* @copyright (c) 2007/8 by Ralf Becker * @version $Id$ */ require_once('HTTP/WebDAV/Server.php'); /** * eGroupWare: GroupDAV access * * Using the PEAR HTTP/WebDAV/Server class (which need to be installed!) * * @link http://www.groupdav.org GroupDAV spec */ class groupdav extends HTTP_WebDAV_Server { /** * GroupDAV namespace */ const GROUPDAV = 'http://groupdav.org/'; /** * CalDAV namespace */ const CALDAV = 'urn:ietf:params:xml:ns:caldav'; /** * CardDAV namespace */ const CARDDAV = 'urn:ietf:params:xml:ns:carddav'; /** * Realm and powered by string */ const REALM = 'eGroupWare CalDAV/CardDAV/GroupDAV server'; var $dav_powered_by = self::REALM; var $root = array( 'calendar' => array(self::GROUPDAV => 'vevent-collection', self::CALDAV => 'calendar'), 'addressbook' => array(self::GROUPDAV => 'vcard-collection', self::CARDDAV => 'addressbook'), 'infolog' => array(self::GROUPDAV => 'vtodo-collection'), ); /** * Debug level: 0 = nothing, 1 = function calls, 2 = more info, 3 = complete $_SERVER array * * The debug messages are send to the apache error_log * * @var integer */ var $debug = 1; /** * eGW's charset * * @var string */ var $egw_charset; /** * Reference to the translation class * * @var translation */ var $translation; /** * Instance of our application specific handler * * @var groupdav_handler */ var $handler; function __construct() { if ($this->debug > 2) foreach($_SERVER as $name => $val) error_log("groupdav: \$_SERVER[$name]='$val'"); parent::HTTP_WebDAV_Server(); $this->translation =& $GLOBALS['egw']->translation; $this->egw_charset = $this->translation->charset(); } function _instancicate_handler($app) { $this->handler = groupdav_handler::app_handler($app); } /** * OPTIONS request, allow to modify the standard responses from the pear-class * * @param string $path * @param array &$dav * @param array &$allow */ function OPTIONS($path, &$dav, &$allow) { list(,$app) = explode('/',$path); switch($app) { case 'calendar': $dav[] = 'calendar-access'; break; case 'addressbook': $dav[] = 'addressbook'; break; } // not yet implemented: $dav[] = 'access-control'; } /** * PROPFIND and REPORT method handler * * @param array general parameter passing array * @param array return array for file properties * @return bool true on success */ function PROPFIND(&$options, &$files,$method='PROPFIND') { if ($this->debug) error_log(__CLASS__."::$method(".str_replace(array("\n",' ',"\t"),'',print_r($options,true)).')'); // parse path in form [/account_lid]/app[/more] if (!self::_parse_path($options['path'],$id,$app,$user) && $app && !$user) { if ($this->debug > 1) error_log(__CLASS__."::$method: user=$user, app=$app, id=$id: 404 not found!"); return '404 Not Found'; } if ($this->debug > 1) error_log(__CLASS__."::$method: user=$user, app='$app', id=$id"); $files = array(); if (!$app) // root folder containing apps { // self url $files['files'][] = array( 'path' => '/', 'props' => array( self::mkprop('displayname','eGroupWare'), self::mkprop('resourcetype','collection'), // adding the calendar extra property (calendar-home-set, etc.) here, allows apple iCal to "autodetect" the URL self::mkprop(groupdav::CALDAV,'calendar-home-set',$_SERVER['SCRIPT_NAME'].'/calendar/'), ), ); // principals collection $files['files'][] = array( 'path' => '/principals/', 'props' => array( self::mkprop('displayname',lang('Accounts')), self::mkprop('resourcetype','collection'), ), ); // groups collection $files['files'][] = array( 'path' => '/groups/', 'props' => array( self::mkprop('displayname',lang('Groups')), self::mkprop('resourcetype','collection'), ), ); foreach($this->root as $app => $data) { if (!$GLOBALS['egw_info']['user']['apps'][$app]) continue; // no rights for the given app $extra_props = 'groupdav_'.$app.'::extra_properties'; $files['files'][] = array( 'path' => '/'.$app.'/', 'props' => call_user_func($app.'_groupdav::extra_properties',array( self::mkprop('displayname',$this->translation->convert(lang($app),$this->egw_charset,'utf-8')), self::mkprop('resourcetype',$this->_resourcetype($app)), )), ); } return true; } if (!in_array($app,array('principals','groups')) && !$GLOBALS['egw_info']['user']['apps'][$app]) { error_log(__CLASS__."::$method(path=$options[path]) 403 Forbidden: no app rights for '$app'"); return '403 Forbidden'; // no rights for the given app } if (($handler = groupdav_handler::app_handler($app,$this->debug))) { if ($method != 'REPORT' && !$id) // no self URL for REPORT requests (only PROPFIND) or propfinds on an id { $files['files'][] = array( 'path' => '/'.$app.'/', 'props' => $handler->extra_properties(array( self::mkprop('displayname',$this->translation->convert(lang($app),$this->egw_charset,'utf-8')), // Kontact doubles the folder, if the self URL contains the GroupDAV/CalDAV resourcetypes self::mkprop('resourcetype', $this->_resourcetype($app,strpos($_SERVER['HTTP_USER_AGENT'],'KHTML') !== false)), )), ); } return $handler->propfind($options['path'],$options,$files,$user,$id); } return '501 Not Implemented'; } /** * Return resourcetype(s) for a given app * * @param string $app * @param boolean $no_extra_types=false should the GroupDAV and CalDAV types be added (Kontact has problems with it in self URL) * @return array or DAV properties generated via */ function _resourcetype($app,$no_extra_types=false) { $resourcetype = array( self::mkprop('collection','collection'), ); if (!$no_extra_types && isset($this->root[$app])) { foreach($this->root[$app] as $ns => $type) { $resourcetype[] = self::mkprop($ns,'resourcetype', $type); } } return $resourcetype; } /** * CalDAV/CardDAV REPORT method handler * * just calls PROPFIND() * * @param array general parameter passing array * @param array return array for file properties * @return bool true on success */ function REPORT(&$options, &$files) { if ($this->debug > 1) error_log(__METHOD__.'('.str_replace(array("\n",' '),'',print_r($options,true)).')'); return $this->PROPFIND($options,$files,'REPORT'); } /** * CalDAV/CardDAV REPORT method handler to get HTTP_WebDAV_Server to process REPORT requests * * Just calls http_PROPFIND() */ function http_REPORT() { parent::http_PROPFIND('REPORT'); } /** * GET method handler * * @param array parameter passing array * @return bool true on success */ function GET(&$options) { if ($this->debug) error_log(__METHOD__.'('.print_r($options,true).')'); if (!$this->_parse_path($options['path'],$id,$app,$user)) { return '404 Not Found'; } if (($handler = groupdav_handler::app_handler($app,$this->debug))) { return $handler->get($options,$id); } return '501 Not Implemented'; } /** * PUT method handler * * @param array parameter passing array * @return bool true on success */ function PUT(&$options) { // read the content in a string, if a stream is given if (isset($options['stream'])) { $options['content'] = ''; while(!feof($options['stream'])) { $options['content'] .= fread($options['stream'],8192); } } if ($this->debug) error_log(__METHOD__.'('.print_r($options,true).')'); if (!$this->_parse_path($options['path'],$id,$app,$user)) { return '404 Not Found'; } if (($handler = groupdav_handler::app_handler($app,$this->debug))) { $status = $handler->put($options,$id,$user); // set default stati: true --> 204 No Content, false --> should be already handled if (is_bool($status)) $status = $status ? '204 No Content' : '400 Something went wrong'; return $status; } return '501 Not Implemented'; } /** * DELETE method handler * * @param array general parameter passing array * @return bool true on success */ function DELETE($options) { if ($this->debug) error_log(__METHOD__.'('.print_r($options,true).')'); if (!$this->_parse_path($options['path'],$id,$app,$user)) { return '404 Not Found'; } if (($handler = groupdav_handler::app_handler($app,$this->debug))) { $status = $handler->delete($options,$id); // set default stati: true --> 204 No Content, false --> should be already handled if (is_bool($status)) $status = $status ? '204 No Content' : '400 Something went wrong'; return $status; } return '501 Not Implemented'; } /** * MKCOL method handler * * @param array general parameter passing array * @return bool true on success */ function MKCOL($options) { if ($this->debug) error_log(__METHOD__.'('.print_r($options,true).')'); return '501 Not Implemented'; } /** * MOVE method handler * * @param array general parameter passing array * @return bool true on success */ function MOVE($options) { if ($this->debug) error_log(__METHOD__.'('.print_r($options,true).')'); return '501 Not Implemented'; } /** * COPY method handler * * @param array general parameter passing array * @return bool true on success */ function COPY($options, $del=false) { if ($this->debug) error_log('groupdav::'.($del ? 'MOVE' : 'COPY').'('.print_r($options,true).')'); return '501 Not Implemented'; } /** * LOCK method handler * * @param array general parameter passing array * @return bool true on success */ function LOCK(&$options) { error_log(__METHOD__.'('.str_replace(array("\n",' '),'',print_r($options,true)).')'); self::_parse_path($options['path'],$id,$app,$user); $path = egw_vfs::app_entry_lock_path($app,$id); // get the app handler, to check if the user has edit access to the entry (required to make locks) $handler = groupdav_handler::app_handler($app); // TODO recursive locks on directories not supported yet if (!$id || !empty($options['depth']) || !$handler->check_access(EGW_ACL_EDIT,$id)) { return '409 Conflict'; } $options['timeout'] = time()+300; // 5min. hardcoded // dont know why, but HTTP_WebDAV_Server passes the owner in D:href tags, which get's passed unchanged to checkLock/PROPFIND // that's wrong according to the standard and cadaver does not show it on discover --> strip_tags removes eventual tags if (($ret = egw_vfs::lock($path,$options['locktoken'],$options['timeout'],strip_tags($options['owner']), $options['scope'],$options['type'],isset($options['update']),false)) && !isset($options['update'])) // false = no ACL check { return $ret ? '200 OK' : '409 Conflict'; } return $ret; } /** * UNLOCK method handler * * @param array general parameter passing array * @return bool true on success */ function UNLOCK(&$options) { self::_parse_path($options['path'],$id,$app,$user); $path = egw_vfs::app_entry_lock_path($app,$id); error_log(__METHOD__.'('.str_replace(array("\n",' '),'',print_r($options,true)).") path=$path"); return egw_vfs::unlock($path,$options['token']) ? '204 No Content' : '409 Conflict'; } /** * checkLock() helper * * @param string resource path to check for locks * @return bool true on success */ function checkLock($path) { self::_parse_path($path,$id,$app,$user); $path = egw_vfs::app_entry_lock_path($app,$id); return egw_vfs::checkLock($path); } /** * Parse a path into it's id, app and user parts * * @param string $path * @param int &$id * @param string &$app addressbook, calendar, infolog (=infolog) * @param int &$user * @return boolean true on success, false on error */ function _parse_path($path,&$id,&$app,&$user) { $parts = explode('/',$path); if (in_array($parts[1],array('principals','groups'))) { $user = $GLOBALS['egw_info']['user']['account_id']; list(,$app,$id) = $parts; return true; } list($id) = explode('.',array_pop($parts)); // remove evtl. .ics extension $app = array_pop($parts); if (($user = array_pop($parts))) { $user = $GLOBALS['egw']->accounts->name2id($user,'account_lid',$app != 'addressbook' ? 'u' : null); } else { $user = $GLOBALS['egw_info']['user']['account_id']; } if (!($ok = $id && in_array($app,array('addressbook','calendar','infolog','principals','groups')) && $user)) { error_log(__METHOD__."('$path') returning false: id=$id, app='$app', user=$user"); } return $ok; } }