nfs3_Access.c

Go to the documentation of this file.

/*
 * vim:expandtab:shiftwidth=8:tabstop=8:
 *
 * Copyright CEA/DAM/DIF  (2008)
 * contributeur : Philippe DENIEL   philippe.deniel@cea.fr
 *                Thomas LEIBOVICI  thomas.leibovici@cea.fr
 *
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 3 of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 *
 * ---------------------------------------
 */

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif

#ifdef _SOLARIS
#include "solaris_port.h"
#endif

#include <stdio.h>
#include <string.h>
#include <pthread.h>
#include <fcntl.h>
#include <sys/file.h>           /* for having FNDELAY */
#include "HashData.h"
#include "HashTable.h"
#include "log.h"
#include "nfs23.h"
#include "nfs4.h"
#include "mount.h"
#include "nfs_core.h"
#include "cache_inode.h"
#include "nfs_exports.h"
#include "nfs_creds.h"
#include "nfs_proto_functions.h"
#include "nfs_proto_tools.h"
#include "nfs_tools.h"

int nfs3_Access(nfs_arg_t *parg,
                exportlist_t *pexport,
                fsal_op_context_t *pcontext,
                nfs_worker_data_t *pworker,
                struct svc_req *preq,
                nfs_res_t *pres)
{
  fsal_accessflags_t access_mode;
  cache_inode_status_t cache_status;
  cache_inode_file_type_t filetype;
  cache_entry_t *pentry = NULL;
  cache_inode_fsal_data_t fsal_data;
  fsal_attrib_list_t attr;
  int rc = NFS_REQ_OK;

  if(isDebug(COMPONENT_NFSPROTO))
    {
      char str[LEN_FH_STR];
      sprint_fhandle3(str, &(parg->arg_access3.object));
      LogDebug(COMPONENT_NFSPROTO,
               "REQUEST PROCESSING: Calling nfs3_Access handle: %s", str);
    }

  /* Is this a xattr FH ? */
  if(nfs3_Is_Fh_Xattr(&(parg->arg_access3.object)))
    {
      rc = nfs3_Access_Xattr(parg, pexport, pcontext, preq, pres);
      goto out;
    }

  /* to avoid setting it on each error case */
  pres->res_access3.ACCESS3res_u.resfail.obj_attributes.attributes_follow
    = FALSE;

  /* Convert file handle into a fsal_handle */
  if(nfs3_FhandleToFSAL(&(parg->arg_access3.object),
                        &fsal_data.fh_desc, pcontext) == 0)
    {
      rc = NFS_REQ_DROP;
      goto out;
    }

  /* Get the entry in the cache_inode */
  if((pentry = cache_inode_get(&fsal_data,
                               &attr,
                               pcontext,
                               NULL,
                               &cache_status)) == NULL)
    {
      if(nfs_RetryableError(cache_status))
        {
          rc = NFS_REQ_DROP;
          goto out;
        }
      else
        {
          pres->res_access3.status = nfs3_Errno(cache_status);
          rc = NFS_REQ_OK;
          goto out;
        }
    }

  /* Get file type */
  filetype = cache_inode_fsal_type_convert(attr.type);

  access_mode = 0;

  if(parg->arg_access3.access & ACCESS3_READ)
    access_mode |= nfs_get_access_mask(ACCESS3_READ, &attr);

  if(parg->arg_access3.access & ACCESS3_MODIFY)
    access_mode |= nfs_get_access_mask(ACCESS3_MODIFY, &attr);

  if(parg->arg_access3.access & ACCESS3_EXTEND)
    access_mode |= nfs_get_access_mask(ACCESS3_EXTEND, &attr);

  if(filetype == REGULAR_FILE)
    {
      if(parg->arg_access3.access & ACCESS3_EXECUTE)
        access_mode |= nfs_get_access_mask(ACCESS3_EXECUTE, &attr);
    }
  else if(parg->arg_access3.access & ACCESS3_LOOKUP)
    access_mode |= nfs_get_access_mask(ACCESS3_LOOKUP, &attr);

  if(filetype == DIRECTORY)
    {
      if(parg->arg_access3.access & ACCESS3_DELETE)
        access_mode |= nfs_get_access_mask(ACCESS3_DELETE, &attr);
    }

  nfs3_access_debug("requested access", parg->arg_access3.access);

  /* Perform the 'access' call */
  if(cache_inode_access(pentry,
                        access_mode,
                        pcontext, &cache_status) == CACHE_INODE_SUCCESS)
    {
      nfs3_access_debug("granted access", parg->arg_access3.access);

      /* In Unix, delete permission only applies to directories */

      if(filetype == DIRECTORY)
        pres->res_access3.ACCESS3res_u.resok.access = parg->arg_access3.access;
      else
        pres->res_access3.ACCESS3res_u.resok.access =
            (parg->arg_access3.access & ~ACCESS3_DELETE);

      /* Build Post Op Attributes */
      nfs_SetPostOpAttr(pexport,
                        &attr,
                        &(pres->res_access3.ACCESS3res_u
                          .resok.obj_attributes));

      pres->res_access3.status = NFS3_OK;
      rc = NFS_REQ_OK;
      goto out;
    }

  if(cache_status == CACHE_INODE_FSAL_EACCESS)
    {
      /*
       * We have to determine which access bits are good one by one 
       */
      pres->res_access3.ACCESS3res_u.resok.access = 0;

      access_mode = nfs_get_access_mask(ACCESS3_READ, &attr);
      if(cache_inode_access(pentry,
                            access_mode,
                            pcontext, &cache_status) == CACHE_INODE_SUCCESS)
        pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_READ;

      access_mode = nfs_get_access_mask(ACCESS3_MODIFY, &attr);
      if(cache_inode_access(pentry,
                            access_mode,
                            pcontext, &cache_status) == CACHE_INODE_SUCCESS)
        pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_MODIFY;

      access_mode = nfs_get_access_mask(ACCESS3_EXTEND, &attr);
      if(cache_inode_access(pentry,
                            access_mode,
                            pcontext, &cache_status) == CACHE_INODE_SUCCESS)
        pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_EXTEND;

      if(filetype == REGULAR_FILE)
        {
          access_mode = nfs_get_access_mask(ACCESS3_EXECUTE, &attr);
          if(cache_inode_access(pentry,
                                access_mode,
                                pcontext, &cache_status) == CACHE_INODE_SUCCESS)
            pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_EXECUTE;
        }
      else
        {
          access_mode = nfs_get_access_mask(ACCESS3_LOOKUP, &attr);
          if(cache_inode_access(pentry,
                                access_mode,
                                pcontext, &cache_status) == CACHE_INODE_SUCCESS)
            pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_LOOKUP;
        }

      if(filetype == DIRECTORY)
        {
          access_mode = nfs_get_access_mask(ACCESS3_DELETE, &attr);
          if(cache_inode_access(pentry,
                                access_mode,
                                pcontext, &cache_status) == CACHE_INODE_SUCCESS)
            pres->res_access3.ACCESS3res_u.resok.access |= ACCESS3_DELETE;
        }

      nfs3_access_debug("reduced access", pres->res_access3.ACCESS3res_u.resok.access);

      pres->res_access3.status = NFS3_OK;
      rc = NFS_REQ_OK;
      goto out;
    }

  /* If we are here, there was an error */
  if(nfs_RetryableError(cache_status))
    {
      rc = NFS_REQ_DROP;
      goto out;
    }

  nfs_SetFailedStatus(pcontext, pexport,
                      NFS_V3,
                      cache_status,
                      NULL,
                      &pres->res_access3.status,
                      pentry,
                      &(pres->res_access3.ACCESS3res_u.resfail.obj_attributes),
                      NULL, NULL, NULL, NULL, NULL, NULL);

out:

  if (pentry)
    {
      cache_inode_put(pentry);
    }

  return rc;
}                               /* nfs3_Access */

void nfs3_Access_Free(nfs_res_t * pres)
{
  /* Nothing to do */
  return;
}                               /* nfs3_Access_Free */