connectivity/source/drivers/hsqldb/HUser.cxx

   1 /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
   2 /*
   3  * This file is part of the LibreOffice project.
   4  *
   5  * This Source Code Form is subject to the terms of the Mozilla Public
   6  * License, v. 2.0. If a copy of the MPL was not distributed with this
   7  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
   8  *
   9  * This file incorporates work covered by the following license notice:
  10  *
  11  *   Licensed to the Apache Software Foundation (ASF) under one or more
  12  *   contributor license agreements. See the NOTICE file distributed
  13  *   with this work for additional information regarding copyright
  14  *   ownership. The ASF licenses this file to you under the Apache
  15  *   License, Version 2.0 (the "License"); you may not use this file
  16  *   except in compliance with the License. You may obtain a copy of
  17  *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
  18  */
  19
  20 #include <hsqldb/HUser.hxx>
  21 #include <com/sun/star/sdbc/XRow.hpp>
  22 #include <com/sun/star/sdbc/XResultSet.hpp>
  23 #include <connectivity/dbtools.hxx>
  24 #include <connectivity/dbexception.hxx>
  25 #include <comphelper/types.hxx>
  26 #include <com/sun/star/sdbcx/Privilege.hpp>
  27 #include <com/sun/star/sdbcx/PrivilegeObject.hpp>
  28 #include <TConnection.hxx>
  29 #include <strings.hrc>
  30
  31 using namespace connectivity;
  32 using namespace connectivity::hsqldb;
  33 using namespace ::com::sun::star::uno;
  34 using namespace ::com::sun::star::beans;
  35 using namespace ::com::sun::star::sdbcx;
  36 using namespace ::com::sun::star::sdbc;
  37 using namespace ::com::sun::star::container;
  38 using namespace ::com::sun::star::lang;
  39
  40 OHSQLUser::OHSQLUser(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : connectivity::sdbcx::OUser(true)
  41                 ,m_xConnection(_xConnection)
  42 {
  43     construct();
  44 }
  45
  46 OHSQLUser::OHSQLUser(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection,
  47                 const OUString& Name
  48             ) : connectivity::sdbcx::OUser(Name,true)
  49                 ,m_xConnection(_xConnection)
  50 {
  51     construct();
  52 }
  53
  54 void OHSQLUser::refreshGroups()
  55 {
  56 }
  57
  58 OUserExtend::OUserExtend(   const css::uno::Reference< css::sdbc::XConnection >& _xConnection) : OHSQLUser(_xConnection)
  59 {
  60     construct();
  61 }
  62
  63 void OUserExtend::construct()
  64 {
  65     registerProperty(OMetaConnection::getPropMap().getNameByIndex(PROPERTY_ID_PASSWORD),    PROPERTY_ID_PASSWORD,0,&m_Password,::cppu::UnoType<OUString>::get());
  66 }
  67
  68 cppu::IPropertyArrayHelper* OUserExtend::createArrayHelper() const
  69 {
  70     Sequence< Property > aProps;
  71     describeProperties(aProps);
  72     return new cppu::OPropertyArrayHelper(aProps);
  73 }
  74
  75 cppu::IPropertyArrayHelper & OUserExtend::getInfoHelper()
  76 {
  77     return *OUserExtend_PROP::getArrayHelper();
  78 }
  79 typedef connectivity::sdbcx::OUser_BASE OUser_BASE_RBHELPER;
  80
  81 sal_Int32 SAL_CALL OHSQLUser::getPrivileges( const OUString& objName, sal_Int32 objType )
  82 {
  83     ::osl::MutexGuard aGuard(m_aMutex);
  84     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
  85
  86     sal_Int32 nRights,nRightsWithGrant;
  87     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
  88     return nRights;
  89 }
  90
  91 void OHSQLUser::findPrivilegesAndGrantPrivileges(const OUString& objName, sal_Int32 objType,sal_Int32& nRights,sal_Int32& nRightsWithGrant)
  92 {
  93     nRightsWithGrant = nRights = 0;
  94     // first we need to create the sql stmt to select the privs
  95     Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
  96     OUString sCatalog,sSchema,sTable;
  97     ::dbtools::qualifiedNameComponents(xMeta,objName,sCatalog,sSchema,sTable,::dbtools::EComposeRule::InDataManipulation);
  98     Reference<XResultSet> xRes;
  99     switch(objType)
 100     {
 101         case PrivilegeObject::TABLE:
 102         case PrivilegeObject::VIEW:
 103             {
 104                 Any aCatalog;
 105                 if ( !sCatalog.isEmpty() )
 106                     aCatalog <<= sCatalog;
 107                 xRes = xMeta->getTablePrivileges(aCatalog,sSchema,sTable);
 108             }
 109             break;
 110
 111         case PrivilegeObject::COLUMN:
 112             {
 113                 Any aCatalog;
 114                 if ( !sCatalog.isEmpty() )
 115                     aCatalog <<= sCatalog;
 116                 xRes = xMeta->getColumnPrivileges(aCatalog,sSchema,sTable,"%");
 117             }
 118             break;
 119     }
 120
 121     if ( !xRes.is() )
 122         return;
 123
 124     static const char sYes      [] = "YES";
 125
 126     nRightsWithGrant = nRights = 0;
 127
 128     Reference<XRow> xCurrentRow(xRes,UNO_QUERY);
 129     while( xCurrentRow.is() && xRes->next() )
 130     {
 131         OUString sGrantee    = xCurrentRow->getString(5);
 132         OUString sPrivilege  = xCurrentRow->getString(6);
 133         OUString sGrantable  = xCurrentRow->getString(7);
 134
 135         if (!m_Name.equalsIgnoreAsciiCase(sGrantee))
 136             continue;
 137
 138         if (sPrivilege.equalsIgnoreAsciiCase("SELECT"))
 139         {
 140             nRights |= Privilege::SELECT;
 141             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 142                 nRightsWithGrant |= Privilege::SELECT;
 143         }
 144         else if (sPrivilege.equalsIgnoreAsciiCase("INSERT"))
 145         {
 146             nRights |= Privilege::INSERT;
 147             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 148                 nRightsWithGrant |= Privilege::INSERT;
 149         }
 150         else if (sPrivilege.equalsIgnoreAsciiCase("UPDATE"))
 151         {
 152             nRights |= Privilege::UPDATE;
 153             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 154                 nRightsWithGrant |= Privilege::UPDATE;
 155         }
 156         else if (sPrivilege.equalsIgnoreAsciiCase("DELETE"))
 157         {
 158             nRights |= Privilege::DELETE;
 159             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 160                 nRightsWithGrant |= Privilege::DELETE;
 161         }
 162         else if (sPrivilege.equalsIgnoreAsciiCase("READ"))
 163         {
 164             nRights |= Privilege::READ;
 165             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 166                 nRightsWithGrant |= Privilege::READ;
 167         }
 168         else if (sPrivilege.equalsIgnoreAsciiCase("CREATE"))
 169         {
 170             nRights |= Privilege::CREATE;
 171             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 172                 nRightsWithGrant |= Privilege::CREATE;
 173         }
 174         else if (sPrivilege.equalsIgnoreAsciiCase("ALTER"))
 175         {
 176             nRights |= Privilege::ALTER;
 177             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 178                 nRightsWithGrant |= Privilege::ALTER;
 179         }
 180         else if (sPrivilege.equalsIgnoreAsciiCase("REFERENCE"))
 181         {
 182             nRights |= Privilege::REFERENCE;
 183             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 184                 nRightsWithGrant |= Privilege::REFERENCE;
 185         }
 186         else if (sPrivilege.equalsIgnoreAsciiCase("DROP"))
 187         {
 188             nRights |= Privilege::DROP;
 189             if ( sGrantable.equalsIgnoreAsciiCase(sYes) )
 190                 nRightsWithGrant |= Privilege::DROP;
 191         }
 192     }
 193     ::comphelper::disposeComponent(xRes);
 194 }
 195
 196 sal_Int32 SAL_CALL OHSQLUser::getGrantablePrivileges( const OUString& objName, sal_Int32 objType )
 197 {
 198     ::osl::MutexGuard aGuard(m_aMutex);
 199     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 200
 201     sal_Int32 nRights,nRightsWithGrant;
 202     findPrivilegesAndGrantPrivileges(objName,objType,nRights,nRightsWithGrant);
 203     return nRightsWithGrant;
 204 }
 205
 206 void SAL_CALL OHSQLUser::grantPrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges )
 207 {
 208     if ( objType != PrivilegeObject::TABLE )
 209     {
 210         ::connectivity::SharedResources aResources;
 211         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_GRANTED));
 212         ::dbtools::throwGenericSQLException(sError,*this);
 213     } // if ( objType != PrivilegeObject::TABLE )
 214
 215
 216     ::osl::MutexGuard aGuard(m_aMutex);
 217
 218     OUString sPrivs = getPrivilegeString(objPrivileges);
 219     if(!sPrivs.isEmpty())
 220     {
 221         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 222         OUString sGrant = "GRANT " +  sPrivs +
 223             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 224             " TO " + ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), m_Name);
 225
 226         Reference<XStatement> xStmt = m_xConnection->createStatement();
 227         if(xStmt.is())
 228             xStmt->execute(sGrant);
 229         ::comphelper::disposeComponent(xStmt);
 230     }
 231 }
 232
 233 void SAL_CALL OHSQLUser::revokePrivileges( const OUString& objName, sal_Int32 objType, sal_Int32 objPrivileges )
 234 {
 235     if ( objType != PrivilegeObject::TABLE )
 236     {
 237         ::connectivity::SharedResources aResources;
 238         const OUString sError( aResources.getResourceString(STR_PRIVILEGE_NOT_REVOKED));
 239         ::dbtools::throwGenericSQLException(sError,*this);
 240     } // if ( objType != PrivilegeObject::TABLE )
 241
 242     ::osl::MutexGuard aGuard(m_aMutex);
 243     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 244     OUString sPrivs = getPrivilegeString(objPrivileges);
 245     if(!sPrivs.isEmpty())
 246     {
 247         Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 248         OUString sGrant = "REVOKE " + sPrivs +
 249             " ON " + ::dbtools::quoteTableName(xMeta,objName,::dbtools::EComposeRule::InDataManipulation) +
 250             " FROM " + ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), m_Name);
 251
 252         Reference<XStatement> xStmt = m_xConnection->createStatement();
 253         if(xStmt.is())
 254             xStmt->execute(sGrant);
 255         ::comphelper::disposeComponent(xStmt);
 256     }
 257 }
 258
 259 // XUser
 260 void SAL_CALL OHSQLUser::changePassword( const OUString& /*oldPassword*/, const OUString& newPassword )
 261 {
 262     ::osl::MutexGuard aGuard(m_aMutex);
 263     checkDisposed(OUser_BASE_RBHELPER::rBHelper.bDisposed);
 264
 265     Reference<XDatabaseMetaData> xMeta = m_xConnection->getMetaData();
 266
 267     if( m_Name != xMeta->getUserName() )
 268     {
 269         ::dbtools::throwGenericSQLException("HSQLDB can only change password of the current user.", *this);
 270     }
 271
 272     OUString sAlterPwd = "SET PASSWORD " +
 273         ::dbtools::quoteName(xMeta->getIdentifierQuoteString(), newPassword);
 274
 275     Reference<XStatement> xStmt = m_xConnection->createStatement();
 276     if ( xStmt.is() )
 277     {
 278         xStmt->execute(sAlterPwd);
 279         ::comphelper::disposeComponent(xStmt);
 280     }
 281 }
 282
 283 OUString OHSQLUser::getPrivilegeString(sal_Int32 nRights)
 284 {
 285     OUString sPrivs;
 286     if((nRights & Privilege::INSERT) == Privilege::INSERT)
 287         sPrivs += "INSERT";
 288
 289     if((nRights & Privilege::DELETE) == Privilege::DELETE)
 290     {
 291         if(!sPrivs.isEmpty())
 292             sPrivs += ",";
 293         sPrivs += "DELETE";
 294     }
 295
 296     if((nRights & Privilege::UPDATE) == Privilege::UPDATE)
 297     {
 298         if(!sPrivs.isEmpty())
 299             sPrivs += ",";
 300         sPrivs += "UPDATE";
 301     }
 302
 303     if((nRights & Privilege::ALTER) == Privilege::ALTER)
 304     {
 305         if(!sPrivs.isEmpty())
 306             sPrivs += ",";
 307         sPrivs += "ALTER";
 308     }
 309
 310     if((nRights & Privilege::SELECT) == Privilege::SELECT)
 311     {
 312         if(!sPrivs.isEmpty())
 313             sPrivs += ",";
 314         sPrivs += "SELECT";
 315     }
 316
 317     if((nRights & Privilege::REFERENCE) == Privilege::REFERENCE)
 318     {
 319         if(!sPrivs.isEmpty())
 320             sPrivs += ",";
 321         sPrivs += "REFERENCES";
 322     }
 323
 324     return sPrivs;
 325 }
 326
 327
 328 /* vim:set shiftwidth=4 softtabstop=4 expandtab: */