connectivity/source/drivers/mysql/YUser.cxx

   1 /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
   2 /*
   3  * This file is part of the LibreOffice project.
   4  *
   5  * This Source Code Form is subject to the terms of the Mozilla Public
   6  * License, v. 2.0. If a copy of the MPL was not distributed with this
   7  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
   8  *
   9  * This file incorporates work covered by the following license notice:
  10  *
  11  *   Licensed to the Apache Software Foundation (ASF) under one or more
  12  *   contributor license agreements. See the NOTICE file distributed
  13  *   with this work for additional information regarding copyright
  14  *   ownership. The ASF licenses this file to you under the Apache
  15  *   License, Version 2.0 (the "License"); you may not use this file
  16  *   except in compliance with the License. You may obtain a copy of
  17  *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
  18  */
  19
  20 #include "mysql/YUser.hxx"
  21 #include <com/sun/star/sdbc/XRow.hpp>
  22 #include <com/sun/star/sdbc/XResultSet.hpp>
  23 #include <connectivity/dbtools.hxx>
  24 #include <connectivity/dbexception.hxx>
  25 #include <com/sun/star/sdbcx/Privilege.hpp>
  26 #include <com/sun/star/sdbcx/PrivilegeObject.hpp>
  27 #include "TConnection.hxx"
  28 #include "resource/common_res.hrc"
  29
  30 using namespace connectivity;
  31 using namespace connectivity::mysql;
  32 using namespace ::com::sun::star::uno;
  33 using namespace ::com::sun::star::beans;
  34 using namespace ::com::sun::star::sdbcx;
  35 using namespace ::com::sun::star::sdbc;
  36 using namespace ::com::sun::star::container;
  37 using namespace ::com::sun::star::lang;
  38
  39 OMySQLUser::OMySQLUser( const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : connectivity::sdbcx::OUser(true)
  40                 ,m_xConnection(_xConnection)
  41 {
  42     construct();
  43 }
  44
  45 OMySQLUser::OMySQLUser(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection,
  46                 const OUString& Name
  47             ) : connectivity::sdbcx::OUser(Name,true)
  48                 ,m_xConnection(_xConnection)
  49 {
  50     construct();
  51 }
  52
  53 void OMySQLUser::refreshGroups()
  54 {
  55 }
  56
  57 OUserExtend::OUserExtend(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : OMySQLUser(_xConnection)
  58 {
  59     construct();
  60 }
  61
  62 void OUserExtend::construct()
  63 {
  64     registerProperty(OMetaConnection::getPropMap().getNameByIndex(PROPERTY_ID_PASSWORD),    PROPERTY_ID_PASSWORD,0,&m_Password,::cppu::UnoType<OUString>::get());
  65 }
  66
  67 cppu::IPropertyArrayHelper* OUserExtend::createArrayHelper() const
  68 {
  69     Sequence< Property > aProps;
  70     describeProperties(aProps);
  71     return new cppu::OPropertyArrayHelper(aProps);
  72 }
  73
  74 cppu::IPropertyArrayHelper & OUserExtend::getInfoHelper()
  75 {
  76     return *OUserExtend_PROP::getArrayHelper();
  77 }
  78 typedef connectivity::sdbcx::OUser_BASE OUser_BASE_RBHELPER;
  79
  80 sal_Int32 SAL_CALL OMySQLUser::getPrivileges( const OUString& objName, sal_Int32 objType ) throw(SQLException, RuntimeException, std::exception)
  81 {
  82     ::osl::MutexGuard aGuard(m_aMutex);
  83     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
  84
  85     sal_Int32 nRights,nRightsWithGrant;
  86     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
  87     return nRights;
  88 }
  89
  90 void OMySQLUser::findPrivilegesAndGrantPrivileges(const OUString& objName, sal_Int32 objType,sal_Int32& nRights,sal_Int32& nRightsWithGrant) throw(SQLException, RuntimeException)
  91 {
  92     nRightsWithGrant = nRights = 0;
  93     // first we need to create the sql stmt to select the privs
  94     Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
  95     OUString sCatalog,sSchema,sTable;
  96     ::dbtools::qualifiedNameComponents(xMeta,objName,sCatalog,sSchema,sTable,::dbtools::EComposeRule::InDataManipulation);
  97     Reference<XResultSet> xRes;
  98     switch(objType)
  99     {
 100         case PrivilegeObject::TABLE:
 101         case PrivilegeObject::VIEW:
 102             {
 103                 Any aCatalog;
 104                 if ( !sCatalog.isEmpty() )
 105                     aCatalog <<= sCatalog;
 106                 xRes = xMeta->getTablePrivileges(aCatalog,sSchema,sTable);
 107             }
 108             break;
 109
 110         case PrivilegeObject::COLUMN:
 111             {
 112                 Any aCatalog;
 113                 if ( !sCatalog.isEmpty() )
 114                     aCatalog <<= sCatalog;
 115                 xRes = xMeta->getColumnPrivileges(aCatalog,sSchema,sTable, "%");
 116             }
 117             break;
 118     }
 119
 120     if ( xRes.is() )
 121     {
 122         static const char sYes      [] = "YES";
 123
 124         nRightsWithGrant = nRights = 0;
 125
 126         Reference<XRow> xCurrentRow(xRes,UNO_QUERY);
 127         while( xCurrentRow.is() && xRes->next() )
 128         {
 129             OUString sGrantee    = xCurrentRow->getString(5);
 130             OUString sPrivilege  = xCurrentRow->getString(6);
 131             OUString sGrantable  = xCurrentRow->getString(7);
 132
 133             if (!m_Name.equalsIgnoreAsciiCase(sGrantee))
 134                 continue;
 135
 136             if (sPrivilege.equalsIgnoreAsciiCase("SELECT"))
 137             {
 138                 nRights |= Privilege::SELECT;
 139                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 140                     nRightsWithGrant |= Privilege::SELECT;
 141             }
 142             else if (sPrivilege.equalsIgnoreAsciiCase("INSERT"))
 143             {
 144                 nRights |= Privilege::INSERT;
 145                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 146                     nRightsWithGrant |= Privilege::INSERT;
 147             }
 148             else if (sPrivilege.equalsIgnoreAsciiCase("UPDATE"))
 149             {
 150                 nRights |= Privilege::UPDATE;
 151                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 152                     nRightsWithGrant |= Privilege::UPDATE;
 153             }
 154             else if (sPrivilege.equalsIgnoreAsciiCase("DELETE"))
 155             {
 156                 nRights |= Privilege::DELETE;
 157                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 158                     nRightsWithGrant |= Privilege::DELETE;
 159             }
 160             else if (sPrivilege.equalsIgnoreAsciiCase("READ"))
 161             {
 162                 nRights |= Privilege::READ;
 163                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 164                     nRightsWithGrant |= Privilege::READ;
 165             }
 166             else if (sPrivilege.equalsIgnoreAsciiCase("CREATE"))
 167             {
 168                 nRights |= Privilege::CREATE;
 169                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 170                     nRightsWithGrant |= Privilege::CREATE;
 171             }
 172             else if (sPrivilege.equalsIgnoreAsciiCase("ALTER"))
 173             {
 174                 nRights |= Privilege::ALTER;
 175                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 176                     nRightsWithGrant |= Privilege::ALTER;
 177             }
 178             else if (sPrivilege.equalsIgnoreAsciiCase("REFERENCES"))
 179             {
 180                 nRights |= Privilege::REFERENCE;
 181                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 182                     nRightsWithGrant |= Privilege::REFERENCE;
 183             }
 184             else if (sPrivilege.equalsIgnoreAsciiCase("DROP"))
 185             {
 186                 nRights |= Privilege::DROP;
 187                 if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 188                     nRightsWithGrant |= Privilege::DROP;
 189             }
 190         }
 191         ::comphelper::disposeComponent(xRes);
 192     }
 193 }
 194
 195 sal_Int32 SAL_CALL OMySQLUser::getGrantablePrivileges( const OUString& objName, sal_Int32 objType ) throw(SQLException, RuntimeException, std::exception)
 196 {
 197     ::osl::MutexGuard aGuard(m_aMutex);
 198     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 199
 200     sal_Int32 nRights,nRightsWithGrant;
 201     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
 202     return nRightsWithGrant;
 203 }
 204
 205 void SAL_CALL OMySQLUser::grantPrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges ) throw(SQLException, RuntimeException, std::exception)
 206 {
 207     if ( objType != PrivilegeObject::TABLE )
 208     {
 209         ::connectivity::SharedResources aResources;
 210         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_GRANTED));
 211         ::dbtools::throwGenericSQLException(sError,*this);
 212     } // if ( objType != PrivilegeObject::TABLE )
 213
 214     ::osl::MutexGuard aGuard(m_aMutex);
 215
 216     OUString sPrivs = getPrivilegeString(objPrivileges);
 217     if(!sPrivs.isEmpty())
 218     {
 219         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 220         OUString sGrant = "GRANT " + sPrivs +
 221             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 222             " TO " + m_Name;
 223
 224         Reference<XStatement> xStmt = m_xConnection->createStatement();
 225         if(xStmt.is())
 226             xStmt->execute(sGrant);
 227         ::comphelper::disposeComponent(xStmt);
 228     }
 229 }
 230
 231 void SAL_CALL OMySQLUser::revokePrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges ) throw(SQLException, RuntimeException, std::exception)
 232 {
 233     if ( objType != PrivilegeObject::TABLE )
 234     {
 235         ::connectivity::SharedResources aResources;
 236         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_REVOKED));
 237         ::dbtools::throwGenericSQLException(sError,*this);
 238     }
 239
 240     ::osl::MutexGuard aGuard(m_aMutex);
 241     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 242     OUString sPrivs = getPrivilegeString(objPrivileges);
 243     if(!sPrivs.isEmpty())
 244     {
 245         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 246         OUString sGrant = "REVOKE " + sPrivs +
 247             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 248             " FROM " + m_Name;
 249
 250         Reference<XStatement> xStmt = m_xConnection->createStatement();
 251         if(xStmt.is())
 252             xStmt->execute(sGrant);
 253         ::comphelper::disposeComponent(xStmt);
 254     }
 255 }
 256
 257 // XUser
 258 void SAL_CALL OMySQLUser::changePassword( const OUString& /*oldPassword*/, const OUString& newPassword ) throw(SQLException, RuntimeException, std::exception)
 259 {
 260     ::osl::MutexGuard aGuard(m_aMutex);
 261     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 262     OUString sAlterPwd = "SET PASSWORD FOR " +
 263         m_Name + "@\"%\" = PASSWORD('" +
 264         newPassword + "')";
 265
 266
 267     Reference<XStatement> xStmt = m_xConnection->createStatement();
 268     if ( xStmt.is() )
 269     {
 270         xStmt->execute(sAlterPwd);
 271         ::comphelper::disposeComponent(xStmt);
 272     }
 273 }
 274
 275 OUString OMySQLUser::getPrivilegeString(sal_Int32 nRights)
 276 {
 277     OUString sPrivs;
 278     if((nRights & Privilege::INSERT) == Privilege::INSERT)
 279         sPrivs += "INSERT";
 280
 281     if((nRights & Privilege::DELETE) == Privilege::DELETE)
 282     {
 283         if(!sPrivs.isEmpty())
 284             sPrivs += ",";
 285         sPrivs += "DELETE";
 286     }
 287
 288     if((nRights & Privilege::UPDATE) == Privilege::UPDATE)
 289     {
 290         if(!sPrivs.isEmpty())
 291             sPrivs += ",";
 292         sPrivs += "UPDATE";
 293     }
 294
 295     if((nRights & Privilege::ALTER) == Privilege::ALTER)
 296     {
 297         if(!sPrivs.isEmpty())
 298             sPrivs += ",";
 299         sPrivs += "ALTER";
 300     }
 301
 302     if((nRights & Privilege::SELECT) == Privilege::SELECT)
 303     {
 304         if(!sPrivs.isEmpty())
 305             sPrivs += ",";
 306         sPrivs += "SELECT";
 307     }
 308
 309     if((nRights & Privilege::REFERENCE) == Privilege::REFERENCE)
 310     {
 311         if(!sPrivs.isEmpty())
 312             sPrivs += ",";
 313         sPrivs += "REFERENCES";
 314     }
 315
 316     return sPrivs;
 317 }
 318
 319
 320 /* vim:set shiftwidth=4 softtabstop=4 expandtab: */