void perform_zone_del(int sockfd, engineconfig_type *config, const char *zone, int need_write_xml, bool quiet) { GOOGLE_PROTOBUF_VERIFY_VERSION; OrmConnRef conn; if (!ods_orm_connect(sockfd, config, conn)) return; // error already reported. std::string qzone; bool is_del_succeed = false; if (strlen(zone) > 0) { if (!OrmQuoteStringValue(conn, std::string(zone), qzone)) { const char *emsg = "quoting zone value failed"; ods_log_error_and_printf(sockfd,module_str,emsg); return; } } { OrmTransactionRW transaction(conn); if (!transaction.started()) { const char *emsg = "could not start database transaction"; ods_log_error_and_printf(sockfd,module_str,emsg); return; } if (qzone.empty()) { OrmResultRef rows; ::ods::keystate::EnforcerZone enfzone; std::vector<std::string> del_zones; bool ok = OrmMessageEnum(conn, enfzone.descriptor(), rows); if (!ok) { transaction.rollback(); ods_log_error("[%s] enum enforcer zone failed", module_str); return; } for (bool next=OrmFirst(rows); next; next = OrmNext(rows)) { OrmContextRef context; if (!OrmGetMessage(rows, enfzone, true, context)) { rows.release(); transaction.rollback(); ods_log_error("[%s] retrieving zone from database failed"); return; } del_zones.push_back(enfzone.name()); } rows.release(); for (std::vector<std::string>::iterator it = del_zones.begin(); it != del_zones.end(); ++it) { std::string del_zone; if (!OrmQuoteStringValue(conn, std::string(*it), del_zone)) { transaction.rollback(); const char *emsg = "quoting zone value failed"; ods_log_error_and_printf(sockfd,module_str,emsg); return; } if (!OrmMessageDeleteWhere(conn, ::ods::keystate::EnforcerZone::descriptor(), "name = %s", del_zone.c_str())) { transaction.rollback(); const char *emsg = "unable to delete zone %s"; ods_log_error_and_printf(sockfd,module_str,emsg, it->c_str()); return; } is_del_succeed = true; } } else { //find the zone OrmResultRef rows; if (!OrmMessageEnumWhere(conn, ::ods::keystate::EnforcerZone::descriptor(), rows, "name = %s", qzone.c_str())) { transaction.rollback(); ods_log_error_and_printf(sockfd, module_str, "unable to find zone %s", qzone.c_str()); return; } if (!OrmFirst(rows)) { rows.release(); transaction.rollback(); ods_log_error_and_printf(sockfd, module_str, "Couldn't find zone %s", qzone.c_str()); return; } rows.release(); if (!OrmMessageDeleteWhere(conn, ::ods::keystate::EnforcerZone::descriptor(), "name = %s", qzone.c_str())) { transaction.rollback(); const char *emsg = "unable to delete zone %s"; ods_log_error_and_printf(sockfd,module_str,emsg,qzone.c_str()); return; } is_del_succeed = true; } if (!transaction.commit()) { const char *emsg = "committing delete of zone %s to database failed"; ods_log_error_and_printf(sockfd,module_str,emsg,qzone.c_str()); return; } } // Now lets write out the required files - the internal list and optionally the zonelist.xml // Note at the moment we re-export the whole file in zonelist.xml format here but this should be optimised.... if (is_del_succeed) { if (!perform_write_signzone_file(sockfd, config)) { ods_log_error_and_printf(sockfd, module_str, "failed to write internal zonelist"); } if (need_write_xml) { if (!perform_zonelist_export_to_file(config->zonelist_filename,config)) { ods_log_error_and_printf(sockfd, module_str, "failed to write zonelist.xml"); } if (!quiet) { if (qzone.empty()) { ods_printf(sockfd, "Deleted all zones in database and zonelist.xml updated.\n"); } else { ods_printf(sockfd, "Deleted zone: %s in database and zonelist.xml updated.\n", zone); } } } else if (!quiet) { if (qzone.empty()) { ods_printf(sockfd, "Deleted all zones in database only. Use the --xml flag or run \"ods-enforcer zonelist export\" if an update of zonelist.xml is required.\n", zone); } else { ods_printf(sockfd, "Deleted zone: %s in database only. Use the --xml flag or run \"ods-enforcer zonelist export\" if an update of zonelist.xml is required.\n", zone); } } } }
void perform_update_kasp(int sockfd, engineconfig_type *config) { GOOGLE_PROTOBUF_VERIFY_VERSION; std::auto_ptr< ::ods::kasp::KaspDocument > kaspDoc; if (!load_kasp_xml(sockfd, config->policy_filename, kaspDoc)) return; // errors have already been reported. OrmConnRef conn; if (!ods_orm_connect(sockfd, config, conn)) return; // errors have already been reported. //TODO: SPEED: We should create an index on the Policy.name column // Go through the list of policies from the kasp.xml file to determine // if we need to insert new policies to the policies table. for (int i=0; i<kaspDoc->kasp().policies_size(); ++i) { const ::ods::kasp::Policy &policy = kaspDoc->kasp().policies(i); { OrmTransactionRW transaction(conn); if (!transaction.started()) { ods_log_error_and_printf(sockfd, module_str, "starting a database transaction for " "updating a policy failed"); return; } std::string qpolicy; if (!OrmQuoteStringValue(conn, policy.name(), qpolicy)) { ods_log_error_and_printf(sockfd, module_str, "quoting a string failed"); return; } // delete the existing policy from the database if (!OrmMessageDeleteWhere(conn, policy.descriptor(), "name=%s",qpolicy.c_str())) { ods_log_error_and_printf(sockfd, module_str, "failed to delete policy with " "name %s",policy.name().c_str()); return; } // insert the policy we read from the kasp.xml file. pb::uint64 policyid; if (!OrmMessageInsert(conn, policy, policyid)) { ods_log_error_and_printf(sockfd, module_str, "inserting policy into the database failed"); return; } // commit the update policy to the database. if (!transaction.commit()) { ods_log_error_and_printf(sockfd, module_str, "committing policy to the database failed"); return; } } } }