source: ISOcat/trunk/mod-ISOcat-manage-access/manage/cr.acc @ 2029

<accessor debug="false">
        <name>ISOcat.manage.access.cr</name>
        <descr>Check if the user indicated by the credentials is allowed to access this CR.</descr>
        <param manadatory="true">
                <name>cr</name>
                <descr>the CR</descr>
                <source>
                        <param/>
                        <nvp/>
                        <session/>
                </source>
                <type canonical="true">string</type>
        </param>
        <param mandatory="true">
                <name>credentials</name>
                <descr>the credentials of the user trying to access the DC</descr>
                <type canonical="true">string</type>
        </param>
        <idoc>
                <accessor-debug>
                        <instr>
                                <type>sloot.log</type>
                                <operator>
                                        <msg>DBG:.....:ISOcat.manage.access.cr(CR[{string($cr)}],credentials[{string($credentials)}])</msg>
                                </operator>
                                <cr>var:cr</cr>
                                <credentials>var:credentials</credentials>
                        </instr>
                </accessor-debug>
                <instr>
                        <type>copy</type>
                        <operand>
                                <string/>
                        </operand>
                        <target>var:mode</target>
                </instr>
                <!-- check if the credentials are a valid pair -->
                <instr>
                        <type>ISOcat.access.data.credentials</type>
                        <credentials>var:credentials</credentials>
                        <target>var:access</target>
                </instr>
                <!-- check if the user has access to the CR -->
                <if>
                        <cond>
                                <instr>
                                        <type>copy</type>
                                        <operand>var:access</operand>
                                        <target>this:cond</target>
                                </instr>
                        </cond>
                        <then>
                                <instr>
                                        <type>sloot.xpath2eval</type>
                                        <operand>var:credentials</operand>
                                        <operator>
                                                <xpath>substring-before(.,':')</xpath>
                                        </operator>
                                        <param>
                                                <return>
                                                        <canonical/>
                                                        <string/>
                                                </return>
                                        </param>
                                        <target>var:user</target>
                                </instr>
                                <instr>
                                        <type>ISOcat.manage.user.id</type>
                                        <user>var:user</user>
                                        <target>var:uid</target>
                                </instr>
                                <instr>
                                        <type>ISOcat.manage.cr.scope</type>
                                        <cr>var:cr</cr>
                                        <target>var:scope</target>
                                </instr>
                                <instr>
                                        <type>sloot.xquery</type>
                                        <operator>
                                                <string>
                                                {
                                                        if      (exists($scope//account[@ref=string($uid)]))
                                                        then    (string(($scope//account[@ref=string($uid)])[last()]/@rights))
                                                        else    ('')
                                                }
                                                </string>
                                        </operator>
                                        <scope>var:scope</scope>
                                        <uid>var:uid</uid>
                                        <target>var:mode</target>
                                </instr>
                                <accessor-debug>
                                        <instr>
                                                <type>sloot.log</type>
                                                <operator>
                                                        <msg>DBG:.....:ISOcat.manage.access.cr(CR[{string($cr)}],credentials[{string($credentials)}]):CR access mode:{string($mode)}</msg>
                                                </operator>
                                                <cr>var:cr</cr>
                                                <credentials>var:credentials</credentials>
                                                <mode>var:mode</mode>
                                        </instr>
                                </accessor-debug>
                        </then>
                        <else>
                                <accessor-debug>
                                        <instr>
                                                <type>sloot.log</type>
                                                <operator>
                                                        <msg>DBG:.....:ISOcat.manage.access.cr(CR[{string($cr)}],credentials[{string($credentials)}]):invalid credentials</msg>
                                                </operator>
                                                <cr>var:cr</cr>
                                                <credentials>var:credentials</credentials>
                                                <target>var:msg</target>
                                        </instr>
                                        <instr>
                                                <type>sloot.log</type>
                                                <operand>var:msg</operand>
                                        </instr>
                                </accessor-debug>
                        </else>
                </if>
                <instr>
                        <type>copy</type>
                        <operand>var:mode</operand>
                        <target>this:response</target>
                </instr>
        </idoc>
        <exception>
                <debug/>
                <trace>ffcpl:/trace/cr.exception.xml</trace>
                <response>
                        <string/>
                </response>
        </exception>
        <response>
                <debug>ffcpl:/trace/cr.response.xml</debug>
                <mime>application/xml</mime>
        </response>
</accessor>