[Home] [Help]
842: raise_application_error(-20503,'User not found');
843: end;
844: begin
845: -- could remove acl checking since it has been done when looking up the object id (ccchow)
846: select nvl(max(privilege),0) into v_priv from bism_permissions where object_id = p_oid and subject_id in (select group_id from bism_groups where user_id = v_subid);
847: exception
848: when no_data_found then
849: v_priv := 0;
850: end;
989: priv := 0;
990: select max(privilege) into priv from bism_permissions where
991: object_id = topfolderid and subject_id in
992: (
993: select group_id from bism_groups where user_id = myid
994: );
995:
996: -- if privilege does not exist on the folder, priv will be set to null
997: -- but it wont raise data not found exception
1021: priv := 0;
1022: select max(privilege) into priv from bism_permissions where
1023: object_id = srcfid and subject_id in
1024: (
1025: select group_id from bism_groups where user_id = myid
1026: );
1027:
1028:
1029: if priv is null then
1049: priv:=0;
1050: select max(privilege) into priv from bism_permissions where
1051: object_id = tgtfid and subject_id in
1052: (
1053: select group_id from bism_groups where user_id = myid
1054: );
1055:
1056: -- if privilege does not exist on the folder, priv will be set to null
1057: -- but it wont raise data not found exception
1079: priv := 0;
1080: select max(privilege) into priv from bism_permissions where
1081: object_id = i.object_id and subject_id in
1082: (
1083: select group_id from bism_groups where user_id = myid
1084: );
1085:
1086: if priv is null then
1087: -- we know that the object exists because we got by doing a select above see for loop
1110: begin
1111: -- first test the object itself (added - ccchow)
1112: begin
1113: priv := 0;
1114: select max(privilege) into priv from bism_permissions where object_id = objid and subject_id in (select group_id from bism_groups where user_id = myid);
1115:
1116: if priv is null then
1117: begin
1118: select object_name into foldername from bism_objects where object_id = objid;
1131:
1132: -- now test the source folder
1133: begin
1134: priv := 0;
1135: select max(privilege) into priv from bism_permissions where object_id = srcfid and subject_id in (select group_id from bism_groups where user_id = myid);
1136:
1137: -- if privilege does not exist on the folder, priv will be set to null
1138: -- but it wont raise data not found exception
1139: -- this can happen for 2 reasons
1157:
1158: -- now test the target folder
1159: begin
1160: priv:=0;
1161: select max(privilege) into priv from bism_permissions where object_id = tgtfid and subject_id in (select group_id from bism_groups where user_id = myid);
1162:
1163: -- if privilege does not exist on the folder, priv will be set to null
1164: -- but it wont raise data not found exception
1165: if priv is null then
1207: priv := 0;
1208: select max(privilege) into priv from bism_permissions where
1209: object_id = i.object_id and subject_id in
1210: (
1211: select group_id from bism_groups where user_id = myid
1212: );
1213:
1214: if priv is null then
1215: -- we know that the object exists because we got by doing a select above see for loop
1228: priv:=0;
1229: select max(privilege) into priv from bism_permissions where
1230: object_id = tgtfid and subject_id in
1231: (
1232: select group_id from bism_groups where user_id = myid
1233: );
1234:
1235: -- if privilege does not exist on the folder, priv will be set to null
1236: -- but it wont raise data not found exception
1396:
1397: -- first check the privilege on the object (ccchow)
1398: begin
1399: priv := 0;
1400: select max(privilege) into priv from bism_permissions where object_id = toplevelobjid and subject_id in (select group_id from bism_groups where user_id = myid);
1401:
1402: if priv is null then
1403: raise_application_error(BISM_ERRORCODES.NO_PRIVILEGES,'User has no privileges on object');
1404: end if;
1411:
1412: -- now check privileges on source and target folders
1413: begin
1414: priv := 0;
1415: select max(privilege) into priv from bism_permissions where object_id = srcfid and subject_id in (select group_id from bism_groups where user_id = myid);
1416:
1417: -- if privilege does not exist on the folder, priv will be set to null
1418: -- but it wont raise data not found exception
1419: -- this can happen for 2 reasons
1439:
1440: -- now test the target folder
1441: begin
1442: priv:=0;
1443: select max(privilege) into priv from bism_permissions where object_id = tgtfid and subject_id in (select group_id from bism_groups where user_id = myid);
1444:
1445: -- if privilege does not exist on the folder, priv will be set to null
1446: -- but it wont raise data not found exception
1447: if priv is null then
1693: begin
1694:
1695:
1696: if startoid = stopoid then
1697: select max(privilege) into priv from bism_permissions where object_id = startoid and subject_id in (select group_id from bism_groups where user_id = myid);
1698: if priv is null then
1699: -- user has no access to this folder
1700: return 'n';
1701: else
1707: else
1708:
1709: for i in( select object_id from bism_objects start with object_id = startoid connect by prior folder_id = object_id and object_id <> stopoid ) loop
1710:
1711: select max(privilege) into priv from bism_permissions where object_id = i.object_id and subject_id in (select group_id from bism_groups where user_id = myid);
1712: if priv is null then
1713: -- user has no access to this folder
1714: return 'n';
1715: else
2077: end;
2078:
2079: /* make sure user has enough prvileges */
2080: begin
2081: select nvl(max(privilege),0) into priv from bism_permissions where object_id = '31' and subject_id in (select group_id from bism_groups where user_id = subid );
2082: exception
2083: when no_data_found then
2084: raise_application_error(BISM_ERRORCODES.NO_PRIVILEGES,'User has no privilege for root folder');
2085: end;
2578: if acllist.count = 0 then
2579: return null;
2580: end if;
2581:
2582: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
2583:
2584: if grantorpriv is null then
2585: begin
2586: -- see if object exists
2610: -- the caller so that the JdbcAdapter can cache the name to Id mapping
2611: newusers.extend();
2612: newusers(newusers.count) := bism_acl_obj(acllist(i).subjname,acllist(i).privilege, newguid);
2613: insert into bism_subjects (SUBJECT_ID, SUBJECT_NAME, SUBJECT_TYPE) values (newguid,acllist(i).subjname,'u');
2614: insert into bism_groups (USER_ID, GROUP_ID) values(newguid,newguid);
2615: acllist(i).subjid := newguid;
2616: end;
2617: end loop;
2618: end if;
2698: if (acllist is null) or (DBMS_LOB.getlength(acllist) = 0) then
2699: return;
2700: end if;
2701:
2702: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
2703:
2704: if grantorpriv is null then
2705: begin
2706: -- see if object exists
2731: when no_data_found then
2732: --generate a new id for the new user
2733: newguid := bism_utils.get_guid;
2734: insert into bism_subjects (SUBJECT_ID, SUBJECT_NAME, SUBJECT_TYPE) values (newguid,usrnm,usrtype);
2735: insert into bism_groups (USER_ID, GROUP_ID) values(newguid,newguid);
2736: sid := newguid;
2737: end;
2738: else
2739: -- same as in topfolder but there won't be an exception
2813: if acllist is null then
2814: return null;
2815: end if;
2816:
2817: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
2818:
2819: if grantorpriv is null then
2820: begin
2821: -- see if object exists
2918: if (acllist is null) or (DBMS_LOB.getlength(acllist) = 0) then
2919: return null;
2920: end if;
2921:
2922: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
2923:
2924: if grantorpriv is null then
2925: begin
2926: -- see if object exists
3017: dummy bism_acl_obj_t := bism_acl_obj_t();
3018: sid raw(16);
3019: begin
3020: -- make sure grantor has privilege and enough privilege
3021: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
3022:
3023: if grantorpriv is null then
3024: begin
3025: -- see if object exists
3049: -- the caller so that the JdbcAdapter can cache the name to Id mapping
3050: newusers.extend();
3051: newusers(newusers.count) := bism_acl_obj(acllist(i).subjname,acllist(i).privilege, newguid);
3052: insert into bism_subjects (SUBJECT_ID, SUBJECT_NAME, SUBJECT_TYPE) values (newguid,acllist(i).subjname,'u');
3053: insert into bism_groups (USER_ID, GROUP_ID) values(newguid,newguid);
3054: acllist(i).subjid := newguid;
3055: end;
3056: end loop;
3057: end if;
3135: return;
3136: end if;
3137:
3138: -- make sure grantor has privilege and enough privilege
3139: select max(privilege) into grantorpriv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
3140:
3141: if grantorpriv is null then
3142: begin
3143: -- see if object exists
3170: newguid := bism_utils.get_guid;
3171: -- dont throw exception, instead return the acl object of the new user to
3172: -- the caller so that the JdbcAdapter can cache the name to Id mapping
3173: insert into bism_subjects (SUBJECT_ID, SUBJECT_NAME, SUBJECT_TYPE) values (newguid,usrnm,usrtype);
3174: insert into bism_groups (USER_ID, GROUP_ID) values(newguid,newguid);
3175: sid := newguid;
3176: end;
3177: else
3178: -- same as in topfolder but there won't be an exception
3246: function get_privilege(oid raw, myid raw) return number
3247: is
3248: priv bism_permissions.privilege%type;
3249: begin
3250: select nvl(max(privilege),0) into priv from bism_permissions where object_id = oid and subject_id in (select group_id from bism_groups where user_id = myid);
3251: return priv;
3252: end get_privilege;
3253:
3254: function list_dependents(p_fid bism_objects.FOLDER_ID%type, p_objname varchar2, p_myid raw)