightsWithGrant |= Privilege::DELETE;
 159             }
 160             else if (sPrivilege.equalsIgnoreAsciiCase("READ"))
 161             {
 162                 nRights |= Privilege::READ;
 163                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 164                     nRightsWithGrant |= Privilege::READ;
 165             }
 166             else if (sPrivilege.equalsIgnoreAsciiCase("CREATE"))
 167             {
 168                 nRights |= Privilege::CREATE;
 169                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 170                     nRightsWithGrant |= Privilege::CREATE;
 171             }
 172             else if (sPrivilege.equalsIgnoreAsciiCase("ALTER"))
 173             {
 174                 nRights |= Privilege::ALTER;
 175                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 176                     nRightsWithGrant |= Privilege::ALTER;
 177             }
 178             else if (sPrivilege.equalsIgnoreAsciiCase("REFERENCE"))
 179             {
 180                 nRights |= Privilege::REFERENCE;
 181                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 182                     nRightsWithGrant |= Privilege::REFERENCE;
 183             }
 184             else if (sPrivilege.equalsIgnoreAsciiCase("DROP"))
 185             {
 186                 nRights |= Privilege::DROP;
 187                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 188                     nRightsWithGrant |= Privilege::DROP;
 189             }
 190         }
 191         ::comphelper::disposeComponent(xRes);
 192     }
 193 }
 194
 195 sal_Int32 SAL_CALL OHSQLUser::getGrantablePrivileges( const OUString& objName, sal_Int32 objType ) throw(SQLException, RuntimeException, std::exception)
 196 {
 197     ::osl::MutexGuard aGuard(m_aMutex);
 198     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 199
 200     sal_Int32 nRights,nRightsWithGrant;
 201     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
 202     return nRightsWithGrant;
 203 }
 204
 205 void SAL_CALL OHSQLUser::grantPrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges ) throw(SQLException, RuntimeException, std::exception)
 206 {
 207     if ( objType != PrivilegeObject::TABLE )
 208     {
 209         ::connectivity::SharedResources aResources;
 210         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_GRANTED));
 211         ::dbtools::throwGenericSQLException(sError,*this);
 212     } // if ( objType != PrivilegeObject::TABLE )
 213
 214
 215     ::osl::MutexGuard aGuard(m_aMutex);
 216
 217     OUString sPrivs = getPrivilegeString(objPrivileges);
 218     if(!sPrivs.isEmpty())
 219     {
 220         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 221         OUString sGrant = "GRANT " +  sPrivs +
 222             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 223             " TO " + ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), m_Name);
 224
 225         Reference<XStatement> xStmt = m_xConnection->createStatement();
 226         if(xStmt.is())
 227             xStmt->execute(sGrant);
 228         ::comphelper::disposeComponent(xStmt);
 229     }
 230 }
 231
 232 void SAL_CALL OHSQLUser::revokePrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges ) throw(SQLException, RuntimeException, std::exception)
 233 {
 234     if ( objType != PrivilegeObject::TABLE )
 235     {
 236         ::connectivity::SharedResources aResources;
 237         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_REVOKED));
 238         ::dbtools::throwGenericSQLException(sError,*this);
 239     } // if ( objType != PrivilegeObject::TABLE )
 240
 241     ::osl::MutexGuard aGuard(m_aMutex);
 242     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 243     OUString sPrivs = getPrivilegeString(objPrivileges);
 244     if(!sPrivs.isEmpty())
 245     {
 246         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 247         OUString sGrant = "REVOKE " + sPrivs +
 248             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 249             " FROM " + ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), m_Name);
 250
 251         Reference<XStatement> xStmt = m_xConnection->createStatement();
 252         if(xStmt.is())
 253             xStmt->execute(sGrant);
 254         ::comphelper::disposeComponent(xStmt);
 255     }
 256 }
 257
 258 // XUser
 259 void SAL_CALL OHSQLUser::changePassword( const OUString& /*oldPassword*/, const OUString& newPassword ) throw(SQLException, RuntimeException, std::exception)
 260 {
 261     ::osl::MutexGuard aGuard(m_aMutex);
 262     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 263
 264     Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 265
 266     if( m_Name != xMeta->getUserName() )
 267     {
 268         ::dbtools::throwGenericSQLException("HSQLDB can only change password of the current user.", *this);
 269     }
 270
 271     OUString sAlterPwd = "SET PASSWORD " +
 272         ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), newPassword);
 273
 274     Reference<XStatement> xStmt = m_xConnection->createStatement();
 275     if ( xStmt.is() )
 276     {
 277         xStmt->execute(sAlterPwd);
 278         ::comphelper::disposeComponent(xStmt);
 279     }
 280 }
 281
 282 OUString OHSQLUser::getPrivilegeString(sal_Int32 nRights)
 283 {
 284     OUString sPrivs;
 285     if((nRights & Privilege::INSERT) == Privilege::INSERT)
 286         sPrivs += "INSERT";
 287
 288     if((nRights & Privilege::DELETE) == Privilege::DELETE)
 289     {
 290         if(!sPrivs.isEmpty())
 291             sPrivs += ",";
 292         sPrivs += "DELETE";
 293     }
 294
 295     if((nRights & Privilege::UPDATE) == Privilege::UPDATE)
 296     {
 297         if(!sPrivs.isEmpty())
 298             sPrivs += ",";
 299         sPrivs += "UPDATE";
 300     }
 301
 302     if((nRights & Privilege::ALTER) == Privilege::ALTER)
 303     {
 304         if(!sPrivs.isEmpty())
 305             sPrivs += ",";
 306         sPrivs += "ALTER";
 307     }
 308
 309     if((nRights & Privilege::SELECT) == Privilege::SELECT)
 310     {
 311         if(!sPrivs.isEmpty())
 312             sPrivs += ",";
 313         sPrivs += "SELECT";
 314     }
 315
 316     if((nRights & Privilege::REFERENCE) == Privilege::REFERENCE)
 317     {
 318         if(!sPrivs.isEmpty())
 319             sPrivs += ",";
 320         sPrivs += "REFERENCES";
 321     }
 322
 323     return sPrivs;
 324 }
 325
 326
 327 /* vim:set shiftwidth=4 softtabstop=4 expandtab: */