2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 1999-2005 The OpenLDAP Foundation.
5 * Portions Copyright 1999 Dmitry Kovalev.
6 * Portions Copyright 2002 Pierangelo Masarati.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted only as authorized by the OpenLDAP
13 * A copy of this license is available in the file LICENSE in the
14 * top-level directory of the distribution or, alternatively, at
15 * <http://www.OpenLDAP.org/license.html>.
18 * This work was initially developed by Dmitry Kovalev for inclusion
19 * by OpenLDAP Software. Additional significant contributors include
20 * Pierangelo Masarati.
26 #include <sys/types.h>
27 #include "ac/string.h"
30 #include "proto-sql.h"
32 typedef struct backsql_delete_attr_t {
36 backsql_entryID *e_id;
37 } backsql_delete_attr_t;
40 backsql_delete_attr_f( void *v_at, void *v_bda )
42 backsql_at_map_rec *at = (backsql_at_map_rec *)v_at;
43 backsql_delete_attr_t *bda = (backsql_delete_attr_t *)v_bda;
46 rc = backsql_modify_delete_all_values( bda->op,
47 bda->rs, bda->dbh, bda->e_id, at );
49 if ( rc != LDAP_SUCCESS ) {
50 return BACKSQL_AVL_STOP;
53 return BACKSQL_AVL_CONTINUE;
57 backsql_delete_all_attrs(
61 backsql_entryID *e_id,
62 backsql_oc_map_rec *oc )
64 backsql_delete_attr_t bda;
72 rc = avl_apply( oc->bom_attrs, backsql_delete_attr_f, &bda,
73 BACKSQL_AVL_STOP, AVL_INORDER );
74 if ( rc == BACKSQL_AVL_STOP ) {
82 backsql_delete( Operation *op, SlapReply *rs )
84 backsql_info *bi = (backsql_info*)op->o_bd->be_private;
85 SQLHDBC dbh = SQL_NULL_HDBC;
86 SQLHSTMT sth = SQL_NULL_HSTMT;
88 int prc = LDAP_SUCCESS;
89 backsql_oc_map_rec *oc = NULL;
90 backsql_srch_info bsi = { 0 };
91 backsql_entryID e_id = { 0 };
92 Entry d = { 0 }, p = { 0 }, *e = NULL;
93 struct berval pdn = BER_BVNULL;
94 int manageDSAit = get_manageDSAit( op );
95 /* first parameter no */
98 Debug( LDAP_DEBUG_TRACE, "==>backsql_delete(): deleting entry \"%s\"\n",
99 op->o_req_ndn.bv_val, 0, 0 );
101 rs->sr_err = backsql_get_db_conn( op, &dbh );
102 if ( rs->sr_err != LDAP_SUCCESS ) {
103 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
104 "could not get connection handle - exiting\n",
106 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
107 ? "SQL-backend error" : NULL;
116 rs->sr_err = backsql_init_search( &bsi, &op->o_req_ndn,
118 (time_t)(-1), NULL, dbh, op, rs, slap_anlist_no_attrs,
119 ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
120 switch ( rs->sr_err ) {
125 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
126 dn_match( &op->o_req_ndn, &bsi.bsi_e->e_nname ) )
128 rs->sr_err = LDAP_SUCCESS;
130 rs->sr_matched = NULL;
132 ber_bvarray_free( rs->sr_ref );
141 Debug( LDAP_DEBUG_TRACE, "backsql_delete(): "
142 "could not retrieve deleteDN ID - no such entry\n",
144 if ( !BER_BVISNULL( &d.e_nname ) ) {
145 /* FIXME: should always be true! */
154 if ( get_assert( op ) &&
155 ( test_filter( op, &d, get_assertion( op ) )
156 != LDAP_COMPARE_TRUE ) )
158 rs->sr_err = LDAP_ASSERTION_FAILED;
163 if ( !access_allowed( op, &d, slap_schema.si_ad_entry,
164 NULL, ACL_WDEL, NULL ) )
166 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
167 "no write access to entry\n",
169 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
174 rs->sr_err = backsql_has_children( op, dbh, &op->o_req_ndn );
175 switch ( rs->sr_err ) {
176 case LDAP_COMPARE_FALSE:
177 rs->sr_err = LDAP_SUCCESS;
180 case LDAP_COMPARE_TRUE:
181 if ( get_treeDelete( op ) ) {
182 /* not supported yet */ ;
184 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
185 "entry \"%s\" has children\n",
186 op->o_req_dn.bv_val, 0, 0 );
187 rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
188 rs->sr_text = "subordinate objects must be deleted first";
196 oc = backsql_id2oc( bi, bsi.bsi_base_id.eid_oc_id );
198 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
199 "cannot determine objectclass of entry -- aborting\n",
201 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
202 rs->sr_text = "operation not permitted within namingContext";
207 if ( oc->bom_delete_proc == NULL ) {
208 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
209 "delete procedure is not defined "
210 "for this objectclass - aborting\n", 0, 0, 0 );
211 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
212 rs->sr_text = "operation not permitted within namingContext";
220 dnParent( &op->o_req_ndn, &pdn );
222 e_id = bsi.bsi_base_id;
223 rs->sr_err = backsql_init_search( &bsi, &pdn,
225 (time_t)(-1), NULL, dbh, op, rs, slap_anlist_no_attrs,
226 BACKSQL_ISF_GET_ENTRY );
227 if ( rs->sr_err != LDAP_SUCCESS ) {
228 Debug( LDAP_DEBUG_TRACE, "backsql_delete(): "
229 "could not retrieve deleteDN ID - no such entry\n",
235 (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
237 /* check parent for "children" acl */
238 if ( !access_allowed( op, &p, slap_schema.si_ad_children,
239 NULL, ACL_WDEL, NULL ) )
241 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
242 "no write access to parent\n",
244 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
251 rs->sr_err = backsql_delete_all_attrs( op, rs, dbh, &e_id, oc );
252 if ( rs->sr_err != LDAP_SUCCESS ) {
257 rc = backsql_Prepare( dbh, &sth, oc->bom_delete_proc, 0 );
258 if ( rc != SQL_SUCCESS ) {
259 Debug( LDAP_DEBUG_TRACE,
260 " backsql_delete(): "
261 "error preparing delete query\n",
263 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
265 rs->sr_err = LDAP_OTHER;
266 rs->sr_text = "SQL-backend error";
271 if ( BACKSQL_IS_DEL( oc->bom_expect_return ) ) {
273 rc = backsql_BindParamInt( sth, 1, SQL_PARAM_OUTPUT, &prc );
274 if ( rc != SQL_SUCCESS ) {
275 Debug( LDAP_DEBUG_TRACE,
276 " backsql_delete(): "
277 "error binding output parameter for objectClass %s\n",
278 oc->bom_oc->soc_cname.bv_val, 0, 0 );
279 backsql_PrintErrors( bi->sql_db_env, dbh,
281 SQLFreeStmt( sth, SQL_DROP );
283 rs->sr_text = "SQL-backend error";
284 rs->sr_err = LDAP_OTHER;
290 rc = backsql_BindParamID( sth, pno + 1, SQL_PARAM_INPUT, &e_id.eid_keyval );
291 if ( rc != SQL_SUCCESS ) {
292 Debug( LDAP_DEBUG_TRACE,
293 " backsql_delete(): "
294 "error binding keyval parameter for objectClass %s\n",
295 oc->bom_oc->soc_cname.bv_val, 0, 0 );
296 backsql_PrintErrors( bi->sql_db_env, dbh,
298 SQLFreeStmt( sth, SQL_DROP );
300 rs->sr_text = "SQL-backend error";
301 rs->sr_err = LDAP_OTHER;
306 rc = SQLExecute( sth );
307 if ( rc == SQL_SUCCESS && prc == LDAP_SUCCESS ) {
308 rs->sr_err = LDAP_SUCCESS;
311 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
312 "delete_proc execution failed (rc=%d, prc=%d)\n",
316 if ( prc != LDAP_SUCCESS ) {
317 /* SQL procedure executed fine
318 * but returned an error */
319 rs->sr_err = BACKSQL_SANITIZE_ERROR( prc );
322 backsql_PrintErrors( bi->sql_db_env, dbh,
324 rs->sr_err = LDAP_OTHER;
326 SQLFreeStmt( sth, SQL_DROP );
330 SQLFreeStmt( sth, SQL_DROP );
332 /* delete "auxiliary" objectClasses, if any... */
333 rc = backsql_Prepare( dbh, &sth, bi->sql_delobjclasses_stmt, 0 );
334 if ( rc != SQL_SUCCESS ) {
335 Debug( LDAP_DEBUG_TRACE,
336 " backsql_delete(): "
337 "error preparing ldap_entry_objclasses delete query\n",
339 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
341 rs->sr_err = LDAP_OTHER;
342 rs->sr_text = "SQL-backend error";
347 rc = backsql_BindParamID( sth, 1, SQL_PARAM_INPUT, &e_id.eid_id );
348 if ( rc != SQL_SUCCESS ) {
349 Debug( LDAP_DEBUG_TRACE,
350 " backsql_delete(): "
351 "error binding auxiliary objectClasses "
352 "entry ID parameter for objectClass %s\n",
353 oc->bom_oc->soc_cname.bv_val, 0, 0 );
354 backsql_PrintErrors( bi->sql_db_env, dbh,
356 SQLFreeStmt( sth, SQL_DROP );
358 rs->sr_text = "SQL-backend error";
359 rs->sr_err = LDAP_OTHER;
364 rc = SQLExecute( sth );
367 /* apparently there were no "auxiliary" objectClasses
368 * for this entry... */
373 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
374 "failed to delete record from ldap_entry_objclasses\n",
376 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
377 SQLFreeStmt( sth, SQL_DROP );
378 rs->sr_err = LDAP_OTHER;
379 rs->sr_text = "SQL-backend error";
383 SQLFreeStmt( sth, SQL_DROP );
385 /* delete entry... */
386 rc = backsql_Prepare( dbh, &sth, bi->sql_delentry_stmt, 0 );
387 if ( rc != SQL_SUCCESS ) {
388 Debug( LDAP_DEBUG_TRACE,
389 " backsql_delete(): "
390 "error preparing ldap_entries delete query\n",
392 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
394 rs->sr_err = LDAP_OTHER;
395 rs->sr_text = "SQL-backend error";
400 rc = backsql_BindParamID( sth, 1, SQL_PARAM_INPUT, &e_id.eid_id );
401 if ( rc != SQL_SUCCESS ) {
402 Debug( LDAP_DEBUG_TRACE,
403 " backsql_delete(): "
404 "error binding entry ID parameter "
405 "for objectClass %s\n",
406 oc->bom_oc->soc_cname.bv_val, 0, 0 );
407 backsql_PrintErrors( bi->sql_db_env, dbh,
409 SQLFreeStmt( sth, SQL_DROP );
411 rs->sr_text = "SQL-backend error";
412 rs->sr_err = LDAP_OTHER;
417 rc = SQLExecute( sth );
418 if ( rc != SQL_SUCCESS ) {
419 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
420 "failed to delete record from ldap_entries\n",
422 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
423 SQLFreeStmt( sth, SQL_DROP );
424 rs->sr_err = LDAP_OTHER;
425 rs->sr_text = "SQL-backend error";
429 SQLFreeStmt( sth, SQL_DROP );
431 rs->sr_err = LDAP_SUCCESS;
434 * Commit only if all operations succeed
436 if ( sth != SQL_NULL_HSTMT ) {
437 SQLUSMALLINT CompletionType = SQL_ROLLBACK;
439 if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
440 CompletionType = SQL_COMMIT;
443 SQLTransact( SQL_NULL_HENV, dbh, CompletionType );
447 #ifdef SLAP_ACL_HONOR_DISCLOSE
449 if ( !access_allowed( op, e, slap_schema.si_ad_entry, NULL,
450 ACL_DISCLOSE, NULL ) )
452 rs->sr_err = LDAP_NO_SUCH_OBJECT;
454 rs->sr_matched = NULL;
456 ber_bvarray_free( rs->sr_ref );
461 #endif /* SLAP_ACL_HONOR_DISCLOSE */
463 send_ldap_result( op, rs );
465 Debug( LDAP_DEBUG_TRACE, "<==backsql_delete()\n", 0, 0, 0 );
467 if ( !BER_BVISNULL( &e_id.eid_ndn ) ) {
468 (void)backsql_free_entryID( op, &e_id, 0 );
471 if ( !BER_BVISNULL( &d.e_nname ) ) {
472 backsql_entry_clean( op, &d );
475 if ( !BER_BVISNULL( &p.e_nname ) ) {
476 backsql_entry_clean( op, &p );