[CalendarServer-changes] [1453] CalendarServer/trunk/twistedcaldav/method

[source_changes at macosforge.org]

Revision: 1453
          http://trac.macosforge.org/projects/calendarserver/changeset/1453
Author:   cdaboo at apple.com
Date:     2007-04-05 13:54:34 -0700 (Thu, 05 Apr 2007)

Log Message:
-----------
Make sure free-busy report can be run with only CALDAV:read-free-busy privilege on the calendar collection.

Modified Paths:
--------------
    CalendarServer/trunk/twistedcaldav/method/__init__.py

Added Paths:
-----------
    CalendarServer/trunk/twistedcaldav/method/report.py

Modified: CalendarServer/trunk/twistedcaldav/method/__init__.py
===================================================================
--- CalendarServer/trunk/twistedcaldav/method/__init__.py	2007-04-05 18:21:28 UTC (rev 1452)
+++ CalendarServer/trunk/twistedcaldav/method/__init__.py	2007-04-05 20:54:34 UTC (rev 1453)
@@ -29,6 +29,7 @@
     "mkcalendar",
     "mkcol",
     "put",
+    "report",
     "report_calquery",
     "report_freebusy",
     "report_multiget",

Added: CalendarServer/trunk/twistedcaldav/method/report.py
===================================================================
--- CalendarServer/trunk/twistedcaldav/method/report.py	                        (rev 0)
+++ CalendarServer/trunk/twistedcaldav/method/report.py	2007-04-05 20:54:34 UTC (rev 1453)
@@ -0,0 +1,133 @@
+# -*- test-case-name: twisted.web2.dav.test.test_report -*-
+##
+# Copyright (c) 2005 Apple Computer, Inc. All rights reserved.
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+# 
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+# 
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+#
+# DRI: Wilfredo Sanchez, wsanchez at apple.com
+##
+
+"""
+WebDAV REPORT method
+"""
+
+__all__ = ["http_REPORT"]
+
+import string
+
+from twisted.python import log
+from twisted.internet.defer import deferredGenerator, waitForDeferred
+from twisted.web2 import responsecode
+from twisted.web2.http import HTTPError, StatusResponse
+from twisted.web2.dav import davxml
+from twisted.web2.dav.element.parser import lookupElement
+from twisted.web2.dav.http import ErrorResponse
+from twisted.web2.dav.util import davXMLFromStream
+
+from twistedcaldav import caldavxml
+
+max_number_of_matches = 500
+
+class NumberOfMatchesWithinLimits(Exception):
+    pass
+
+def http_REPORT(self, request):
+    """
+    Respond to a REPORT request. (RFC 3253, section 3.6)
+    """
+    if not self.fp.exists():
+        log.err("File not found: %s" % (self.fp.path,))
+        raise HTTPError(responsecode.NOT_FOUND)
+
+    #
+    # Read request body
+    #
+    try:
+        doc = waitForDeferred(davXMLFromStream(request.stream))
+        yield doc
+        doc = doc.getResult()
+    except ValueError, e:
+        log.err("Error while handling REPORT body: %s" % (e,))
+        raise HTTPError(StatusResponse(responsecode.BAD_REQUEST, str(e)))
+
+    if doc is None:
+        raise HTTPError(StatusResponse(
+            responsecode.BAD_REQUEST,
+            "REPORT request body may not be empty"
+        ))
+
+    #
+    # Parse request
+    #
+    namespace = doc.root_element.namespace
+    name = doc.root_element.name
+
+    def to_method(s):
+        ok = string.ascii_letters + string.digits + "_"
+        out = []
+        for c in s:
+            if c in ok:
+                out.append(c)
+            else:
+                out.append("_")
+        return "report_" + "".join(out)
+
+    if namespace:
+        method_name = to_method(namespace + "_" + name)
+    else:
+        method_name = to_method(name)
+
+    try:
+        method = getattr(self, method_name)
+        
+        # Also double-check via supported-reports property
+        reports = self.supportedReports()
+        test = lookupElement((namespace, name))
+        if not test:
+            raise AttributeError()
+        test = davxml.Report(test())
+        if test not in reports:
+            raise AttributeError()
+    except AttributeError:
+        #
+        # Requested report is not supported.
+        #
+        log.err("Unsupported REPORT {%s}%s for resource %s (no method %s)"
+                % (namespace, name, self, method_name))
+
+        raise HTTPError(ErrorResponse(
+            responsecode.FORBIDDEN,
+            davxml.SupportedReport()
+        ))
+
+    #
+    # Check authentication and access controls
+    #
+    privileges = (davxml.Read(),)
+    if method_name == "report_urn_ietf_params_xml_ns_caldav_free_busy_query":
+        privileges = (caldavxml.ReadFreeBusy(),)
+    x = waitForDeferred(self.authorize(request, privileges))
+    yield x
+    x.getResult()
+
+    d = waitForDeferred(method(request, doc.root_element))
+    yield d
+    yield d.getResult()
+
+http_REPORT = deferredGenerator(http_REPORT)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.macosforge.org/pipermail/calendarserver-changes/attachments/20070405/ffce6e2c/attachment.html