git.sur5r.net Git - openldap/blob - servers/slapd/back-sql/modify.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1999-2005 The OpenLDAP Foundation.
   5  * Portions Copyright 1999 Dmitry Kovalev.
   6  * Portions Copyright 2002 Pierangelo Masarati.
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in the file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by Dmitry Kovalev for inclusion
  19  * by OpenLDAP Software.  Additional significant contributors include
  20  * Pierangelo Masarati.
  21  */
  22
  23 #include "portable.h"
  24
  25 #include <stdio.h>
  26 #include <sys/types.h>
  27 #include "ac/string.h"
  28
  29 #include "slap.h"
  30 #include "proto-sql.h"
  31
  32 int
  33 backsql_modify( Operation *op, SlapReply *rs )
  34 {
  35         backsql_info            *bi = (backsql_info*)op->o_bd->be_private;
  36         SQLHDBC                 dbh = SQL_NULL_HDBC;
  37         backsql_oc_map_rec      *oc = NULL;
  38         backsql_srch_info       bsi = { 0 };
  39         Entry                   m = { 0 }, *e = NULL;
  40         int                     manageDSAit = get_manageDSAit( op );
  41         SQLUSMALLINT            CompletionType = SQL_ROLLBACK;
  42
  43         /*
  44          * FIXME: in case part of the operation cannot be performed
  45          * (missing mapping, SQL write fails or so) the entire operation
  46          * should be rolled-back
  47          */
  48         Debug( LDAP_DEBUG_TRACE, "==>backsql_modify(): modifying entry \"%s\"\n",
  49                 op->o_req_ndn.bv_val, 0, 0 );
  50
  51         rs->sr_err = backsql_get_db_conn( op, &dbh );
  52         if ( rs->sr_err != LDAP_SUCCESS ) {
  53                 Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
  54                         "could not get connection handle - exiting\n",
  55                         0, 0, 0 );
  56                 /*
  57                  * FIXME: we don't want to send back
  58                  * excessively detailed messages
  59                  */
  60                 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
  61                         ? "SQL-backend error" : NULL;
  62                 goto done;
  63         }
  64
  65         bsi.bsi_e = &m;
  66         rs->sr_err = backsql_init_search( &bsi, &op->o_req_ndn,
  67                         LDAP_SCOPE_BASE,
  68                         SLAP_NO_LIMIT, SLAP_NO_LIMIT,
  69                         (time_t)(-1), NULL, dbh, op, rs,
  70                         slap_anlist_all_attributes,
  71                         ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
  72         switch ( rs->sr_err ) {
  73         case LDAP_SUCCESS:
  74                 break;
  75
  76         case LDAP_REFERRAL:
  77                 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
  78                                 dn_match( &op->o_req_ndn, &bsi.bsi_e->e_nname ) )
  79                 {
  80                         rs->sr_err = LDAP_SUCCESS;
  81                         rs->sr_text = NULL;
  82                         rs->sr_matched = NULL;
  83                         if ( rs->sr_ref ) {
  84                                 ber_bvarray_free( rs->sr_ref );
  85                                 rs->sr_ref = NULL;
  86                         }
  87                         break;
  88                 }
  89                 e = &m;
  90                 /* fallthru */
  91
  92         default:
  93                 Debug( LDAP_DEBUG_TRACE, "backsql_modify(): "
  94                         "could not retrieve modifyDN ID - no such entry\n",
  95                         0, 0, 0 );
  96                 if ( !BER_BVISNULL( &m.e_nname ) ) {
  97                         /* FIXME: should always be true! */
  98                         e = &m;
  99
 100                 } else {
 101                         e = NULL;
 102                 }
 103                 goto done;
 104         }
 105
 106 #ifdef BACKSQL_ARBITRARY_KEY
 107         Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
 108                 "modifying entry \"%s\" (id=%s)\n",
 109                 bsi.bsi_base_id.eid_dn.bv_val,
 110                 bsi.bsi_base_id.eid_id.bv_val, 0 );
 111 #else /* ! BACKSQL_ARBITRARY_KEY */
 112         Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
 113                 "modifying entry \"%s\" (id=%ld)\n",
 114                 bsi.bsi_base_id.eid_dn.bv_val, bsi.bsi_base_id.eid_id, 0 );
 115 #endif /* ! BACKSQL_ARBITRARY_KEY */
 116
 117         if ( get_assert( op ) &&
 118                         ( test_filter( op, &m, get_assertion( op ) )
 119                           != LDAP_COMPARE_TRUE ))
 120         {
 121                 rs->sr_err = LDAP_ASSERTION_FAILED;
 122                 e = &m;
 123                 goto done;
 124         }
 125
 126         oc = backsql_id2oc( bi, bsi.bsi_base_id.eid_oc_id );
 127         if ( oc == NULL ) {
 128                 Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
 129                         "cannot determine objectclass of entry -- aborting\n",
 130                         0, 0, 0 );
 131                 /*
 132                  * FIXME: should never occur, since the entry was built!!!
 133                  */
 134
 135                 /*
 136                  * FIXME: we don't want to send back
 137                  * excessively detailed messages
 138                  */
 139                 rs->sr_err = LDAP_OTHER;
 140                 rs->sr_text = "SQL-backend error";
 141                 e = NULL;
 142                 goto done;
 143         }
 144
 145         if ( !acl_check_modlist( op, &m, op->oq_modify.rs_modlist ) ) {
 146                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 147                 e = &m;
 148                 goto done;
 149         }
 150
 151         rs->sr_err = backsql_modify_internal( op, rs, dbh, oc,
 152                         &bsi.bsi_base_id, op->oq_modify.rs_modlist );
 153         if ( rs->sr_err != LDAP_SUCCESS ) {
 154                 e = &m;
 155                 goto do_transact;
 156         }
 157
 158         if ( global_schemacheck ) {
 159                 char            textbuf[ SLAP_TEXT_BUFLEN ] = { '\0' };
 160
 161                 entry_clean( &m );
 162
 163                 bsi.bsi_e = &m;
 164                 rs->sr_err = backsql_id2entry( &bsi, &bsi.bsi_base_id );
 165                 if ( rs->sr_err != LDAP_SUCCESS ) {
 166                         e = &m;
 167                         goto do_transact;
 168                 }
 169
 170                 rs->sr_err = entry_schema_check( op->o_bd, &m,
 171                                 NULL,
 172                                 &rs->sr_text, textbuf, sizeof( textbuf ) );
 173                 if ( rs->sr_err != LDAP_SUCCESS ) {
 174                         Debug( LDAP_DEBUG_TRACE, "   backsql_add(\"%s\"): "
 175                                 "entry failed schema check -- aborting\n",
 176                                 m.e_name.bv_val, 0, 0 );
 177                         e = NULL;
 178                         goto do_transact;
 179                 }
 180         }
 181
 182 do_transact:;
 183         /*
 184          * Commit only if all operations succeed
 185          */
 186         if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
 187                 CompletionType = SQL_COMMIT;
 188         }
 189
 190         SQLTransact( SQL_NULL_HENV, dbh, CompletionType );
 191
 192 done:;
 193 #ifdef SLAP_ACL_HONOR_DISCLOSE
 194         if ( e != NULL ) {
 195                 if ( !access_allowed( op, e, slap_schema.si_ad_entry, NULL,
 196                                         ACL_DISCLOSE, NULL ) )
 197                 {
 198                         rs->sr_err = LDAP_NO_SUCH_OBJECT;
 199                         rs->sr_text = NULL;
 200                         rs->sr_matched = NULL;
 201                         if ( rs->sr_ref ) {
 202                                 ber_bvarray_free( rs->sr_ref );
 203                                 rs->sr_ref = NULL;
 204                         }
 205                 }
 206         }
 207 #endif /* SLAP_ACL_HONOR_DISCLOSE */
 208
 209         send_ldap_result( op, rs );
 210
 211         if ( !BER_BVISNULL( &bsi.bsi_base_id.eid_ndn ) ) {
 212                 (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
 213         }
 214
 215         if ( !BER_BVISNULL( &m.e_nname ) ) {
 216                 entry_clean( &m );
 217         }
 218
 219         if ( bsi.bsi_attrs != NULL ) {
 220                 op->o_tmpfree( bsi.bsi_attrs, op->o_tmpmemctx );
 221         }
 222
 223         Debug( LDAP_DEBUG_TRACE, "<==backsql_modify()\n", 0, 0, 0 );
 224
 225         return rs->sr_err;
 226 }
 227