]> git.sur5r.net Git - openldap/blob - servers/slapd/back-sql/modify.c
Fix ITS#3424
[openldap] / servers / slapd / back-sql / modify.c
1 /* $OpenLDAP$ */
2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
3  *
4  * Copyright 1999-2004 The OpenLDAP Foundation.
5  * Portions Copyright 1999 Dmitry Kovalev.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted only as authorized by the OpenLDAP
10  * Public License.
11  *
12  * A copy of this license is available in the file LICENSE in the
13  * top-level directory of the distribution or, alternatively, at
14  * <http://www.OpenLDAP.org/license.html>.
15  */
16 /* ACKNOWLEDGEMENTS:
17  * This work was initially developed by Dmitry Kovalev for inclusion
18  * by OpenLDAP Software.
19  */
20
21 #include "portable.h"
22
23 #include <stdio.h>
24 #include <sys/types.h>
25 #include "ac/string.h"
26
27 #include "slap.h"
28 #include "proto-sql.h"
29
30 int
31 backsql_modify( Operation *op, SlapReply *rs )
32 {
33         backsql_info            *bi = (backsql_info*)op->o_bd->be_private;
34         SQLHDBC                 dbh;
35         backsql_oc_map_rec      *oc = NULL;
36         backsql_entryID         e_id = BACKSQL_ENTRYID_INIT;
37         Entry                   e;
38
39         /*
40          * FIXME: in case part of the operation cannot be performed
41          * (missing mapping, SQL write fails or so) the entire operation
42          * should be rolled-back
43          */
44         Debug( LDAP_DEBUG_TRACE, "==>backsql_modify(): modifying entry \"%s\"\n",
45                 op->o_req_ndn.bv_val, 0, 0 );
46
47         rs->sr_err = backsql_get_db_conn( op, &dbh );
48         if ( rs->sr_err != LDAP_SUCCESS ) {
49                 Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
50                         "could not get connection handle - exiting\n", 
51                         0, 0, 0 );
52                 /*
53                  * FIXME: we don't want to send back 
54                  * excessively detailed messages
55                  */
56                 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
57                         ? "SQL-backend error" : NULL;
58                 goto done;
59         }
60
61         rs->sr_err = backsql_dn2id( op, rs, &e_id, dbh, &op->o_req_ndn, 1 );
62         if ( rs->sr_err != LDAP_SUCCESS ) {
63                 Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
64                         "could not lookup entry id\n", 0, 0, 0 );
65                 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
66                         ? "SQL-backend error" : NULL;
67                 goto done;
68         }
69
70 #ifdef BACKSQL_ARBITRARY_KEY
71         Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
72                 "modifying entry \"%s\" (id=%s)\n", 
73                 e_id.eid_dn.bv_val, e_id.eid_id.bv_val, 0 );
74 #else /* ! BACKSQL_ARBITRARY_KEY */
75         Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
76                 "modifying entry \"%s\" (id=%ld)\n", 
77                 e_id.eid_dn.bv_val, e_id.eid_id, 0 );
78 #endif /* ! BACKSQL_ARBITRARY_KEY */
79
80         oc = backsql_id2oc( bi, e_id.eid_oc_id );
81         if ( oc == NULL ) {
82                 Debug( LDAP_DEBUG_TRACE, "   backsql_modify(): "
83                         "cannot determine objectclass of entry -- aborting\n",
84                         0, 0, 0 );
85                 /*
86                  * FIXME: should never occur, since the entry was built!!!
87                  */
88
89                 /*
90                  * FIXME: we don't want to send back 
91                  * excessively detailed messages
92                  */
93                 rs->sr_err = LDAP_OTHER;
94                 rs->sr_text = "SQL-backend error";
95                 goto done;
96         }
97
98         e.e_attrs = NULL;
99         e.e_name = op->o_req_dn;
100         e.e_nname = op->o_req_ndn;
101         if ( !acl_check_modlist( op, &e, op->oq_modify.rs_modlist ) ) {
102                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
103
104         } else {
105                 rs->sr_err = backsql_modify_internal( op, rs, dbh, oc, &e_id,
106                                 op->oq_modify.rs_modlist );
107         }
108
109         if ( rs->sr_err == LDAP_SUCCESS ) {
110                 /*
111                  * Commit only if all operations succeed
112                  */
113                 SQLTransact( SQL_NULL_HENV, dbh, 
114                                 op->o_noop ? SQL_ROLLBACK : SQL_COMMIT );
115         }
116
117 done:;
118         send_ldap_result( op, rs );
119         Debug( LDAP_DEBUG_TRACE, "<==backsql_modify()\n", 0, 0, 0 );
120
121         return rs->sr_err != LDAP_SUCCESS ? rs->sr_err : op->o_noop;
122 }
123