2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 1999-2005 The OpenLDAP Foundation.
5 * Portions Copyright 1999 Dmitry Kovalev.
6 * Portions Copyright 2002 Pierangelo Masarati.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted only as authorized by the OpenLDAP
13 * A copy of this license is available in the file LICENSE in the
14 * top-level directory of the distribution or, alternatively, at
15 * <http://www.OpenLDAP.org/license.html>.
18 * This work was initially developed by Dmitry Kovalev for inclusion
19 * by OpenLDAP Software. Additional significant contributors include
20 * Pierangelo Masarati.
26 #include <sys/types.h>
27 #include "ac/string.h"
30 #include "proto-sql.h"
32 typedef struct backsql_delete_attr_t {
36 backsql_entryID *e_id;
37 } backsql_delete_attr_t;
40 backsql_delete_attr_f( void *v_at, void *v_bda )
42 backsql_at_map_rec *at = (backsql_at_map_rec *)v_at;
43 backsql_delete_attr_t *bda = (backsql_delete_attr_t *)v_bda;
46 rc = backsql_modify_delete_all_values( bda->op,
47 bda->rs, bda->dbh, bda->e_id, at );
49 if ( rc != LDAP_SUCCESS ) {
50 return BACKSQL_AVL_STOP;
53 return BACKSQL_AVL_CONTINUE;
57 backsql_delete_all_attrs(
61 backsql_entryID *e_id,
62 backsql_oc_map_rec *oc )
64 backsql_delete_attr_t bda;
72 rc = avl_apply( oc->bom_attrs, backsql_delete_attr_f, &bda,
73 BACKSQL_AVL_STOP, AVL_INORDER );
74 if ( rc == BACKSQL_AVL_STOP ) {
82 backsql_delete( Operation *op, SlapReply *rs )
84 backsql_info *bi = (backsql_info*)op->o_bd->be_private;
85 SQLHDBC dbh = SQL_NULL_HDBC;
86 SQLHSTMT sth = SQL_NULL_HSTMT;
88 int prc = LDAP_SUCCESS;
89 backsql_oc_map_rec *oc = NULL;
90 backsql_srch_info bsi = { 0 };
91 backsql_entryID e_id = { 0 };
92 Entry d = { 0 }, p = { 0 }, *e = NULL;
93 struct berval pdn = BER_BVNULL;
94 int manageDSAit = get_manageDSAit( op );
95 /* first parameter no */
98 Debug( LDAP_DEBUG_TRACE, "==>backsql_delete(): deleting entry \"%s\"\n",
99 op->o_req_ndn.bv_val, 0, 0 );
101 rs->sr_err = backsql_get_db_conn( op, &dbh );
102 if ( rs->sr_err != LDAP_SUCCESS ) {
103 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
104 "could not get connection handle - exiting\n",
106 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
107 ? "SQL-backend error" : NULL;
116 rs->sr_err = backsql_init_search( &bsi, &op->o_req_ndn,
118 SLAP_NO_LIMIT, SLAP_NO_LIMIT,
119 (time_t)(-1), NULL, dbh, op, rs, slap_anlist_no_attrs,
120 ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
121 switch ( rs->sr_err ) {
126 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
127 dn_match( &op->o_req_ndn, &bsi.bsi_e->e_nname ) )
129 rs->sr_err = LDAP_SUCCESS;
131 rs->sr_matched = NULL;
133 ber_bvarray_free( rs->sr_ref );
142 Debug( LDAP_DEBUG_TRACE, "backsql_delete(): "
143 "could not retrieve deleteDN ID - no such entry\n",
145 if ( !BER_BVISNULL( &d.e_nname ) ) {
146 /* FIXME: should always be true! */
155 if ( get_assert( op ) &&
156 ( test_filter( op, &d, get_assertion( op ) )
157 != LDAP_COMPARE_TRUE ) )
159 rs->sr_err = LDAP_ASSERTION_FAILED;
164 if ( !access_allowed( op, &d, slap_schema.si_ad_entry,
165 NULL, ACL_WRITE, NULL ) )
167 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
168 "no write access to entry\n",
170 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
175 rs->sr_err = backsql_has_children( bi, dbh, &op->o_req_ndn );
176 switch ( rs->sr_err ) {
177 case LDAP_COMPARE_FALSE:
178 rs->sr_err = LDAP_SUCCESS;
181 case LDAP_COMPARE_TRUE:
182 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
183 "entry \"%s\" has children\n",
184 op->o_req_dn.bv_val, 0, 0 );
185 rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
186 rs->sr_text = "subtree delete not supported";
194 oc = backsql_id2oc( bi, bsi.bsi_base_id.eid_oc_id );
196 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
197 "cannot determine objectclass of entry -- aborting\n",
199 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
200 rs->sr_text = "operation not permitted within namingContext";
205 if ( oc->bom_delete_proc == NULL ) {
206 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
207 "delete procedure is not defined "
208 "for this objectclass - aborting\n", 0, 0, 0 );
209 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
210 rs->sr_text = "operation not permitted within namingContext";
218 dnParent( &op->o_req_ndn, &pdn );
220 e_id = bsi.bsi_base_id;
221 rs->sr_err = backsql_init_search( &bsi, &pdn,
223 SLAP_NO_LIMIT, SLAP_NO_LIMIT,
224 (time_t)(-1), NULL, dbh, op, rs, slap_anlist_no_attrs,
225 BACKSQL_ISF_GET_ENTRY );
226 if ( rs->sr_err != LDAP_SUCCESS ) {
227 Debug( LDAP_DEBUG_TRACE, "backsql_delete(): "
228 "could not retrieve deleteDN ID - no such entry\n",
234 (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
236 /* check parent for "children" acl */
237 if ( !access_allowed( op, &p, slap_schema.si_ad_children,
238 NULL, ACL_WRITE, NULL ) )
240 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
241 "no write access to parent\n",
243 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
250 rs->sr_err = backsql_delete_all_attrs( op, rs, dbh, &e_id, oc );
251 if ( rs->sr_err != LDAP_SUCCESS ) {
256 rc = backsql_Prepare( dbh, &sth, oc->bom_delete_proc, 0 );
257 if ( rc != SQL_SUCCESS ) {
258 Debug( LDAP_DEBUG_TRACE,
259 " backsql_delete(): "
260 "error preparing delete query\n",
262 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
264 rs->sr_err = LDAP_OTHER;
265 rs->sr_text = "SQL-backend error";
270 if ( BACKSQL_IS_DEL( oc->bom_expect_return ) ) {
272 rc = backsql_BindParamInt( sth, 1, SQL_PARAM_OUTPUT, &prc );
273 if ( rc != SQL_SUCCESS ) {
274 Debug( LDAP_DEBUG_TRACE,
275 " backsql_delete(): "
276 "error binding output parameter for objectClass %s\n",
277 oc->bom_oc->soc_cname.bv_val, 0, 0 );
278 backsql_PrintErrors( bi->sql_db_env, dbh,
280 SQLFreeStmt( sth, SQL_DROP );
282 rs->sr_text = "SQL-backend error";
283 rs->sr_err = LDAP_OTHER;
292 rc = backsql_BindParamID( sth, pno + 1, SQL_PARAM_INPUT, &e_id.eid_keyval );
293 if ( rc != SQL_SUCCESS ) {
294 Debug( LDAP_DEBUG_TRACE,
295 " backsql_delete(): "
296 "error binding keyval parameter for objectClass %s\n",
297 oc->bom_oc->soc_cname.bv_val, 0, 0 );
298 backsql_PrintErrors( bi->sql_db_env, dbh,
300 SQLFreeStmt( sth, SQL_DROP );
302 rs->sr_text = "SQL-backend error";
303 rs->sr_err = LDAP_OTHER;
308 rc = SQLExecute( sth );
309 if ( rc == SQL_SUCCESS && prc == LDAP_SUCCESS ) {
310 rs->sr_err = LDAP_SUCCESS;
313 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
314 "delete_proc execution failed (rc=%d, prc=%d)\n",
318 if ( prc != LDAP_SUCCESS ) {
319 /* SQL procedure executed fine
320 * but returned an error */
321 rs->sr_err = BACKSQL_SANITIZE_ERROR( prc );
324 backsql_PrintErrors( bi->sql_db_env, dbh,
326 rs->sr_err = LDAP_OTHER;
328 SQLFreeStmt( sth, SQL_DROP );
332 SQLFreeStmt( sth, SQL_DROP );
334 /* delete "auxiliary" objectClasses, if any... */
335 rc = backsql_Prepare( dbh, &sth, bi->sql_delobjclasses_stmt, 0 );
336 if ( rc != SQL_SUCCESS ) {
337 Debug( LDAP_DEBUG_TRACE,
338 " backsql_delete(): "
339 "error preparing ldap_entry_objclasses delete query\n",
341 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
343 rs->sr_err = LDAP_OTHER;
344 rs->sr_text = "SQL-backend error";
349 rc = backsql_BindParamID( sth, 1, SQL_PARAM_INPUT, &e_id.eid_id );
350 if ( rc != SQL_SUCCESS ) {
351 Debug( LDAP_DEBUG_TRACE,
352 " backsql_delete(): "
353 "error binding auxiliary objectClasses "
354 "entry ID parameter for objectClass %s\n",
355 oc->bom_oc->soc_cname.bv_val, 0, 0 );
356 backsql_PrintErrors( bi->sql_db_env, dbh,
358 SQLFreeStmt( sth, SQL_DROP );
360 rs->sr_text = "SQL-backend error";
361 rs->sr_err = LDAP_OTHER;
366 rc = SQLExecute( sth );
369 /* apparently there were no "auxiliary" objectClasses
370 * for this entry... */
375 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
376 "failed to delete record from ldap_entry_objclasses\n",
378 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
379 SQLFreeStmt( sth, SQL_DROP );
380 rs->sr_err = LDAP_OTHER;
381 rs->sr_text = "SQL-backend error";
385 SQLFreeStmt( sth, SQL_DROP );
387 /* delete entry... */
388 rc = backsql_Prepare( dbh, &sth, bi->sql_delentry_stmt, 0 );
389 if ( rc != SQL_SUCCESS ) {
390 Debug( LDAP_DEBUG_TRACE,
391 " backsql_delete(): "
392 "error preparing ldap_entries delete query\n",
394 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
396 rs->sr_err = LDAP_OTHER;
397 rs->sr_text = "SQL-backend error";
402 rc = backsql_BindParamID( sth, 1, SQL_PARAM_INPUT, &e_id.eid_id );
403 if ( rc != SQL_SUCCESS ) {
404 Debug( LDAP_DEBUG_TRACE,
405 " backsql_delete(): "
406 "error binding entry ID parameter "
407 "for objectClass %s\n",
408 oc->bom_oc->soc_cname.bv_val, 0, 0 );
409 backsql_PrintErrors( bi->sql_db_env, dbh,
411 SQLFreeStmt( sth, SQL_DROP );
413 rs->sr_text = "SQL-backend error";
414 rs->sr_err = LDAP_OTHER;
419 rc = SQLExecute( sth );
420 if ( rc != SQL_SUCCESS ) {
421 Debug( LDAP_DEBUG_TRACE, " backsql_delete(): "
422 "failed to delete record from ldap_entries\n",
424 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
425 SQLFreeStmt( sth, SQL_DROP );
426 rs->sr_err = LDAP_OTHER;
427 rs->sr_text = "SQL-backend error";
431 SQLFreeStmt( sth, SQL_DROP );
433 rs->sr_err = LDAP_SUCCESS;
436 * Commit only if all operations succeed
438 if ( sth != SQL_NULL_HSTMT ) {
439 SQLUSMALLINT CompletionType = SQL_ROLLBACK;
441 if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
442 CompletionType = SQL_COMMIT;
445 SQLTransact( SQL_NULL_HENV, dbh, CompletionType );
449 #ifdef SLAP_ACL_HONOR_DISCLOSE
451 if ( !access_allowed( op, e, slap_schema.si_ad_entry, NULL,
452 ACL_DISCLOSE, NULL ) )
454 rs->sr_err = LDAP_NO_SUCH_OBJECT;
456 rs->sr_matched = NULL;
458 ber_bvarray_free( rs->sr_ref );
463 #endif /* SLAP_ACL_HONOR_DISCLOSE */
465 send_ldap_result( op, rs );
467 Debug( LDAP_DEBUG_TRACE, "<==backsql_delete()\n", 0, 0, 0 );
469 if ( !BER_BVISNULL( &e_id.eid_ndn ) ) {
470 (void)backsql_free_entryID( op, &e_id, 0 );
473 if ( !BER_BVISNULL( &d.e_nname ) ) {
477 if ( !BER_BVISNULL( &p.e_nname ) ) {