def update_node(req, path, params, data, id):
# get the user and verify the signature
if params.get('user'):
user = users.getUser(params.get('user'))
userAccess = AccessData(user=user)
if userAccess.user:
valid = userAccess.verify_request_signature(req.fullpath, params)
if not valid:
userAccess = None
else:
userAccess = None
else:
user = users.getUser('Gast')
userAccess = AccessData(user=user)
node = tree.getNode(id)
# check user access
if userAccess and userAccess.hasAccess(node, "write"):
pass
else:
s = "No Access"
req.write(s)
d = {
'status': 'fail',
'html_response_code': '403',
'errormessage': 'no access'
}
return d['html_response_code'], len(s), d
node.name = params.get('name')
metadata = json.loads(params.get('metadata'))
# set provided metadata
for key, value in metadata.iteritems():
node.set(u(key), u(value))
# service flags
node.set("updateuser", user.getName())
node.set("updatetime", format_date())
node.setDirty()
d = {
'status': 'OK',
'html_response_code': '200',
'build_response_end': time.time()
}
s = "OK"
# we need to write in case of POST request, send as buffer wil not work
req.write(s)
req.reply_headers['updatetime'] = node.get('updatetime')
return d['html_response_code'], len(s), d
def update_node(req, path, params, data, id):
# get the user and verify the signature
if params.get('user'):
user = users.getUser(params.get('user'))
userAccess = AccessData(user=user)
if userAccess.user:
valid = userAccess.verify_request_signature(req.fullpath, params)
if not valid:
userAccess = None
else:
userAccess = None
else:
user = users.getUser('Gast')
userAccess = AccessData(user=user)
node = tree.getNode(id)
# check user access
if userAccess and userAccess.hasAccess(node, "write"):
pass
else:
s = "No Access"
req.write(s)
d = {
'status': 'fail',
'html_response_code': '403',
'errormessage': 'no access'}
return d['html_response_code'], len(s), d
node.name = params.get('name')
metadata = json.loads(params.get('metadata'))
# set provided metadata
for key, value in metadata.iteritems():
node.set(u(key), u(value))
# service flags
node.set("updateuser", user.getName())
node.set("updatetime", format_date())
node.setDirty()
d = {
'status': 'OK',
'html_response_code': '200',
'build_response_end': time.time()}
s = "OK"
# we need to write in case of POST request, send as buffer wil not work
req.write(s)
req.reply_headers['updatetime'] = node.get('updatetime')
return d['html_response_code'], len(s), d
def upload_new_node(req, path, params, data):
try:
uploadfile = params['data']
del params['data']
except KeyError:
uploadfile = None
# get the user and verify the signature
if params.get('user'):
# user=users.getUser(params.get('user'))
#userAccess = AccessData(user=user)
_user = users.getUser(params.get('user'))
if not _user: # user of dynamic
class dummyuser: # dummy user class
# return all groups with given dynamic user
def getGroups(self):
return [g.name for g in tree.getRoot('usergroups').getChildren() if g.get(
'allow_dynamic') == '1' and params.get('user') in g.get('dynamic_users')]
def getName(self):
return params.get('user')
def getDirID(self): # unique identifier
return params.get('user')
def isAdmin(self):
return 0
_user = dummyuser()
userAccess = AccessData(user=_user)
if userAccess.user:
user = userAccess.user
if not userAccess.verify_request_signature(
req.fullpath +
'?',
params):
userAccess = None
else:
userAccess = None
else:
user = users.getUser(config.get('user.guestuser'))
userAccess = AccessData(user=user)
parent = tree.getNode(params.get('parent'))
# check user access
if userAccess and userAccess.hasAccess(parent, "write"):
pass
else:
s = "No Access"
req.write(s)
d = {
'status': 'fail',
'html_response_code': '403',
'errormessage': 'no access'}
logger.error("user has no edit permission for node %s" % parent)
return d['html_response_code'], len(s), d
datatype = params.get('type')
uploaddir = users.getUploadDir(user)
n = tree.Node(name=params.get('name'), type=datatype)
if isinstance(uploadfile, types.InstanceType): # file object used
nfile = importFile(uploadfile.filename, uploadfile.tempname)
else: # string used
nfile = importFileFromData(
'uploadTest.jpg',
base64.b64decode(uploadfile))
if nfile:
n.addFile(nfile)
else:
logger.error("error in file uploadservice")
try: # test metadata
metadata = json.loads(params.get('metadata'))
except ValueError:
metadata = dict()
# set provided metadata
for key, value in metadata.iteritems():
n.set(u(key), u(value))
# service flags
n.set("creator", user.getName())
n.set("creationtime", format_date())
parent.addChild(n)
# process the file, we've added to the new node
if hasattr(n, "event_files_changed"):
try:
n.event_files_changed()
except OperationException as e:
for file in n.getFiles():
if os.path.exists(file.retrieveFile()):
os.remove(file.retrieveFile())
raise OperationException(e.value)
# make sure the new node is visible immediately from the web service and
# the search index gets updated
n.setDirty()
tree.remove_from_nodecaches(parent)
d = {
'status': 'Created',
'html_response_code': '201',
'build_response_end': time.time()}
s = "Created"
# provide the uploader with the new node ID
req.reply_headers['NodeID'] = n.id
# we need to write in case of POST request, send as buffer will not work
req.write(s)
return d['html_response_code'], len(s), d
def get_sheme(req, path, params, data, name):
atime = starttime = time.time()
r_timetable = []
userAccess = None
# get the user and verify the signature
if params.get('user'):
# user=users.getUser(params.get('user'))
#userAccess = AccessData(user=user)
_user = users.getUser(params.get('user'))
if not _user: # user of dynamic
class dummyuser: # dummy user class
def getGroups(self): # return all groups with given dynamic user
return [g.name for g in tree.getRoot('usergroups').getChildren() if g.get(
'allow_dynamic') == '1' and params.get('user') in g.get('dynamic_users')]
def getName(self):
return params.get('user')
def getDirID(self): # unique identifier
return params.get('user')
def isAdmin(self):
return 0
_user = dummyuser()
userAccess = AccessData(user=_user)
if userAccess.user is not None:
valid = userAccess.verify_request_signature(req.fullpath, params)
if not valid:
userAccess = None
else:
userAccess = None
if userAccess is None:
d = {}
d['status'] = 'fail'
d['html_response_code'] = '403' # denied
return d['html_response_code'], 0, d
d = {}
d['timetable'] = []
d['status'] = 'ok'
d['html_response_code'] = '200' # ok
d['build_response_end'] = time.time()
if r_timetable:
d['timetable'] = r_timetable[:]
if name.endswith('/'):
name = name[:-1]
s = exportMetaScheme(name)
def compressForDeflate(s):
import gzip
return gzip.zlib.compress(s, 9)
def compressForGzip(s):
import cStringIO
import gzip
buffer = cStringIO.StringIO()
gzfile = gzip.GzipFile(mode='wb', fileobj=buffer, compresslevel=9)
gzfile.write(s)
gzfile.close()
return buffer.getvalue()
if 'deflate' in req.params:
size_uncompressed = len(s)
compressed_s = compressForDeflate(s)
s = compressed_s
size_compressed = len(s)
try:
percentage = 100.0 * size_compressed / size_uncompressed
except:
percentage = 100.0
req.reply_headers['Content-Encoding'] = "deflate"
d['timetable'].append(["'deflate' in request: executed compressForDeflate(s), %d bytes -> %d bytes (compressed to: %.1f %%)" %
(size_uncompressed, size_compressed, percentage), time.time() - atime])
atime = time.time()
elif 'gzip' in req.params:
size_uncompressed = len(s)
compressed_s = compressForGzip(s)
s = compressed_s
size_compressed = len(s)
try:
percentage = 100.0 * size_compressed / size_uncompressed
except:
percentage = 100.0
req.reply_headers['Content-Encoding'] = "gzip"
d['timetable'].append(["'gzip' in request: executed compressForGzip(s), %d bytes -> %d bytes (compressed to: %.1f %%)" %
(size_uncompressed, size_compressed, percentage), time.time() - atime])
atime = time.time()
mimetype = 'text/html'
req.reply_headers['Content-Type'] = "text/xml; charset=utf-8"
req.reply_headers['Content-Length'] = len(s)
req.sendAsBuffer(s, mimetype, force=1)
d['timetable'].append(["executed req.sendAsBuffer, %d bytes, mimetype='%s'" % (len(s), mimetype), time.time() - atime])
atime = time.time()
return d['html_response_code'], len(s), d
def upload_new_node(req, path, params, data):
try:
uploadfile = params['data']
del params['data']
except KeyError:
uploadfile = None
# get the user and verify the signature
if params.get('user'):
# user=users.getUser(params.get('user'))
#userAccess = AccessData(user=user)
_user = users.getUser(params.get('user'))
if not _user: # user of dynamic
class dummyuser: # dummy user class
# return all groups with given dynamic user
def getGroups(self):
return [
g.name
for g in tree.getRoot('usergroups').getChildren()
if g.get('allow_dynamic') == '1'
and params.get('user') in g.get('dynamic_users')
]
def getName(self):
return params.get('user')
def getDirID(self): # unique identifier
return params.get('user')
def isAdmin(self):
return 0
_user = dummyuser()
userAccess = AccessData(user=_user)
if userAccess.user:
user = userAccess.user
if not userAccess.verify_request_signature(req.fullpath + '?',
params):
userAccess = None
else:
userAccess = None
else:
user = users.getUser(config.get('user.guestuser'))
userAccess = AccessData(user=user)
parent = tree.getNode(params.get('parent'))
# check user access
if userAccess and userAccess.hasAccess(parent, "write"):
pass
else:
s = "No Access"
req.write(s)
d = {
'status': 'fail',
'html_response_code': '403',
'errormessage': 'no access'
}
logger.error("user has no edit permission for node %s" % parent)
return d['html_response_code'], len(s), d
datatype = params.get('type')
uploaddir = users.getUploadDir(user)
n = tree.Node(name=params.get('name'), type=datatype)
if isinstance(uploadfile, types.InstanceType): # file object used
nfile = importFile(uploadfile.filename, uploadfile.tempname)
else: # string used
nfile = importFileFromData('uploadTest.jpg',
base64.b64decode(uploadfile))
if nfile:
n.addFile(nfile)
else:
logger.error("error in file uploadservice")
try: # test metadata
metadata = json.loads(params.get('metadata'))
except ValueError:
metadata = dict()
# set provided metadata
for key, value in metadata.iteritems():
n.set(u(key), u(value))
# service flags
n.set("creator", user.getName())
n.set("creationtime", format_date())
parent.addChild(n)
# process the file, we've added to the new node
if hasattr(n, "event_files_changed"):
try:
n.event_files_changed()
except OperationException as e:
for file in n.getFiles():
if os.path.exists(file.retrieveFile()):
os.remove(file.retrieveFile())
raise OperationException(e.value)
# make sure the new node is visible immediately from the web service and
# the search index gets updated
n.setDirty()
tree.remove_from_nodecaches(parent)
d = {
'status': 'Created',
'html_response_code': '201',
'build_response_end': time.time()
}
s = "Created"
# provide the uploader with the new node ID
req.reply_headers['NodeID'] = n.id
# we need to write in case of POST request, send as buffer will not work
req.write(s)
return d['html_response_code'], len(s), d
def get_sheme(req, path, params, data, name):
atime = starttime = time.time()
r_timetable = []
userAccess = None
# get the user and verify the signature
if params.get('user'):
# user=users.getUser(params.get('user'))
#userAccess = AccessData(user=user)
_user = users.getUser(params.get('user'))
if not _user: # user of dynamic
class dummyuser: # dummy user class
def getGroups(
self): # return all groups with given dynamic user
return [
g.name
for g in tree.getRoot('usergroups').getChildren()
if g.get('allow_dynamic') == '1'
and params.get('user') in g.get('dynamic_users')
]
def getName(self):
return params.get('user')
def getDirID(self): # unique identifier
return params.get('user')
def isAdmin(self):
return 0
_user = dummyuser()
userAccess = AccessData(user=_user)
if userAccess.user is not None:
valid = userAccess.verify_request_signature(req.fullpath, params)
if not valid:
userAccess = None
else:
userAccess = None
if userAccess is None:
d = {}
d['status'] = 'fail'
d['html_response_code'] = '403' # denied
return d['html_response_code'], 0, d
d = {}
d['timetable'] = []
d['status'] = 'ok'
d['html_response_code'] = '200' # ok
d['build_response_end'] = time.time()
if r_timetable:
d['timetable'] = r_timetable[:]
if name.endswith('/'):
name = name[:-1]
s = exportMetaScheme(name)
def compressForDeflate(s):
import gzip
return gzip.zlib.compress(s, 9)
def compressForGzip(s):
import cStringIO
import gzip
buffer = cStringIO.StringIO()
gzfile = gzip.GzipFile(mode='wb', fileobj=buffer, compresslevel=9)
gzfile.write(s)
gzfile.close()
return buffer.getvalue()
if 'deflate' in req.params:
size_uncompressed = len(s)
compressed_s = compressForDeflate(s)
s = compressed_s
size_compressed = len(s)
try:
percentage = 100.0 * size_compressed / size_uncompressed
except:
percentage = 100.0
req.reply_headers['Content-Encoding'] = "deflate"
d['timetable'].append([
"'deflate' in request: executed compressForDeflate(s), %d bytes -> %d bytes (compressed to: %.1f %%)"
% (size_uncompressed, size_compressed, percentage),
time.time() - atime
])
atime = time.time()
elif 'gzip' in req.params:
size_uncompressed = len(s)
compressed_s = compressForGzip(s)
s = compressed_s
size_compressed = len(s)
try:
percentage = 100.0 * size_compressed / size_uncompressed
except:
percentage = 100.0
req.reply_headers['Content-Encoding'] = "gzip"
d['timetable'].append([
"'gzip' in request: executed compressForGzip(s), %d bytes -> %d bytes (compressed to: %.1f %%)"
% (size_uncompressed, size_compressed, percentage),
time.time() - atime
])
atime = time.time()
mimetype = 'text/html'
req.reply_headers['Content-Type'] = "text/xml; charset=utf-8"
req.reply_headers['Content-Length'] = len(s)
req.sendAsBuffer(s, mimetype, force=1)
d['timetable'].append([
"executed req.sendAsBuffer, %d bytes, mimetype='%s'" %
(len(s), mimetype),
time.time() - atime
])
atime = time.time()
return d['html_response_code'], len(s), d
