Open-ILS/src/c-apps/oils_cstore.c

   1 #include "opensrf/osrf_application.h"
   2 #include "opensrf/osrf_settings.h"
   3 #include "opensrf/osrf_message.h"
   4 #include "opensrf/utils.h"
   5 #include "opensrf/osrf_json.h"
   6 #include "opensrf/log.h"
   7 #include "openils/oils_utils.h"
   8 #include <dbi/dbi.h>
   9
  10 #include <time.h>
  11 #include <stdlib.h>
  12 #include <string.h>
  13 #include <unistd.h>
  14
  15 #ifdef RSTORE
  16 #  define MODULENAME "open-ils.reporter-store"
  17 #else
  18 #  ifdef PCRUD
  19 #    define MODULENAME "open-ils.pcrud"
  20 #  else
  21 #    define MODULENAME "open-ils.cstore"
  22 #  endif
  23 #endif
  24
  25 #define SUBSELECT       4
  26 #define DISABLE_I18N    2
  27 #define SELECT_DISTINCT 1
  28 #define AND_OP_JOIN     0
  29 #define OR_OP_JOIN      1
  30
  31 int osrfAppChildInit();
  32 int osrfAppInitialize();
  33 void osrfAppChildExit();
  34
  35 static int verifyObjectClass ( osrfMethodContext*, const jsonObject* );
  36
  37 int beginTransaction ( osrfMethodContext* );
  38 int commitTransaction ( osrfMethodContext* );
  39 int rollbackTransaction ( osrfMethodContext* );
  40
  41 int setSavepoint ( osrfMethodContext* );
  42 int releaseSavepoint ( osrfMethodContext* );
  43 int rollbackSavepoint ( osrfMethodContext* );
  44
  45 int doJSONSearch ( osrfMethodContext* );
  46
  47 int dispatchCRUDMethod ( osrfMethodContext* );
  48 static jsonObject* doCreate ( osrfMethodContext*, int* );
  49 static jsonObject* doRetrieve ( osrfMethodContext*, int* );
  50 static jsonObject* doUpdate ( osrfMethodContext*, int* );
  51 static jsonObject* doDelete ( osrfMethodContext*, int* );
  52 static jsonObject* doFieldmapperSearch ( osrfMethodContext*, osrfHash*,
  53         const jsonObject*, int* );
  54 static jsonObject* oilsMakeFieldmapperFromResult( dbi_result, osrfHash* );
  55 static jsonObject* oilsMakeJSONFromResult( dbi_result );
  56
  57 static char* searchWriteSimplePredicate ( const char*, osrfHash*,
  58         const char*, const char*, const char* );
  59 static char* searchSimplePredicate ( const char*, const char*, osrfHash*, const jsonObject* );
  60 static char* searchFunctionPredicate ( const char*, osrfHash*, const jsonObject*, const char* );
  61 static char* searchFieldTransform ( const char*, osrfHash*, const jsonObject*);
  62 static char* searchFieldTransformPredicate ( const char*, osrfHash*, jsonObject*, const char* );
  63 static char* searchBETWEENPredicate ( const char*, osrfHash*, jsonObject* );
  64 static char* searchINPredicate ( const char*, osrfHash*, const jsonObject*, const char* );
  65 static char* searchPredicate ( const char*, osrfHash*, jsonObject* );
  66 static char* searchJOIN ( const jsonObject*, osrfHash* );
  67 static char* searchWHERE ( const jsonObject*, osrfHash*, int, osrfMethodContext* );
  68 static char* buildSELECT ( jsonObject*, jsonObject*, osrfHash*, osrfMethodContext* );
  69
  70 static char* SELECT ( osrfMethodContext*, jsonObject*, jsonObject*, jsonObject*, jsonObject*, jsonObject*, jsonObject*, jsonObject*, int );
  71
  72 void userDataFree( void* );
  73 static void sessionDataFree( char*, void* );
  74 static char* getSourceDefinition( osrfHash* );
  75
  76 #ifdef PCRUD
  77 static jsonObject* verifyUserPCRUD( osrfMethodContext* );
  78 static int verifyObjectPCRUD( osrfMethodContext*, const jsonObject* );
  79 #endif
  80
  81 static dbi_conn writehandle; /* our MASTER db connection */
  82 static dbi_conn dbhandle; /* our CURRENT db connection */
  83 //static osrfHash * readHandles;
  84 static jsonObject* jsonNULL = NULL; //
  85 static int max_flesh_depth = 100;
  86
  87 /* called when this process is about to exit */
  88 void osrfAppChildExit() {
  89     osrfLogDebug(OSRF_LOG_MARK, "Child is exiting, disconnecting from database...");
  90
  91     int same = 0;
  92     if (writehandle == dbhandle) same = 1;
  93     if (writehandle) {
  94         dbi_conn_query(writehandle, "ROLLBACK;");
  95         dbi_conn_close(writehandle);
  96         writehandle = NULL;
  97     }
  98     if (dbhandle && !same)
  99         dbi_conn_close(dbhandle);
 100
 101     // XXX add cleanup of readHandles whenever that gets used
 102
 103     return;
 104 }
 105
 106 int osrfAppInitialize() {
 107
 108     osrfLogInfo(OSRF_LOG_MARK, "Initializing the CStore Server...");
 109     osrfLogInfo(OSRF_LOG_MARK, "Finding XML file...");
 110
 111     if (!oilsIDLInit( osrf_settings_host_value("/IDL") )) return 1; /* return non-zero to indicate error */
 112
 113     growing_buffer* method_name = buffer_init(64);
 114 #ifndef PCRUD
 115     // Generic search thingy
 116     buffer_add(method_name, MODULENAME);
 117         buffer_add(method_name, ".json_query");
 118         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 119                                                    "doJSONSearch", "", 1, OSRF_METHOD_STREAMING );
 120 #endif
 121
 122     // first we register all the transaction and savepoint methods
 123     buffer_reset(method_name);
 124         OSRF_BUFFER_ADD(method_name, MODULENAME);
 125         OSRF_BUFFER_ADD(method_name, ".transaction.begin");
 126         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 127                                                    "beginTransaction", "", 0, 0 );
 128
 129     buffer_reset(method_name);
 130         OSRF_BUFFER_ADD(method_name, MODULENAME);
 131         OSRF_BUFFER_ADD(method_name, ".transaction.commit");
 132         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 133                                                    "commitTransaction", "", 0, 0 );
 134
 135     buffer_reset(method_name);
 136         OSRF_BUFFER_ADD(method_name, MODULENAME);
 137         OSRF_BUFFER_ADD(method_name, ".transaction.rollback");
 138         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 139                                                    "rollbackTransaction", "", 0, 0 );
 140
 141     buffer_reset(method_name);
 142         OSRF_BUFFER_ADD(method_name, MODULENAME);
 143         OSRF_BUFFER_ADD(method_name, ".savepoint.set");
 144         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 145                                                    "setSavepoint", "", 1, 0 );
 146
 147     buffer_reset(method_name);
 148         OSRF_BUFFER_ADD(method_name, MODULENAME);
 149         OSRF_BUFFER_ADD(method_name, ".savepoint.release");
 150         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 151                                                    "releaseSavepoint", "", 1, 0 );
 152
 153     buffer_reset(method_name);
 154         OSRF_BUFFER_ADD(method_name, MODULENAME);
 155         OSRF_BUFFER_ADD(method_name, ".savepoint.rollback");
 156         osrfAppRegisterMethod( MODULENAME, OSRF_BUFFER_C_STR(method_name),
 157                                                    "rollbackSavepoint", "", 1, 0 );
 158
 159     buffer_free(method_name);
 160
 161         static const char* global_method[] = {
 162                 "create",
 163                 "retrieve",
 164                 "update",
 165                 "delete",
 166                 "search",
 167                 "id_list"
 168         };
 169         const int global_method_count
 170                 = sizeof( global_method ) / sizeof ( global_method[0] );
 171
 172     int c_index = 0;
 173     char* classname;
 174     osrfStringArray* classes = osrfHashKeys( oilsIDL() );
 175     osrfLogDebug(OSRF_LOG_MARK, "%d classes loaded", classes->size );
 176     osrfLogDebug(OSRF_LOG_MARK,
 177                 "At least %d methods will be generated", classes->size * global_method_count);
 178
 179     while ( (classname = osrfStringArrayGetString(classes, c_index++)) ) {
 180         osrfLogInfo(OSRF_LOG_MARK, "Generating class methods for %s", classname);
 181
 182         osrfHash* idlClass = osrfHashGet(oilsIDL(), classname);
 183
 184         if (!osrfStringArrayContains( osrfHashGet(idlClass, "controller"), MODULENAME )) {
 185             osrfLogInfo(OSRF_LOG_MARK, "%s is not listed as a controller for %s, moving on", MODULENAME, classname);
 186             continue;
 187         }
 188
 189         char* virt = osrfHashGet(idlClass, "virtual");
 190         if (virt && !strcmp( virt, "true")) {
 191             osrfLogDebug(OSRF_LOG_MARK, "Class %s is virtual, skipping", classname );
 192             continue;
 193         }
 194
 195         // Look up some other attributes of the current class
 196         const char* idlClass_fieldmapper = osrfHashGet(idlClass, "fieldmapper");
 197                 const char* readonly = osrfHashGet(idlClass, "readonly");
 198 #ifdef PCRUD
 199         osrfHash* idlClass_permacrud = osrfHashGet(idlClass, "permacrud");
 200 #endif
 201
 202         int i;
 203         for( i = 0; i < global_method_count; ++i ) {
 204             const char* method_type = global_method[ i ];
 205             osrfLogDebug(OSRF_LOG_MARK,
 206                 "Using files to build %s class methods for %s", method_type, classname);
 207
 208             if (!idlClass_fieldmapper) continue;
 209
 210 #ifdef PCRUD
 211             if (!idlClass_permacrud) continue;
 212
 213             const char* tmp_method = method_type;
 214             if ( *tmp_method == 'i' || *tmp_method == 's') {
 215                 tmp_method = "retrieve";
 216             }
 217             if (!osrfHashGet( idlClass_permacrud, tmp_method )) continue;
 218 #endif
 219
 220             if (    readonly &&
 221                     !strncasecmp( "true", readonly, 4) &&
 222                     ( *method_type == 'c' || *method_type == 'u' || *method_type == 'd')
 223                ) continue;
 224
 225             osrfHash* method_meta = osrfNewHash();
 226             osrfHashSet(method_meta, idlClass, "class");
 227
 228             method_name =  buffer_init(64);
 229 #ifdef PCRUD
 230             buffer_fadd(method_name, "%s.%s.%s", MODULENAME, method_type, classname);
 231 #else
 232             char* st_tmp = NULL;
 233             char* part = NULL;
 234             char* _fm = strdup( idlClass_fieldmapper );
 235             part = strtok_r(_fm, ":", &st_tmp);
 236
 237             buffer_fadd(method_name, "%s.direct.%s", MODULENAME, part);
 238
 239             while ((part = strtok_r(NULL, ":", &st_tmp))) {
 240                                 OSRF_BUFFER_ADD_CHAR(method_name, '.');
 241                                 OSRF_BUFFER_ADD(method_name, part);
 242             }
 243                         OSRF_BUFFER_ADD_CHAR(method_name, '.');
 244                         OSRF_BUFFER_ADD(method_name, method_type);
 245             free(_fm);
 246 #endif
 247
 248             char* method = buffer_release(method_name);
 249
 250             osrfHashSet( method_meta, method, "methodname" );
 251             osrfHashSet( method_meta, strdup(method_type), "methodtype" );
 252
 253             int flags = 0;
 254             if (*method_type == 'i' || *method_type == 's') {
 255                 flags = flags | OSRF_METHOD_STREAMING;
 256             }
 257
 258             osrfAppRegisterExtendedMethod(
 259                     MODULENAME,
 260                     method,
 261                     "dispatchCRUDMethod",
 262                     "",
 263                     1,
 264                     flags,
 265                     (void*)method_meta
 266                     );
 267
 268             free(method);
 269         }
 270     }
 271
 272     return 0;
 273 }
 274
 275 static char* getSourceDefinition( osrfHash* class ) {
 276
 277     char* tabledef = osrfHashGet(class, "tablename");
 278
 279     if (!tabledef) {
 280         growing_buffer* tablebuf = buffer_init(128);
 281         tabledef = osrfHashGet(class, "source_definition");
 282         if( !tabledef )
 283             tabledef = "(null)";
 284         buffer_fadd( tablebuf, "(%s)", tabledef );
 285         tabledef = buffer_release(tablebuf);
 286     } else {
 287         tabledef = strdup(tabledef);
 288     }
 289
 290     return tabledef;
 291 }
 292
 293 /**
 294  * Connects to the database
 295  */
 296 int osrfAppChildInit() {
 297
 298     osrfLogDebug(OSRF_LOG_MARK, "Attempting to initialize libdbi...");
 299     dbi_initialize(NULL);
 300     osrfLogDebug(OSRF_LOG_MARK, "... libdbi initialized.");
 301
 302     char* driver        = osrf_settings_host_value("/apps/%s/app_settings/driver", MODULENAME);
 303     char* user  = osrf_settings_host_value("/apps/%s/app_settings/database/user", MODULENAME);
 304     char* host  = osrf_settings_host_value("/apps/%s/app_settings/database/host", MODULENAME);
 305     char* port  = osrf_settings_host_value("/apps/%s/app_settings/database/port", MODULENAME);
 306     char* db    = osrf_settings_host_value("/apps/%s/app_settings/database/db", MODULENAME);
 307     char* pw    = osrf_settings_host_value("/apps/%s/app_settings/database/pw", MODULENAME);
 308     char* md    = osrf_settings_host_value("/apps/%s/app_settings/max_query_recursion", MODULENAME);
 309
 310     osrfLogDebug(OSRF_LOG_MARK, "Attempting to load the database driver [%s]...", driver);
 311     writehandle = dbi_conn_new(driver);
 312
 313     if(!writehandle) {
 314         osrfLogError(OSRF_LOG_MARK, "Error loading database driver [%s]", driver);
 315         return -1;
 316     }
 317     osrfLogDebug(OSRF_LOG_MARK, "Database driver [%s] seems OK", driver);
 318
 319     osrfLogInfo(OSRF_LOG_MARK, "%s connecting to database.  host=%s, "
 320             "port=%s, user=%s, pw=%s, db=%s", MODULENAME, host, port, user, pw, db );
 321
 322     if(host) dbi_conn_set_option(writehandle, "host", host );
 323     if(port) dbi_conn_set_option_numeric( writehandle, "port", atoi(port) );
 324     if(user) dbi_conn_set_option(writehandle, "username", user);
 325     if(pw) dbi_conn_set_option(writehandle, "password", pw );
 326     if(db) dbi_conn_set_option(writehandle, "dbname", db );
 327
 328     if(md) max_flesh_depth = atoi(md);
 329     if(max_flesh_depth < 0) max_flesh_depth = 1;
 330     if(max_flesh_depth > 1000) max_flesh_depth = 1000;
 331
 332     free(user);
 333     free(host);
 334     free(port);
 335     free(db);
 336     free(pw);
 337
 338     const char* err;
 339     if (dbi_conn_connect(writehandle) < 0) {
 340         sleep(1);
 341         if (dbi_conn_connect(writehandle) < 0) {
 342             dbi_conn_error(writehandle, &err);
 343             osrfLogError( OSRF_LOG_MARK, "Error connecting to database: %s", err);
 344             return -1;
 345         }
 346     }
 347
 348     osrfLogInfo(OSRF_LOG_MARK, "%s successfully connected to the database", MODULENAME);
 349
 350     int attr;
 351     unsigned short type;
 352     int i = 0;
 353     char* classname;
 354     osrfStringArray* classes = osrfHashKeys( oilsIDL() );
 355
 356     while ( (classname = osrfStringArrayGetString(classes, i++)) ) {
 357         osrfHash* class = osrfHashGet( oilsIDL(), classname );
 358         osrfHash* fields = osrfHashGet( class, "fields" );
 359
 360         char* virt = osrfHashGet(class, "virtual");
 361         if (virt && !strcmp( virt, "true")) {
 362             osrfLogDebug(OSRF_LOG_MARK, "Class %s is virtual, skipping", classname );
 363             continue;
 364         }
 365
 366         char* tabledef = getSourceDefinition(class);
 367
 368         growing_buffer* sql_buf = buffer_init(32);
 369         buffer_fadd( sql_buf, "SELECT * FROM %s AS x WHERE 1=0;", tabledef );
 370
 371         free(tabledef);
 372
 373         char* sql = buffer_release(sql_buf);
 374         osrfLogDebug(OSRF_LOG_MARK, "%s Investigatory SQL = %s", MODULENAME, sql);
 375
 376         dbi_result result = dbi_conn_query(writehandle, sql);
 377         free(sql);
 378
 379         if (result) {
 380
 381             int columnIndex = 1;
 382             const char* columnName;
 383             osrfHash* _f;
 384             while( (columnName = dbi_result_get_field_name(result, columnIndex++)) ) {
 385
 386                 osrfLogInternal(OSRF_LOG_MARK, "Looking for column named [%s]...", (char*)columnName);
 387
 388                 /* fetch the fieldmapper index */
 389                 if( (_f = osrfHashGet(fields, (char*)columnName)) ) {
 390
 391                     osrfLogDebug(OSRF_LOG_MARK, "Found [%s] in IDL hash...", (char*)columnName);
 392
 393                     /* determine the field type and storage attributes */
 394                     type = dbi_result_get_field_type(result, columnName);
 395                     attr = dbi_result_get_field_attribs(result, columnName);
 396
 397                     switch( type ) {
 398
 399                         case DBI_TYPE_INTEGER :
 400
 401                             if ( !osrfHashGet(_f, "primitive") )
 402                                 osrfHashSet(_f,"number", "primitive");
 403
 404                             if( attr & DBI_INTEGER_SIZE8 )
 405                                 osrfHashSet(_f,"INT8", "datatype");
 406                             else
 407                                 osrfHashSet(_f,"INT", "datatype");
 408                             break;
 409
 410                         case DBI_TYPE_DECIMAL :
 411                             if ( !osrfHashGet(_f, "primitive") )
 412                                 osrfHashSet(_f,"number", "primitive");
 413
 414                             osrfHashSet(_f,"NUMERIC", "datatype");
 415                             break;
 416
 417                         case DBI_TYPE_STRING :
 418                             if ( !osrfHashGet(_f, "primitive") )
 419                                 osrfHashSet(_f,"string", "primitive");
 420                             osrfHashSet(_f,"TEXT", "datatype");
 421                             break;
 422
 423                         case DBI_TYPE_DATETIME :
 424                             if ( !osrfHashGet(_f, "primitive") )
 425                                 osrfHashSet(_f,"string", "primitive");
 426
 427                             osrfHashSet(_f,"TIMESTAMP", "datatype");
 428                             break;
 429
 430                         case DBI_TYPE_BINARY :
 431                             if ( !osrfHashGet(_f, "primitive") )
 432                                 osrfHashSet(_f,"string", "primitive");
 433
 434                             osrfHashSet(_f,"BYTEA", "datatype");
 435                     }
 436
 437                     osrfLogDebug(
 438                             OSRF_LOG_MARK,
 439                             "Setting [%s] to primitive [%s] and datatype [%s]...",
 440                             (char*)columnName,
 441                             osrfHashGet(_f, "primitive"),
 442                             osrfHashGet(_f, "datatype")
 443                             );
 444                 }
 445             }
 446             dbi_result_free(result);
 447         } else {
 448             osrfLogDebug(OSRF_LOG_MARK, "No data found for class [%s]...", (char*)classname);
 449         }
 450     }
 451
 452     osrfStringArrayFree(classes);
 453
 454     return 0;
 455 }
 456
 457 void userDataFree( void* blob ) {
 458     osrfHashFree( (osrfHash*)blob );
 459     return;
 460 }
 461
 462 static void sessionDataFree( char* key, void* item ) {
 463     if (!(strcmp(key,"xact_id"))) {
 464         if (writehandle)
 465             dbi_conn_query(writehandle, "ROLLBACK;");
 466         free(item);
 467     }
 468
 469     return;
 470 }
 471
 472 int beginTransaction ( osrfMethodContext* ctx ) {
 473         if(osrfMethodVerifyContext( ctx )) {
 474                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 475                 return -1;
 476         }
 477
 478 #ifdef PCRUD
 479     jsonObject* user = verifyUserPCRUD( ctx );
 480     if (!user) return -1;
 481     jsonObjectFree(user);
 482 #endif
 483
 484     dbi_result result = dbi_conn_query(writehandle, "START TRANSACTION;");
 485     if (!result) {
 486         osrfLogError(OSRF_LOG_MARK, "%s: Error starting transaction", MODULENAME );
 487         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error starting transaction" );
 488         return -1;
 489     } else {
 490         jsonObject* ret = jsonNewObject(ctx->session->session_id);
 491         osrfAppRespondComplete( ctx, ret );
 492         jsonObjectFree(ret);
 493
 494         if (!ctx->session->userData) {
 495             ctx->session->userData = osrfNewHash();
 496             osrfHashSetCallback((osrfHash*)ctx->session->userData, &sessionDataFree);
 497         }
 498
 499         osrfHashSet( (osrfHash*)ctx->session->userData, strdup( ctx->session->session_id ), "xact_id" );
 500         ctx->session->userDataFree = &userDataFree;
 501
 502     }
 503     return 0;
 504 }
 505
 506 int setSavepoint ( osrfMethodContext* ctx ) {
 507         if(osrfMethodVerifyContext( ctx )) {
 508                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 509                 return -1;
 510         }
 511
 512     int spNamePos = 0;
 513 #ifdef PCRUD
 514     spNamePos = 1;
 515     jsonObject* user = verifyUserPCRUD( ctx );
 516     if (!user) return -1;
 517     jsonObjectFree(user);
 518 #endif
 519
 520     if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
 521         osrfAppSessionStatus(
 522                 ctx->session,
 523                 OSRF_STATUS_INTERNALSERVERERROR,
 524                 "osrfMethodException",
 525                 ctx->request,
 526                 "No active transaction -- required for savepoints"
 527                 );
 528         return -1;
 529     }
 530
 531     char* spName = jsonObjectToSimpleString(jsonObjectGetIndex(ctx->params, spNamePos));
 532
 533     dbi_result result = dbi_conn_queryf(writehandle, "SAVEPOINT \"%s\";", spName);
 534     if (!result) {
 535         osrfLogError(
 536                 OSRF_LOG_MARK,
 537                 "%s: Error creating savepoint %s in transaction %s",
 538                 MODULENAME,
 539                 spName,
 540                 osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )
 541                 );
 542         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error creating savepoint" );
 543         free(spName);
 544         return -1;
 545     } else {
 546         jsonObject* ret = jsonNewObject(spName);
 547         osrfAppRespondComplete( ctx, ret );
 548         jsonObjectFree(ret);
 549     }
 550     free(spName);
 551     return 0;
 552 }
 553
 554 int releaseSavepoint ( osrfMethodContext* ctx ) {
 555         if(osrfMethodVerifyContext( ctx )) {
 556                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 557                 return -1;
 558         }
 559
 560         int spNamePos = 0;
 561 #ifdef PCRUD
 562     spNamePos = 1;
 563     jsonObject* user = verifyUserPCRUD( ctx );
 564     if (!user) return -1;
 565     jsonObjectFree(user);
 566 #endif
 567
 568     if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
 569         osrfAppSessionStatus(
 570                 ctx->session,
 571                 OSRF_STATUS_INTERNALSERVERERROR,
 572                 "osrfMethodException",
 573                 ctx->request,
 574                 "No active transaction -- required for savepoints"
 575                 );
 576         return -1;
 577     }
 578
 579     char* spName = jsonObjectToSimpleString(jsonObjectGetIndex(ctx->params, spNamePos));
 580
 581     dbi_result result = dbi_conn_queryf(writehandle, "RELEASE SAVEPOINT \"%s\";", spName);
 582     if (!result) {
 583         osrfLogError(
 584                 OSRF_LOG_MARK,
 585                 "%s: Error releasing savepoint %s in transaction %s",
 586                 MODULENAME,
 587                 spName,
 588                 osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )
 589                 );
 590         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error releasing savepoint" );
 591         free(spName);
 592         return -1;
 593     } else {
 594         jsonObject* ret = jsonNewObject(spName);
 595         osrfAppRespondComplete( ctx, ret );
 596         jsonObjectFree(ret);
 597     }
 598     free(spName);
 599     return 0;
 600 }
 601
 602 int rollbackSavepoint ( osrfMethodContext* ctx ) {
 603         if(osrfMethodVerifyContext( ctx )) {
 604                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 605                 return -1;
 606         }
 607
 608         int spNamePos = 0;
 609 #ifdef PCRUD
 610     spNamePos = 1;
 611     jsonObject* user = verifyUserPCRUD( ctx );
 612     if (!user) return -1;
 613     jsonObjectFree(user);
 614 #endif
 615
 616     if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
 617         osrfAppSessionStatus(
 618                 ctx->session,
 619                 OSRF_STATUS_INTERNALSERVERERROR,
 620                 "osrfMethodException",
 621                 ctx->request,
 622                 "No active transaction -- required for savepoints"
 623                 );
 624         return -1;
 625     }
 626
 627     char* spName = jsonObjectToSimpleString(jsonObjectGetIndex(ctx->params, spNamePos));
 628
 629     dbi_result result = dbi_conn_queryf(writehandle, "ROLLBACK TO SAVEPOINT \"%s\";", spName);
 630     if (!result) {
 631         osrfLogError(
 632                 OSRF_LOG_MARK,
 633                 "%s: Error rolling back savepoint %s in transaction %s",
 634                 MODULENAME,
 635                 spName,
 636                 osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )
 637                 );
 638         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error rolling back savepoint" );
 639         free(spName);
 640         return -1;
 641     } else {
 642         jsonObject* ret = jsonNewObject(spName);
 643         osrfAppRespondComplete( ctx, ret );
 644         jsonObjectFree(ret);
 645     }
 646     free(spName);
 647     return 0;
 648 }
 649
 650 int commitTransaction ( osrfMethodContext* ctx ) {
 651         if(osrfMethodVerifyContext( ctx )) {
 652                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 653                 return -1;
 654         }
 655
 656 #ifdef PCRUD
 657     jsonObject* user = verifyUserPCRUD( ctx );
 658     if (!user) return -1;
 659     jsonObjectFree(user);
 660 #endif
 661
 662     if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
 663         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "No active transaction to commit" );
 664         return -1;
 665     }
 666
 667     dbi_result result = dbi_conn_query(writehandle, "COMMIT;");
 668     if (!result) {
 669         osrfLogError(OSRF_LOG_MARK, "%s: Error committing transaction", MODULENAME );
 670         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error committing transaction" );
 671         return -1;
 672     } else {
 673         osrfHashRemove(ctx->session->userData, "xact_id");
 674         jsonObject* ret = jsonNewObject(ctx->session->session_id);
 675         osrfAppRespondComplete( ctx, ret );
 676         jsonObjectFree(ret);
 677     }
 678     return 0;
 679 }
 680
 681 int rollbackTransaction ( osrfMethodContext* ctx ) {
 682         if(osrfMethodVerifyContext( ctx )) {
 683                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 684                 return -1;
 685         }
 686
 687 #ifdef PCRUD
 688     jsonObject* user = verifyUserPCRUD( ctx );
 689     if (!user) return -1;
 690     jsonObjectFree(user);
 691 #endif
 692
 693     if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
 694         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "No active transaction to roll back" );
 695         return -1;
 696     }
 697
 698     dbi_result result = dbi_conn_query(writehandle, "ROLLBACK;");
 699     if (!result) {
 700         osrfLogError(OSRF_LOG_MARK, "%s: Error rolling back transaction", MODULENAME );
 701         osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, "Error rolling back transaction" );
 702         return -1;
 703     } else {
 704         osrfHashRemove(ctx->session->userData, "xact_id");
 705         jsonObject* ret = jsonNewObject(ctx->session->session_id);
 706         osrfAppRespondComplete( ctx, ret );
 707         jsonObjectFree(ret);
 708     }
 709     return 0;
 710 }
 711
 712 int dispatchCRUDMethod ( osrfMethodContext* ctx ) {
 713         if(osrfMethodVerifyContext( ctx )) {
 714                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
 715                 return -1;
 716         }
 717
 718         osrfHash* meta = (osrfHash*) ctx->method->userData;
 719     osrfHash* class_obj = osrfHashGet( meta, "class" );
 720
 721     int err = 0;
 722
 723     const char* methodtype = osrfHashGet(meta, "methodtype");
 724     jsonObject * obj = NULL;
 725
 726     if (!strcmp(methodtype, "create")) {
 727         obj = doCreate(ctx, &err);
 728         osrfAppRespondComplete( ctx, obj );
 729     }
 730     else if (!strcmp(methodtype, "retrieve")) {
 731         obj = doRetrieve(ctx, &err);
 732         osrfAppRespondComplete( ctx, obj );
 733     }
 734     else if (!strcmp(methodtype, "update")) {
 735         obj = doUpdate(ctx, &err);
 736         osrfAppRespondComplete( ctx, obj );
 737     }
 738     else if (!strcmp(methodtype, "delete")) {
 739         obj = doDelete(ctx, &err);
 740         osrfAppRespondComplete( ctx, obj );
 741     }
 742     else if (!strcmp(methodtype, "search")) {
 743
 744         jsonObject* _p = jsonObjectClone( ctx->params );
 745 #ifdef PCRUD
 746         jsonObjectFree(_p);
 747         _p = jsonParseString("[]");
 748         jsonObjectPush(_p, jsonObjectClone(jsonObjectGetIndex(ctx->params, 1)));
 749         jsonObjectPush(_p, jsonObjectClone(jsonObjectGetIndex(ctx->params, 2)));
 750 #endif
 751
 752         obj = doFieldmapperSearch(ctx, class_obj, _p, &err);
 753
 754         jsonObjectFree(_p);
 755         if(err) return err;
 756
 757         jsonObject* cur;
 758         jsonIterator* itr = jsonNewIterator( obj );
 759         while ((cur = jsonIteratorNext( itr ))) {
 760 #ifdef PCRUD
 761             if(!verifyObjectPCRUD(ctx, cur)) continue;
 762 #endif
 763             osrfAppRespond( ctx, cur );
 764         }
 765         jsonIteratorFree(itr);
 766         osrfAppRespondComplete( ctx, NULL );
 767
 768     } else if (!strcmp(methodtype, "id_list")) {
 769
 770         jsonObject* _p = jsonObjectClone( ctx->params );
 771 #ifdef PCRUD
 772         jsonObjectFree(_p);
 773         _p = jsonParseString("[]");
 774         jsonObjectPush(_p, jsonObjectClone(jsonObjectGetIndex(ctx->params, 1)));
 775         jsonObjectPush(_p, jsonObjectClone(jsonObjectGetIndex(ctx->params, 2)));
 776 #endif
 777
 778         if (jsonObjectGetIndex( _p, 1 )) {
 779             jsonObjectRemoveKey( jsonObjectGetIndex( _p, 1 ), "select" );
 780             jsonObjectRemoveKey( jsonObjectGetIndex( _p, 1 ), "no_i18n" );
 781             jsonObjectRemoveKey( jsonObjectGetIndex( _p, 1 ), "flesh" );
 782             jsonObjectRemoveKey( jsonObjectGetIndex( _p, 1 ), "flesh_columns" );
 783         } else {
 784             jsonObjectSetIndex( _p, 1, jsonNewObjectType(JSON_HASH) );
 785         }
 786
 787         jsonObjectSetKey( jsonObjectGetIndex( _p, 1 ), "no_i18n", jsonParseString("true") );
 788
 789         jsonObjectSetKey(
 790             jsonObjectGetIndex( _p, 1 ),
 791             "select",
 792             jsonParseStringFmt(
 793                 "{ \"%s\":[\"%s\"] }",
 794                 osrfHashGet( class_obj, "classname" ),
 795                 osrfHashGet( class_obj, "primarykey" )
 796             )
 797         );
 798
 799         obj = doFieldmapperSearch(ctx, class_obj, _p, &err);
 800
 801         jsonObjectFree(_p);
 802         if(err) return err;
 803
 804         jsonObject* cur;
 805         jsonIterator* itr = jsonNewIterator( obj );
 806         while ((cur = jsonIteratorNext( itr ))) {
 807 #ifdef PCRUD
 808             if(!verifyObjectPCRUD(ctx, cur)) continue;
 809 #endif
 810             osrfAppRespond(
 811                     ctx,
 812                     oilsFMGetObject( cur, osrfHashGet( class_obj, "primarykey" ) )
 813                     );
 814         }
 815         jsonIteratorFree(itr);
 816         osrfAppRespondComplete( ctx, NULL );
 817
 818     } else {
 819         osrfAppRespondComplete( ctx, obj );
 820     }
 821
 822     jsonObjectFree(obj);
 823
 824     return err;
 825 }
 826
 827 static int verifyObjectClass ( osrfMethodContext* ctx, const jsonObject* param ) {
 828
 829     int ret = 1;
 830     osrfHash* meta = (osrfHash*) ctx->method->userData;
 831     osrfHash* class = osrfHashGet( meta, "class" );
 832
 833     if (!param->classname || (strcmp( osrfHashGet(class, "classname"), param->classname ))) {
 834
 835         growing_buffer* msg = buffer_init(128);
 836         buffer_fadd(
 837                 msg,
 838                 "%s: %s method for type %s was passed a %s",
 839                 MODULENAME,
 840                 osrfHashGet(meta, "methodtype"),
 841                 osrfHashGet(class, "classname"),
 842                 param->classname
 843                 );
 844
 845         char* m = buffer_release(msg);
 846         osrfAppSessionStatus( ctx->session, OSRF_STATUS_BADREQUEST, "osrfMethodException", ctx->request, m );
 847
 848         free(m);
 849
 850         return 0;
 851     }
 852
 853 #ifdef PCRUD
 854     ret = verifyObjectPCRUD( ctx, param );
 855 #endif
 856
 857     return ret;
 858 }
 859
 860 #ifdef PCRUD
 861
 862 static jsonObject* verifyUserPCRUD( osrfMethodContext* ctx ) {
 863     char* auth = jsonObjectToSimpleString( jsonObjectGetIndex( ctx->params, 0 ) );
 864     jsonObject* auth_object = jsonNewObject(auth);
 865     jsonObject* user = oilsUtilsQuickReq("open-ils.auth","open-ils.auth.session.retrieve", auth_object);
 866     jsonObjectFree(auth_object);
 867
 868     if (!user->classname || strcmp(user->classname, "au")) {
 869
 870         growing_buffer* msg = buffer_init(128);
 871         buffer_fadd(
 872             msg,
 873             "%s: permacrud received a bad auth token: %s",
 874             MODULENAME,
 875             auth
 876         );
 877
 878         char* m = buffer_release(msg);
 879         osrfAppSessionStatus( ctx->session, OSRF_STATUS_UNAUTHORIZED, "osrfMethodException", ctx->request, m );
 880
 881         free(m);
 882         jsonObjectFree(user);
 883         user = jsonNULL;
 884     }
 885
 886     free(auth);
 887     return user;
 888
 889 }
 890
 891 static int verifyObjectPCRUD (  osrfMethodContext* ctx, const jsonObject* obj ) {
 892
 893     dbhandle = writehandle;
 894
 895     osrfHash* meta = (osrfHash*) ctx->method->userData;
 896     osrfHash* class = osrfHashGet( meta, "class" );
 897     char* method_type = strdup( osrfHashGet(meta, "methodtype") );
 898     int fetch = 0;
 899
 900     if ( ( *method_type == 's' || *method_type == 'i' ) ) {
 901         free(method_type);
 902         method_type = strdup("retrieve"); // search and id_list are equivelant to retrieve for this
 903     } else if ( *method_type == 'u' || *method_type == 'd' ) {
 904         fetch = 1; // MUST go to the db for the object for update and delete
 905     }
 906
 907     osrfHash* pcrud = osrfHashGet( osrfHashGet(class, "permacrud"), method_type );
 908     free(method_type);
 909
 910     if (!pcrud) {
 911         // No permacrud for this method type on this class
 912
 913         growing_buffer* msg = buffer_init(128);
 914         buffer_fadd(
 915             msg,
 916             "%s: %s on class %s has no permacrud IDL entry",
 917             MODULENAME,
 918             osrfHashGet(meta, "methodtype"),
 919             osrfHashGet(class, "classname")
 920         );
 921
 922         char* m = buffer_release(msg);
 923         osrfAppSessionStatus( ctx->session, OSRF_STATUS_FORBIDDEN, "osrfMethodException", ctx->request, m );
 924
 925         free(m);
 926
 927         return 0;
 928     }
 929
 930     jsonObject* user = verifyUserPCRUD( ctx );
 931     if (!user) return 0;
 932
 933     int userid = atoi( oilsFMGetString( user, "id" ) );
 934     jsonObjectFree(user);
 935
 936     osrfStringArray* permission = osrfHashGet(pcrud, "permission");
 937     char* global_required = osrfHashGet(pcrud, "global_required");
 938     osrfStringArray* local_context = osrfHashGet(pcrud, "local_context");
 939     osrfHash* foreign_context = osrfHashGet(pcrud, "foreign_context");
 940
 941     osrfStringArray* context_org_array = osrfNewStringArray(1);
 942
 943     int err = 0;
 944     char* pkey_value = NULL;
 945     if (global_required && !strcmp( "true", global_required )) {
 946             osrfLogDebug( OSRF_LOG_MARK, "global-level permissions required, fetching top of the org tree" );
 947
 948         // check for perm at top of org tree
 949         jsonObject* _tmp_params = jsonParseString("[{\"parent_ou\":null}]");
 950                 jsonObject* _list = doFieldmapperSearch(ctx, osrfHashGet( oilsIDL(), "aou" ), _tmp_params, &err);
 951
 952         jsonObject* _tree_top = jsonObjectGetIndex(_list, 0);
 953
 954         if (!_tree_top) {
 955             jsonObjectFree(_tmp_params);
 956             jsonObjectFree(_list);
 957
 958             growing_buffer* msg = buffer_init(128);
 959                         OSRF_BUFFER_ADD( msg, MODULENAME );
 960                         OSRF_BUFFER_ADD( msg,
 961                                 ": Internal error, could not find the top of the org tree (parent_ou = NULL)" );
 962
 963             char* m = buffer_release(msg);
 964             osrfAppSessionStatus( ctx->session, OSRF_STATUS_INTERNALSERVERERROR, "osrfMethodException", ctx->request, m );
 965             free(m);
 966
 967             return 0;
 968         }
 969
 970         osrfStringArrayAdd( context_org_array, oilsFMGetString( _tree_top, "id" ) );
 971             osrfLogDebug( OSRF_LOG_MARK, "top of the org tree is %s", osrfStringArrayGetString(context_org_array, 0) );
 972
 973         jsonObjectFree(_tmp_params);
 974         jsonObjectFree(_list);
 975
 976     } else {
 977             osrfLogDebug( OSRF_LOG_MARK, "global-level permissions not required, fetching context org ids" );
 978             char* pkey = osrfHashGet(class, "primarykey");
 979         jsonObject *param = NULL;
 980
 981         if (obj->classname) {
 982             pkey_value = oilsFMGetString( obj, pkey );
 983             if (!fetch) param = jsonObjectClone(obj);
 984                 osrfLogDebug( OSRF_LOG_MARK, "Object supplied, using primary key value of %s", pkey_value );
 985         } else {
 986             pkey_value = jsonObjectToSimpleString( obj );
 987             fetch = 1;
 988                 osrfLogDebug( OSRF_LOG_MARK, "Object not supplied, using primary key value of %s and retrieving from the database", pkey_value );
 989         }
 990
 991         if (fetch) {
 992             jsonObject* _tmp_params = jsonParseStringFmt("[{\"%s\":\"%s\"}]", pkey, pkey_value);
 993                 jsonObject* _list = doFieldmapperSearch(
 994                 ctx,
 995                 class,
 996                 _tmp_params,
 997                 &err
 998             );
 999
1000             param = jsonObjectClone(jsonObjectGetIndex(_list, 0));
1001
1002             jsonObjectFree(_tmp_params);
1003             jsonObjectFree(_list);
1004         }
1005
1006         if (!param) {
1007             osrfLogDebug( OSRF_LOG_MARK, "Object not found in the database with primary key %s of %s", pkey, pkey_value );
1008
1009             growing_buffer* msg = buffer_init(128);
1010             buffer_fadd(
1011                 msg,
1012                 "%s: no object found with primary key %s of %s",
1013                 MODULENAME,
1014                 pkey,
1015                 pkey_value
1016             );
1017
1018             char* m = buffer_release(msg);
1019             osrfAppSessionStatus(
1020                 ctx->session,
1021                 OSRF_STATUS_INTERNALSERVERERROR,
1022                 "osrfMethodException",
1023                 ctx->request,
1024                 m
1025             );
1026
1027             free(m);
1028             if (pkey_value) free(pkey_value);
1029
1030             return 0;
1031         }
1032
1033         if (local_context->size > 0) {
1034                 osrfLogDebug( OSRF_LOG_MARK, "%d class-local context field(s) specified", local_context->size);
1035             int i = 0;
1036             char* lcontext = NULL;
1037             while ( (lcontext = osrfStringArrayGetString(local_context, i++)) ) {
1038                 osrfStringArrayAdd( context_org_array, oilsFMGetString( param, lcontext ) );
1039                     osrfLogDebug(
1040                     OSRF_LOG_MARK,
1041                     "adding class-local field %s (value: %s) to the context org list",
1042                     lcontext,
1043                     osrfStringArrayGetString(context_org_array, context_org_array->size - 1)
1044                 );
1045             }
1046         }
1047
1048         osrfStringArray* class_list;
1049
1050         if (foreign_context) {
1051             class_list = osrfHashKeys( foreign_context );
1052                 osrfLogDebug( OSRF_LOG_MARK, "%d foreign context classes(s) specified", class_list->size);
1053
1054             if (class_list->size > 0) {
1055
1056                 int i = 0;
1057                 char* class_name = NULL;
1058                 while ( (class_name = osrfStringArrayGetString(class_list, i++)) ) {
1059                     osrfHash* fcontext = osrfHashGet(foreign_context, class_name);
1060
1061                         osrfLogDebug(
1062                         OSRF_LOG_MARK,
1063                         "%d foreign context fields(s) specified for class %s",
1064                         ((osrfStringArray*)osrfHashGet(fcontext,"context"))->size,
1065                         class_name
1066                     );
1067
1068                     char* foreign_pkey = osrfHashGet(fcontext, "field");
1069                     char* foreign_pkey_value = oilsFMGetString(param, osrfHashGet(fcontext, "fkey"));
1070
1071                     jsonObject* _tmp_params = jsonParseStringFmt(
1072                         "[{\"%s\":\"%s\"}]",
1073                         foreign_pkey,
1074                         foreign_pkey_value
1075                     );
1076
1077                         jsonObject* _list = doFieldmapperSearch(
1078                         ctx,
1079                         osrfHashGet( oilsIDL(), class_name ),
1080                         _tmp_params,
1081                         &err
1082                     );
1083
1084                     jsonObject* _fparam = jsonObjectClone(jsonObjectGetIndex(_list, 0));
1085                     jsonObjectFree(_tmp_params);
1086                     jsonObjectFree(_list);
1087
1088                     osrfStringArray* jump_list = osrfHashGet(fcontext, "jump");
1089
1090                     if (_fparam && jump_list) {
1091                         char* flink = NULL;
1092                         int k = 0;
1093                         while ( (flink = osrfStringArrayGetString(jump_list, k++)) && _fparam ) {
1094                             free(foreign_pkey_value);
1095
1096                             osrfHash* foreign_link_hash = oilsIDLFindPath( "/%s/links/%s", _fparam->classname, flink );
1097
1098                             foreign_pkey_value = oilsFMGetString(_fparam, flink);
1099                             foreign_pkey = osrfHashGet( foreign_link_hash, "key" );
1100
1101                             _tmp_params = jsonParseStringFmt(
1102                                 "[{\"%s\":\"%s\"}]",
1103                                 foreign_pkey,
1104                                 foreign_pkey_value
1105                             );
1106
1107                                 _list = doFieldmapperSearch(
1108                                 ctx,
1109                                 osrfHashGet( oilsIDL(), osrfHashGet( foreign_link_hash, "class" ) ),
1110                                 _tmp_params,
1111                                 &err
1112                             );
1113
1114                             _fparam = jsonObjectClone(jsonObjectGetIndex(_list, 0));
1115                             jsonObjectFree(_tmp_params);
1116                             jsonObjectFree(_list);
1117                         }
1118                     }
1119
1120
1121                     if (!_fparam) {
1122
1123                         growing_buffer* msg = buffer_init(128);
1124                         buffer_fadd(
1125                             msg,
1126                             "%s: no object found with primary key %s of %s",
1127                             MODULENAME,
1128                             foreign_pkey,
1129                             foreign_pkey_value
1130                         );
1131
1132                         char* m = buffer_release(msg);
1133                         osrfAppSessionStatus(
1134                             ctx->session,
1135                             OSRF_STATUS_INTERNALSERVERERROR,
1136                             "osrfMethodException",
1137                             ctx->request,
1138                             m
1139                         );
1140
1141                         free(m);
1142                         osrfStringArrayFree(class_list);
1143                         free(foreign_pkey_value);
1144                         jsonObjectFree(param);
1145
1146                         return 0;
1147                     }
1148
1149                     free(foreign_pkey_value);
1150
1151                     int j = 0;
1152                     char* foreign_field = NULL;
1153                     while ( (foreign_field = osrfStringArrayGetString(osrfHashGet(fcontext,"context"), j++)) ) {
1154                         osrfStringArrayAdd( context_org_array, oilsFMGetString( _fparam, foreign_field ) );
1155                             osrfLogDebug(
1156                             OSRF_LOG_MARK,
1157                             "adding foreign class %s field %s (value: %s) to the context org list",
1158                             class_name,
1159                             foreign_field,
1160                             osrfStringArrayGetString(context_org_array, context_org_array->size - 1)
1161                         );
1162                     }
1163
1164                     jsonObjectFree(_fparam);
1165                 }
1166
1167                 osrfStringArrayFree(class_list);
1168             }
1169         }
1170
1171         jsonObjectFree(param);
1172     }
1173
1174     char* context_org = NULL;
1175     char* perm = NULL;
1176     int OK = 0;
1177
1178     if (permission->size == 0) {
1179             osrfLogDebug( OSRF_LOG_MARK, "No permission specified for this action, passing through" );
1180         OK = 1;
1181     }
1182
1183     int i = 0;
1184     while ( (perm = osrfStringArrayGetString(permission, i++)) ) {
1185         int j = 0;
1186         while ( (context_org = osrfStringArrayGetString(context_org_array, j++)) ) {
1187             dbi_result result;
1188
1189             if (pkey_value) {
1190                     osrfLogDebug(
1191                     OSRF_LOG_MARK,
1192                     "Checking object permission [%s] for user %d on object %s (class %s) at org %d",
1193                     perm,
1194                     userid,
1195                     pkey_value,
1196                     osrfHashGet(class, "classname"),
1197                     atoi(context_org)
1198                 );
1199
1200                 result = dbi_conn_queryf(
1201                     writehandle,
1202                     "SELECT permission.usr_has_object_perm(%d, '%s', '%s', '%s', %d) AS has_perm;",
1203                     userid,
1204                     perm,
1205                     osrfHashGet(class, "classname"),
1206                     pkey_value,
1207                     atoi(context_org)
1208                 );
1209
1210                 if (result) {
1211                     osrfLogDebug(
1212                         OSRF_LOG_MARK,
1213                         "Recieved a result for object permission [%s] for user %d on object %s (class %s) at org %d",
1214                         perm,
1215                         userid,
1216                         pkey_value,
1217                         osrfHashGet(class, "classname"),
1218                         atoi(context_org)
1219                     );
1220
1221                     if (dbi_result_first_row(result)) {
1222                         jsonObject* return_val = oilsMakeJSONFromResult( result );
1223                         char* has_perm = jsonObjectToSimpleString( jsonObjectGetKeyConst(return_val, "has_perm") );
1224
1225                             osrfLogDebug(
1226                             OSRF_LOG_MARK,
1227                             "Status of object permission [%s] for user %d on object %s (class %s) at org %d is %s",
1228                             perm,
1229                             userid,
1230                             pkey_value,
1231                             osrfHashGet(class, "classname"),
1232                             atoi(context_org),
1233                             has_perm
1234                         );
1235
1236                         if ( *has_perm == 't' ) OK = 1;
1237                         free(has_perm);
1238                         jsonObjectFree(return_val);
1239                     }
1240
1241                     dbi_result_free(result);
1242                     if (OK) break;
1243                 }
1244             }
1245
1246                 osrfLogDebug( OSRF_LOG_MARK, "Checking non-object permission [%s] for user %d at org %d", perm, userid, atoi(context_org) );
1247             result = dbi_conn_queryf(
1248                 writehandle,
1249                 "SELECT permission.usr_has_perm(%d, '%s', %d) AS has_perm;",
1250                 userid,
1251                 perm,
1252                 atoi(context_org)
1253             );
1254
1255             if (result) {
1256                     osrfLogDebug( OSRF_LOG_MARK, "Recieved a result for permission [%s] for user %d at org %d", perm, userid, atoi(context_org) );
1257                 if (dbi_result_first_row(result)) {
1258                     jsonObject* return_val = oilsMakeJSONFromResult( result );
1259                     char* has_perm = jsonObjectToSimpleString( jsonObjectGetKeyConst(return_val, "has_perm") );
1260                         osrfLogDebug( OSRF_LOG_MARK, "Status of permission [%s] for user %d at org %d is [%s]", perm, userid, atoi(context_org), has_perm );
1261                     if ( *has_perm == 't' ) OK = 1;
1262                     free(has_perm);
1263                     jsonObjectFree(return_val);
1264                 }
1265
1266                 dbi_result_free(result);
1267                 if (OK) break;
1268             }
1269
1270         }
1271         if (OK) break;
1272     }
1273
1274     if (pkey_value) free(pkey_value);
1275     osrfStringArrayFree(context_org_array);
1276
1277     return OK;
1278 }
1279 #endif
1280
1281
1282 static jsonObject* doCreate(osrfMethodContext* ctx, int* err ) {
1283
1284         osrfHash* meta = osrfHashGet( (osrfHash*) ctx->method->userData, "class" );
1285 #ifdef PCRUD
1286         jsonObject* target = jsonObjectGetIndex( ctx->params, 1 );
1287         jsonObject* options = jsonObjectGetIndex( ctx->params, 2 );
1288 #else
1289         jsonObject* target = jsonObjectGetIndex( ctx->params, 0 );
1290         jsonObject* options = jsonObjectGetIndex( ctx->params, 1 );
1291 #endif
1292
1293         if (!verifyObjectClass(ctx, target)) {
1294                 *err = -1;
1295                 return jsonNULL;
1296         }
1297
1298         osrfLogDebug( OSRF_LOG_MARK, "Object seems to be of the correct type" );
1299
1300         if (!ctx->session || !ctx->session->userData || !osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
1301                 osrfLogError( OSRF_LOG_MARK, "No active transaction -- required for CREATE" );
1302
1303                 osrfAppSessionStatus(
1304                         ctx->session,
1305                         OSRF_STATUS_BADREQUEST,
1306                         "osrfMethodException",
1307                         ctx->request,
1308                         "No active transaction -- required for CREATE"
1309                 );
1310                 *err = -1;
1311                 return jsonNULL;
1312         }
1313
1314         if (osrfHashGet( meta, "readonly" ) && strncasecmp("true", osrfHashGet( meta, "readonly" ), 4)) {
1315                 osrfAppSessionStatus(
1316                         ctx->session,
1317                         OSRF_STATUS_BADREQUEST,
1318                         "osrfMethodException",
1319                         ctx->request,
1320                         "Cannot INSERT readonly class"
1321                 );
1322                 *err = -1;
1323                 return jsonNULL;
1324         }
1325
1326
1327         char* trans_id = osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" );
1328
1329         // Set the last_xact_id
1330         int index = oilsIDL_ntop( target->classname, "last_xact_id" );
1331         if (index > -1) {
1332                 osrfLogDebug(OSRF_LOG_MARK, "Setting last_xact_id to %s on %s at position %d", trans_id, target->classname, index);
1333                 jsonObjectSetIndex(target, index, jsonNewObject(trans_id));
1334         }
1335
1336         osrfLogDebug( OSRF_LOG_MARK, "There is a transaction running..." );
1337
1338         dbhandle = writehandle;
1339
1340         osrfHash* fields = osrfHashGet(meta, "fields");
1341         char* pkey = osrfHashGet(meta, "primarykey");
1342         char* seq = osrfHashGet(meta, "sequence");
1343
1344         growing_buffer* table_buf = buffer_init(128);
1345         growing_buffer* col_buf = buffer_init(128);
1346         growing_buffer* val_buf = buffer_init(128);
1347
1348         OSRF_BUFFER_ADD(table_buf, "INSERT INTO ");
1349         OSRF_BUFFER_ADD(table_buf, osrfHashGet(meta, "tablename"));
1350         OSRF_BUFFER_ADD_CHAR( col_buf, '(' );
1351         buffer_add(val_buf,"VALUES (");
1352
1353
1354         int i = 0;
1355         int first = 1;
1356         char* field_name;
1357         osrfStringArray* field_list = osrfHashKeys( fields );
1358         while ( (field_name = osrfStringArrayGetString(field_list, i++)) ) {
1359
1360                 osrfHash* field = osrfHashGet( fields, field_name );
1361
1362                 if(!( strcmp( osrfHashGet(osrfHashGet(fields,field_name), "virtual"), "true" ) )) continue;
1363
1364                 const jsonObject* field_object = oilsFMGetObject( target, field_name );
1365
1366                 char* value;
1367                 if (field_object && field_object->classname) {
1368                         value = oilsFMGetString(
1369                                 field_object,
1370                                 (char*)oilsIDLFindPath("/%s/primarykey", field_object->classname)
1371                         );
1372                 } else {
1373                         value = jsonObjectToSimpleString( field_object );
1374                 }
1375
1376
1377                 if (first) {
1378                         first = 0;
1379                 } else {
1380                         OSRF_BUFFER_ADD_CHAR( col_buf, ',' );
1381                         OSRF_BUFFER_ADD_CHAR( val_buf, ',' );
1382                 }
1383
1384                 buffer_add(col_buf, field_name);
1385
1386                 if (!field_object || field_object->type == JSON_NULL) {
1387                         buffer_add( val_buf, "DEFAULT" );
1388
1389                 } else if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1390                         if ( !strcmp(osrfHashGet(field, "datatype"), "INT8") ) {
1391                                 buffer_fadd( val_buf, "%lld", atoll(value) );
1392
1393                         } else if ( !strcmp(osrfHashGet(field, "datatype"), "INT") ) {
1394                                 buffer_fadd( val_buf, "%d", atoi(value) );
1395
1396                         } else if ( !strcmp(osrfHashGet(field, "datatype"), "NUMERIC") ) {
1397                                 buffer_fadd( val_buf, "%f", atof(value) );
1398                         }
1399                 } else {
1400                         if ( dbi_conn_quote_string(writehandle, &value) ) {
1401                                 OSRF_BUFFER_ADD( val_buf, value );
1402
1403                         } else {
1404                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting string [%s]", MODULENAME, value);
1405                                 osrfAppSessionStatus(
1406                                         ctx->session,
1407                                         OSRF_STATUS_INTERNALSERVERERROR,
1408                                         "osrfMethodException",
1409                                         ctx->request,
1410                                         "Error quoting string -- please see the error log for more details"
1411                                 );
1412                                 free(value);
1413                                 buffer_free(table_buf);
1414                                 buffer_free(col_buf);
1415                                 buffer_free(val_buf);
1416                                 *err = -1;
1417                                 return jsonNULL;
1418                         }
1419                 }
1420
1421                 free(value);
1422
1423         }
1424
1425
1426         OSRF_BUFFER_ADD_CHAR( col_buf, ')' );
1427         OSRF_BUFFER_ADD_CHAR( val_buf, ')' );
1428
1429         char* table_str = buffer_release(table_buf);
1430         char* col_str   = buffer_release(col_buf);
1431         char* val_str   = buffer_release(val_buf);
1432         growing_buffer* sql = buffer_init(128);
1433         buffer_fadd( sql, "%s %s %s;", table_str, col_str, val_str );
1434         free(table_str);
1435         free(col_str);
1436         free(val_str);
1437
1438         char* query = buffer_release(sql);
1439
1440         osrfLogDebug(OSRF_LOG_MARK, "%s: Insert SQL [%s]", MODULENAME, query);
1441
1442
1443         dbi_result result = dbi_conn_query(writehandle, query);
1444
1445         jsonObject* obj = NULL;
1446
1447         if (!result) {
1448                 obj = jsonNewObject(NULL);
1449                 osrfLogError(
1450                         OSRF_LOG_MARK,
1451                         "%s ERROR inserting %s object using query [%s]",
1452                         MODULENAME,
1453                         osrfHashGet(meta, "fieldmapper"),
1454                         query
1455                 );
1456                 osrfAppSessionStatus(
1457                         ctx->session,
1458                         OSRF_STATUS_INTERNALSERVERERROR,
1459                         "osrfMethodException",
1460                         ctx->request,
1461                         "INSERT error -- please see the error log for more details"
1462                 );
1463                 *err = -1;
1464         } else {
1465
1466                 char* id = oilsFMGetString(target, pkey);
1467                 if (!id) {
1468                         unsigned long long new_id = dbi_conn_sequence_last(writehandle, seq);
1469                         growing_buffer* _id = buffer_init(10);
1470                         buffer_fadd(_id, "%lld", new_id);
1471                         id = buffer_release(_id);
1472                 }
1473
1474                 // Find quietness specification, if present
1475                 char* quiet_str = NULL;
1476                 if ( options ) {
1477                         const jsonObject* quiet_obj = jsonObjectGetKeyConst( options, "quiet" );
1478                         if( quiet_obj )
1479                                 quiet_str = jsonObjectToSimpleString( quiet_obj );
1480                 }
1481
1482                 if( quiet_str && !strcmp( quiet_str, "true" )) {  // if quietness is specified
1483                         obj = jsonNewObject(id);
1484                 }
1485                 else {
1486
1487                         jsonObject* fake_params = jsonNewObjectType(JSON_ARRAY);
1488                         jsonObjectPush(fake_params, jsonNewObjectType(JSON_HASH));
1489
1490                         jsonObjectSetKey(
1491                                 jsonObjectGetIndex(fake_params, 0),
1492                                 pkey,
1493                                 jsonNewObject(id)
1494                         );
1495
1496                         jsonObject* list = doFieldmapperSearch( ctx,meta, fake_params, err);
1497
1498                         if(*err) {
1499                                 jsonObjectFree( fake_params );
1500                                 obj = jsonNULL;
1501                         } else {
1502                                 obj = jsonObjectClone( jsonObjectGetIndex(list, 0) );
1503                         }
1504
1505                         jsonObjectFree( list );
1506                         jsonObjectFree( fake_params );
1507                 }
1508
1509                 if(quiet_str) free(quiet_str);
1510                 free(id);
1511         }
1512
1513         free(query);
1514
1515         return obj;
1516
1517 }
1518
1519
1520 static jsonObject* doRetrieve(osrfMethodContext* ctx, int* err ) {
1521
1522     int id_pos = 0;
1523     int order_pos = 1;
1524
1525 #ifdef PCRUD
1526     id_pos = 1;
1527     order_pos = 2;
1528 #endif
1529
1530         osrfHash* meta = osrfHashGet( (osrfHash*) ctx->method->userData, "class" );
1531
1532         char* id = jsonObjectToSimpleString(jsonObjectGetIndex(ctx->params, id_pos));
1533         jsonObject* order_hash = jsonObjectGetIndex(ctx->params, order_pos);
1534
1535         osrfLogDebug(
1536                 OSRF_LOG_MARK,
1537                 "%s retrieving %s object with primary key value of %s",
1538                 MODULENAME,
1539                 osrfHashGet(meta, "fieldmapper"),
1540                 id
1541         );
1542         free(id);
1543
1544         jsonObject* fake_params = jsonNewObjectType(JSON_ARRAY);
1545         jsonObjectPush(fake_params, jsonNewObjectType(JSON_HASH));
1546
1547         jsonObjectSetKey(
1548                 jsonObjectGetIndex(fake_params, 0),
1549                 osrfHashGet(meta, "primarykey"),
1550                 jsonObjectClone(jsonObjectGetIndex(ctx->params, id_pos))
1551         );
1552
1553
1554         if (order_hash) jsonObjectPush(fake_params, jsonObjectClone(order_hash) );
1555
1556         jsonObject* list = doFieldmapperSearch( ctx,meta, fake_params, err);
1557
1558         if(*err) {
1559                 jsonObjectFree( fake_params );
1560                 return jsonNULL;
1561         }
1562
1563         jsonObject* obj = jsonObjectClone( jsonObjectGetIndex(list, 0) );
1564
1565         jsonObjectFree( list );
1566         jsonObjectFree( fake_params );
1567
1568 #ifdef PCRUD
1569         if(!verifyObjectPCRUD(ctx, obj)) {
1570         jsonObjectFree(obj);
1571         *err = -1;
1572
1573         growing_buffer* msg = buffer_init(128);
1574                 OSRF_BUFFER_ADD( msg, MODULENAME );
1575                 OSRF_BUFFER_ADD( msg, ": Insufficient permissions to retrieve object" );
1576
1577         char* m = buffer_release(msg);
1578         osrfAppSessionStatus( ctx->session, OSRF_STATUS_NOTALLOWED, "osrfMethodException", ctx->request, m );
1579
1580         free(m);
1581
1582                 return jsonNULL;
1583         }
1584 #endif
1585
1586         return obj;
1587 }
1588
1589 static char* jsonNumberToDBString ( osrfHash* field, const jsonObject* value ) {
1590         growing_buffer* val_buf = buffer_init(32);
1591
1592         if ( !strncmp(osrfHashGet(field, "datatype"), "INT", (size_t)3) ) {
1593                 if (value->type == JSON_NUMBER) buffer_fadd( val_buf, "%ld", (long)jsonObjectGetNumber(value) );
1594                 else {
1595                         char* val_str = jsonObjectToSimpleString(value);
1596                         buffer_fadd( val_buf, "%ld", atol(val_str) );
1597                         free(val_str);
1598                 }
1599
1600         } else if ( !strcmp(osrfHashGet(field, "datatype"), "NUMERIC") ) {
1601                 if (value->type == JSON_NUMBER) buffer_fadd( val_buf, "%f",  jsonObjectGetNumber(value) );
1602                 else {
1603                         char* val_str = jsonObjectToSimpleString(value);
1604                         buffer_fadd( val_buf, "%f", atof(val_str) );
1605                         free(val_str);
1606                 }
1607         }
1608
1609         return buffer_release(val_buf);
1610 }
1611
1612 static char* searchINPredicate (const char* class, osrfHash* field,
1613                 const jsonObject* node, const char* op) {
1614         growing_buffer* sql_buf = buffer_init(32);
1615
1616         buffer_fadd(
1617                 sql_buf,
1618                 "\"%s\".%s ",
1619                 class,
1620                 osrfHashGet(field, "name")
1621         );
1622
1623         if (!op) {
1624                 buffer_add(sql_buf, "IN (");
1625         } else if (!(strcasecmp(op,"not in"))) {
1626                 buffer_add(sql_buf, "NOT IN (");
1627         } else {
1628                 buffer_add(sql_buf, "IN (");
1629         }
1630
1631         int in_item_index = 0;
1632         int in_item_first = 1;
1633         jsonObject* in_item;
1634         while ( (in_item = jsonObjectGetIndex(node, in_item_index++)) ) {
1635
1636                 if (in_item_first)
1637                         in_item_first = 0;
1638                 else
1639                         buffer_add(sql_buf, ", ");
1640
1641                 if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1642                         char* val = jsonNumberToDBString( field, in_item );
1643                         OSRF_BUFFER_ADD( sql_buf, val );
1644                         free(val);
1645
1646                 } else {
1647                         char* key_string = jsonObjectToSimpleString(in_item);
1648                         if ( dbi_conn_quote_string(dbhandle, &key_string) ) {
1649                                 OSRF_BUFFER_ADD( sql_buf, key_string );
1650                                 free(key_string);
1651                         } else {
1652                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key string [%s]", MODULENAME, key_string);
1653                                 free(key_string);
1654                                 buffer_free(sql_buf);
1655                                 return NULL;
1656                         }
1657                 }
1658         }
1659
1660         OSRF_BUFFER_ADD_CHAR( sql_buf, ')' );
1661
1662         return buffer_release(sql_buf);
1663 }
1664
1665 // Receive a JSON_ARRAY representing a function call.  The first
1666 // entry in the array is the function name.  The rest are parameters.
1667 static char* searchValueTransform( const jsonObject* array ) {
1668         growing_buffer* sql_buf = buffer_init(32);
1669
1670         char* val = NULL;
1671         jsonObject* func_item;
1672
1673         // Get the function name
1674         if( array->size > 0 ) {
1675                 func_item = jsonObjectGetIndex( array, 0 );
1676                 val = jsonObjectToSimpleString( func_item );
1677                 OSRF_BUFFER_ADD( sql_buf, val );
1678                 OSRF_BUFFER_ADD( sql_buf, "( " );
1679                 free(val);
1680         }
1681
1682         // Get the parameters
1683         int func_item_index = 1;   // We already grabbed the zeroth entry
1684         while ( (func_item = jsonObjectGetIndex(array, func_item_index++)) ) {
1685
1686                 // Add a separator comma, if we need one
1687                 if( func_item_index > 1 )
1688                         buffer_add( sql_buf, ", " );
1689
1690                 // Add the current parameter
1691                 if (func_item->type == JSON_NULL) {
1692                         buffer_add( sql_buf, "NULL" );
1693                 } else {
1694                         val = jsonObjectToSimpleString(func_item);
1695                         if ( dbi_conn_quote_string(dbhandle, &val) ) {
1696                                 OSRF_BUFFER_ADD( sql_buf, val );
1697                                 free(val);
1698                         } else {
1699                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key string [%s]", MODULENAME, val);
1700                                 buffer_free(sql_buf);
1701                                 free(val);
1702                                 return NULL;
1703                         }
1704                 }
1705         }
1706
1707         buffer_add( sql_buf, " )" );
1708
1709         return buffer_release(sql_buf);
1710 }
1711
1712 static char* searchFunctionPredicate (const char* class, osrfHash* field,
1713                 const jsonObject* node, const char* node_key) {
1714         growing_buffer* sql_buf = buffer_init(32);
1715
1716         char* val = searchValueTransform(node);
1717
1718         buffer_fadd(
1719                 sql_buf,
1720                 "\"%s\".%s %s %s",
1721                 class,
1722                 osrfHashGet(field, "name"),
1723                 node_key,
1724                 val
1725         );
1726
1727         free(val);
1728
1729         return buffer_release(sql_buf);
1730 }
1731
1732 // class is a class name
1733 // field is a field definition as stored in the IDL
1734 // node comes from the method parameter, and represents an entry in the SELECT list
1735 static char* searchFieldTransform (const char* class, osrfHash* field, const jsonObject* node) {
1736         growing_buffer* sql_buf = buffer_init(32);
1737
1738         char* field_transform = jsonObjectToSimpleString( jsonObjectGetKeyConst( node, "transform" ) );
1739         char* transform_subcolumn = jsonObjectToSimpleString( jsonObjectGetKeyConst( node, "result_field" ) );
1740
1741         if(transform_subcolumn)
1742                 OSRF_BUFFER_ADD_CHAR( sql_buf, '(' );    // enclose transform in parentheses
1743
1744         if (field_transform) {
1745                 buffer_fadd( sql_buf, "%s(\"%s\".%s", field_transform, class, osrfHashGet(field, "name"));
1746             const jsonObject* array = jsonObjectGetKeyConst( node, "params" );
1747
1748         if (array) {
1749                 int func_item_index = 0;
1750                 jsonObject* func_item;
1751                 while ( (func_item = jsonObjectGetIndex(array, func_item_index++)) ) {
1752
1753                         char* val = jsonObjectToSimpleString(func_item);
1754
1755                     if ( !val ) {
1756                             buffer_add( sql_buf, ",NULL" );
1757                     } else if ( dbi_conn_quote_string(dbhandle, &val) ) {
1758                                         OSRF_BUFFER_ADD_CHAR( sql_buf, ',' );
1759                                         OSRF_BUFFER_ADD( sql_buf, val );
1760                         } else {
1761                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key string [%s]", MODULENAME, val);
1762                                         free(transform_subcolumn);
1763                                         free(field_transform);
1764                                         free(val);
1765                                 buffer_free(sql_buf);
1766                                 return NULL;
1767                 }
1768                                 free(val);
1769                         }
1770         }
1771
1772                 buffer_add( sql_buf, " )" );
1773
1774         } else {
1775                 buffer_fadd( sql_buf, "\"%s\".%s", class, osrfHashGet(field, "name"));
1776         }
1777
1778     if (transform_subcolumn)
1779         buffer_fadd( sql_buf, ").\"%s\"", transform_subcolumn );
1780
1781         if (field_transform) free(field_transform);
1782         if (transform_subcolumn) free(transform_subcolumn);
1783
1784         return buffer_release(sql_buf);
1785 }
1786
1787 static char* searchFieldTransformPredicate (const char* class, osrfHash* field, jsonObject* node, const char* node_key) {
1788         char* field_transform = searchFieldTransform( class, field, node );
1789         char* value = NULL;
1790
1791         if (!jsonObjectGetKeyConst( node, "value" )) {
1792                 value = searchWHERE( node, osrfHashGet( oilsIDL(), class ), AND_OP_JOIN, NULL );
1793         } else if (jsonObjectGetKeyConst( node, "value" )->type == JSON_ARRAY) {
1794                 value = searchValueTransform(jsonObjectGetKeyConst( node, "value" ));
1795         } else if (jsonObjectGetKeyConst( node, "value" )->type == JSON_HASH) {
1796                 value = searchWHERE( jsonObjectGetKeyConst( node, "value" ), osrfHashGet( oilsIDL(), class ), AND_OP_JOIN, NULL );
1797         } else if (jsonObjectGetKeyConst( node, "value" )->type != JSON_NULL) {
1798                 if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1799                         value = jsonNumberToDBString( field, jsonObjectGetKeyConst( node, "value" ) );
1800                 } else {
1801                         value = jsonObjectToSimpleString(jsonObjectGetKeyConst( node, "value" ));
1802                         if ( !dbi_conn_quote_string(dbhandle, &value) ) {
1803                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key string [%s]", MODULENAME, value);
1804                                 free(value);
1805                                 free(field_transform);
1806                                 return NULL;
1807                         }
1808                 }
1809         }
1810
1811         growing_buffer* sql_buf = buffer_init(32);
1812
1813         buffer_fadd(
1814                 sql_buf,
1815                 "%s %s %s",
1816                 field_transform,
1817                 node_key,
1818                 value
1819         );
1820
1821         free(value);
1822         free(field_transform);
1823
1824         return buffer_release(sql_buf);
1825 }
1826
1827 static char* searchSimplePredicate (const char* orig_op, const char* class,
1828                 osrfHash* field, const jsonObject* node) {
1829
1830         char* val = NULL;
1831
1832         if (node->type != JSON_NULL) {
1833                 if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1834                         val = jsonNumberToDBString( field, node );
1835                 } else {
1836                         val = jsonObjectToSimpleString(node);
1837                 }
1838         }
1839
1840         char* pred = searchWriteSimplePredicate( class, field, osrfHashGet(field, "name"), orig_op, val );
1841
1842         if (val) free(val);
1843
1844         return pred;
1845 }
1846
1847 static char* searchWriteSimplePredicate ( const char* class, osrfHash* field,
1848         const char* left, const char* orig_op, const char* right ) {
1849
1850         char* val = NULL;
1851         char* op = NULL;
1852         if (right == NULL) {
1853                 val = strdup("NULL");
1854
1855                 if (strcmp( orig_op, "=" ))
1856                         op = strdup("IS NOT");
1857                 else
1858                         op = strdup("IS");
1859
1860         } else if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1861                 val = strdup(right);
1862                 op = strdup(orig_op);
1863
1864         } else {
1865                 val = strdup(right);
1866                 if ( !dbi_conn_quote_string(dbhandle, &val) ) {
1867                         osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key string [%s]", MODULENAME, val);
1868                         free(val);
1869                         return NULL;
1870                 }
1871                 op = strdup(orig_op);
1872         }
1873
1874         growing_buffer* sql_buf = buffer_init(16);
1875         buffer_fadd( sql_buf, "\"%s\".%s %s %s", class, left, op, val );
1876         free(val);
1877         free(op);
1878
1879         return buffer_release(sql_buf);
1880 }
1881
1882 static char* searchBETWEENPredicate (const char* class, osrfHash* field, jsonObject* node) {
1883
1884         char* x_string;
1885         char* y_string;
1886
1887         if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
1888                 x_string = jsonNumberToDBString(field, jsonObjectGetIndex(node,0));
1889                 y_string = jsonNumberToDBString(field, jsonObjectGetIndex(node,1));
1890
1891         } else {
1892                 x_string = jsonObjectToSimpleString(jsonObjectGetIndex(node,0));
1893                 y_string = jsonObjectToSimpleString(jsonObjectGetIndex(node,1));
1894                 if ( !(dbi_conn_quote_string(dbhandle, &x_string) && dbi_conn_quote_string(dbhandle, &y_string)) ) {
1895                         osrfLogError(OSRF_LOG_MARK, "%s: Error quoting key strings [%s] and [%s]", MODULENAME, x_string, y_string);
1896                         free(x_string);
1897                         free(y_string);
1898                         return NULL;
1899                 }
1900         }
1901
1902         growing_buffer* sql_buf = buffer_init(32);
1903         buffer_fadd( sql_buf, "%s BETWEEN %s AND %s", osrfHashGet(field, "name"), x_string, y_string );
1904         free(x_string);
1905         free(y_string);
1906
1907         return buffer_release(sql_buf);
1908 }
1909
1910 static char* searchPredicate ( const char* class, osrfHash* field, jsonObject* node ) {
1911
1912         char* pred = NULL;
1913         if (node->type == JSON_ARRAY) { // equality IN search
1914                 pred = searchINPredicate( class, field, node, NULL );
1915         } else if (node->type == JSON_HASH) { // non-equality search
1916                 jsonObject* pred_node;
1917                 jsonIterator* pred_itr = jsonNewIterator( node );
1918                 while ( (pred_node = jsonIteratorNext( pred_itr )) ) {
1919                         if ( !(strcasecmp( pred_itr->key,"between" )) )
1920                                 pred = searchBETWEENPredicate( class, field, pred_node );
1921                         else if ( !(strcasecmp( pred_itr->key,"in" )) || !(strcasecmp( pred_itr->key,"not in" )) )
1922                                 pred = searchINPredicate( class, field, pred_node, pred_itr->key );
1923                         else if ( pred_node->type == JSON_ARRAY )
1924                                 pred = searchFunctionPredicate( class, field, pred_node, pred_itr->key );
1925                         else if ( pred_node->type == JSON_HASH )
1926                                 pred = searchFieldTransformPredicate( class, field, pred_node, pred_itr->key );
1927                         else
1928                                 pred = searchSimplePredicate( pred_itr->key, class, field, pred_node );
1929
1930                         break;
1931                 }
1932         jsonIteratorFree(pred_itr);
1933         } else if (node->type == JSON_NULL) { // IS NULL search
1934                 growing_buffer* _p = buffer_init(64);
1935                 buffer_fadd(
1936                         _p,
1937                         "\"%s\".%s IS NULL",
1938                         class,
1939                         osrfHashGet(field, "name")
1940                 );
1941                 pred = buffer_release(_p);
1942         } else { // equality search
1943                 pred = searchSimplePredicate( "=", class, field, node );
1944         }
1945
1946         return pred;
1947
1948 }
1949
1950
1951 /*
1952
1953 join : {
1954         acn : {
1955                 field : record,
1956                 fkey : id
1957                 type : left
1958                 filter_op : or
1959                 filter : { ... },
1960                 join : {
1961                         acp : {
1962                                 field : call_number,
1963                                 fkey : id,
1964                                 filter : { ... },
1965                         },
1966                 },
1967         },
1968         mrd : {
1969                 field : record,
1970                 type : inner
1971                 fkey : id,
1972                 filter : { ... },
1973         }
1974 }
1975
1976 */
1977
1978 static char* searchJOIN ( const jsonObject* join_hash, osrfHash* leftmeta ) {
1979
1980         const jsonObject* working_hash;
1981         jsonObject* freeable_hash = NULL;
1982
1983         if (join_hash->type == JSON_STRING) {
1984                 // create a wrapper around a copy of the original
1985                 char* _tmp = jsonObjectToSimpleString( join_hash );
1986                 freeable_hash = jsonNewObjectType(JSON_HASH);
1987                 jsonObjectSetKey(freeable_hash, _tmp, NULL);
1988                 free(_tmp);
1989                 working_hash = freeable_hash;
1990         }
1991         else
1992                 working_hash = join_hash;
1993
1994         growing_buffer* join_buf = buffer_init(128);
1995         char* leftclass = osrfHashGet(leftmeta, "classname");
1996
1997         jsonObject* snode = NULL;
1998         jsonIterator* search_itr = jsonNewIterator( working_hash );
1999         if(freeable_hash)
2000                 jsonObjectFree(freeable_hash);
2001
2002         while ( (snode = jsonIteratorNext( search_itr )) ) {
2003                 osrfHash* idlClass = osrfHashGet( oilsIDL(), search_itr->key );
2004
2005                 char* class = osrfHashGet(idlClass, "classname");
2006
2007                 char* fkey = jsonObjectToSimpleString( jsonObjectGetKeyConst( snode, "fkey" ) );
2008                 char* field = jsonObjectToSimpleString( jsonObjectGetKeyConst( snode, "field" ) );
2009
2010                 if (field && !fkey) {
2011                         fkey = (char*)oilsIDLFindPath("/%s/links/%s/key", class, field);
2012                         if (!fkey) {
2013                                 osrfLogError(
2014                                         OSRF_LOG_MARK,
2015                                         "%s: JOIN failed.  No link defined from %s.%s to %s",
2016                                         MODULENAME,
2017                                         class,
2018                                         field,
2019                                         leftclass
2020                                 );
2021                                 buffer_free(join_buf);
2022                                 free(field);
2023                                 jsonIteratorFree(search_itr);
2024                                 return NULL;
2025                         }
2026                         fkey = strdup( fkey );
2027
2028                 } else if (!field && fkey) {
2029                         field = (char*)oilsIDLFindPath("/%s/links/%s/key", leftclass, fkey );
2030                         if (!field) {
2031                                 osrfLogError(
2032                                         OSRF_LOG_MARK,
2033                                         "%s: JOIN failed.  No link defined from %s.%s to %s",
2034                                         MODULENAME,
2035                                         leftclass,
2036                                         fkey,
2037                                         class
2038                                 );
2039                                 buffer_free(join_buf);
2040                                 free(fkey);
2041                                 jsonIteratorFree(search_itr);
2042                                 return NULL;
2043                         }
2044                         field = strdup( field );
2045
2046                 } else if (!field && !fkey) {
2047                         osrfHash* _links = oilsIDLFindPath("/%s/links", leftclass);
2048
2049                         int i = 0;
2050                         osrfStringArray* keys = osrfHashKeys( _links );
2051                         while ( (fkey = osrfStringArrayGetString(keys, i++)) ) {
2052                                 fkey = strdup(osrfStringArrayGetString(keys, i++));
2053                                 if ( !strcmp( (char*)oilsIDLFindPath("/%s/links/%s/class", leftclass, fkey), class) ) {
2054                                         field = strdup( (char*)oilsIDLFindPath("/%s/links/%s/key", leftclass, fkey) );
2055                                         break;
2056                                 } else {
2057                                         free(fkey);
2058                                 }
2059                         }
2060                         osrfStringArrayFree(keys);
2061
2062                         if (!field && !fkey) {
2063                                 _links = oilsIDLFindPath("/%s/links", class);
2064
2065                                 i = 0;
2066                                 keys = osrfHashKeys( _links );
2067                                 while ( (field = osrfStringArrayGetString(keys, i++)) ) {
2068                                         field = strdup(osrfStringArrayGetString(keys, i++));
2069                                         if ( !strcmp( (char*)oilsIDLFindPath("/%s/links/%s/class", class, field), class) ) {
2070                                                 fkey = strdup( (char*)oilsIDLFindPath("/%s/links/%s/key", class, field) );
2071                                                 break;
2072                                         } else {
2073                                                 free(field);
2074                                         }
2075                                 }
2076                                 osrfStringArrayFree(keys);
2077                         }
2078
2079                         if (!field && !fkey) {
2080                                 osrfLogError(
2081                                         OSRF_LOG_MARK,
2082                                         "%s: JOIN failed.  No link defined between %s and %s",
2083                                         MODULENAME,
2084                                         leftclass,
2085                                         class
2086                                 );
2087                                 buffer_free(join_buf);
2088                                 jsonIteratorFree(search_itr);
2089                                 return NULL;
2090                         }
2091
2092                 }
2093
2094                 char* type = jsonObjectToSimpleString( jsonObjectGetKeyConst( snode, "type" ) );
2095                 if (type) {
2096                         if ( !strcasecmp(type,"left") ) {
2097                                 buffer_add(join_buf, " LEFT JOIN");
2098                         } else if ( !strcasecmp(type,"right") ) {
2099                                 buffer_add(join_buf, " RIGHT JOIN");
2100                         } else if ( !strcasecmp(type,"full") ) {
2101                                 buffer_add(join_buf, " FULL JOIN");
2102                         } else {
2103                                 buffer_add(join_buf, " INNER JOIN");
2104                         }
2105                 } else {
2106                         buffer_add(join_buf, " INNER JOIN");
2107                 }
2108                 free(type);
2109
2110                 char* table = getSourceDefinition(idlClass);
2111                 buffer_fadd(join_buf, " %s AS \"%s\" ON ( \"%s\".%s = \"%s\".%s", table, class, class, field, leftclass, fkey);
2112                 free(table);
2113
2114                 const jsonObject* filter = jsonObjectGetKeyConst( snode, "filter" );
2115                 if (filter) {
2116                         char* filter_op = jsonObjectToSimpleString( jsonObjectGetKeyConst( snode, "filter_op" ) );
2117                         if (filter_op) {
2118                                 if (!strcasecmp("or",filter_op)) {
2119                                         buffer_add( join_buf, " OR " );
2120                                 } else {
2121                                         buffer_add( join_buf, " AND " );
2122                                 }
2123                         } else {
2124                                 buffer_add( join_buf, " AND " );
2125                         }
2126
2127                         char* jpred = searchWHERE( filter, idlClass, AND_OP_JOIN, NULL );
2128                         OSRF_BUFFER_ADD_CHAR( join_buf, ' ' );
2129                         OSRF_BUFFER_ADD( join_buf, jpred );
2130                         free(jpred);
2131                         free(filter_op);
2132                 }
2133
2134                 buffer_add(join_buf, " ) ");
2135
2136                 const jsonObject* join_filter = jsonObjectGetKeyConst( snode, "join" );
2137                 if (join_filter) {
2138                         char* jpred = searchJOIN( join_filter, idlClass );
2139                         OSRF_BUFFER_ADD_CHAR( join_buf, ' ' );
2140                         OSRF_BUFFER_ADD( join_buf, jpred );
2141                         free(jpred);
2142                 }
2143
2144                 free(fkey);
2145                 free(field);
2146         }
2147
2148     jsonIteratorFree(search_itr);
2149
2150         return buffer_release(join_buf);
2151 }
2152
2153 /*
2154
2155 { +class : { -or|-and : { field : { op : value }, ... } ... }, ... }
2156 { +class : { -or|-and : [ { field : { op : value }, ... }, ...] ... }, ... }
2157 [ { +class : { -or|-and : [ { field : { op : value }, ... }, ...] ... }, ... }, ... ]
2158
2159 */
2160
2161 static char* searchWHERE ( const jsonObject* search_hash, osrfHash* meta, int opjoin_type, osrfMethodContext* ctx ) {
2162
2163         osrfLogDebug(
2164         OSRF_LOG_MARK,
2165         "%s: Entering searchWHERE; search_hash addr = %p, meta addr = %p, opjoin_type = %d, ctx addr = %p",
2166         MODULENAME,
2167         search_hash,
2168         meta,
2169         opjoin_type,
2170         ctx
2171     );
2172
2173         growing_buffer* sql_buf = buffer_init(128);
2174
2175         jsonObject* node = NULL;
2176
2177     int first = 1;
2178     if ( search_hash->type == JSON_ARRAY ) {
2179             osrfLogDebug(OSRF_LOG_MARK, "%s: In WHERE clause, condition type is JSON_ARRAY", MODULENAME);
2180         jsonIterator* search_itr = jsonNewIterator( search_hash );
2181         while ( (node = jsonIteratorNext( search_itr )) ) {
2182             if (first) {
2183                 first = 0;
2184             } else {
2185                 if (opjoin_type == OR_OP_JOIN) buffer_add(sql_buf, " OR ");
2186                 else buffer_add(sql_buf, " AND ");
2187             }
2188
2189             char* subpred = searchWHERE( node, meta, opjoin_type, ctx );
2190             buffer_fadd(sql_buf, "( %s )", subpred);
2191             free(subpred);
2192         }
2193         jsonIteratorFree(search_itr);
2194
2195     } else if ( search_hash->type == JSON_HASH ) {
2196             osrfLogDebug(OSRF_LOG_MARK, "%s: In WHERE clause, condition type is JSON_HASH", MODULENAME);
2197         jsonIterator* search_itr = jsonNewIterator( search_hash );
2198         while ( (node = jsonIteratorNext( search_itr )) ) {
2199
2200             if (first) {
2201                 first = 0;
2202             } else {
2203                 if (opjoin_type == OR_OP_JOIN) buffer_add(sql_buf, " OR ");
2204                 else buffer_add(sql_buf, " AND ");
2205             }
2206
2207             if ( !strncmp("+",search_itr->key,1) ) {
2208                 if ( node->type == JSON_STRING ) {
2209                     char* subpred = jsonObjectToSimpleString( node );
2210                     buffer_fadd(sql_buf, " \"%s\".%s ", search_itr->key + 1, subpred);
2211                     free(subpred);
2212                 } else {
2213                     char* subpred = searchWHERE( node, osrfHashGet( oilsIDL(), search_itr->key + 1 ), AND_OP_JOIN, ctx );
2214                     buffer_fadd(sql_buf, "( %s )", subpred);
2215                     free(subpred);
2216                 }
2217             } else if ( !strcasecmp("-or",search_itr->key) ) {
2218                 char* subpred = searchWHERE( node, meta, OR_OP_JOIN, ctx );
2219                 buffer_fadd(sql_buf, "( %s )", subpred);
2220                 free(subpred);
2221             } else if ( !strcasecmp("-and",search_itr->key) ) {
2222                 char* subpred = searchWHERE( node, meta, AND_OP_JOIN, ctx );
2223                 buffer_fadd(sql_buf, "( %s )", subpred);
2224                 free(subpred);
2225             } else if ( !strcasecmp("-exists",search_itr->key) ) {
2226                 char* subpred = SELECT(
2227                     ctx,
2228                     jsonObjectGetKey( node, "select" ),
2229                     jsonObjectGetKey( node, "from" ),
2230                     jsonObjectGetKey( node, "where" ),
2231                     jsonObjectGetKey( node, "having" ),
2232                     jsonObjectGetKey( node, "order_by" ),
2233                     jsonObjectGetKey( node, "limit" ),
2234                     jsonObjectGetKey( node, "offset" ),
2235                     SUBSELECT
2236                 );
2237
2238                 buffer_fadd(sql_buf, "EXISTS ( %s )", subpred);
2239                 free(subpred);
2240             } else if ( !strcasecmp("-not-exists",search_itr->key) ) {
2241                 char* subpred = SELECT(
2242                     ctx,
2243                     jsonObjectGetKey( node, "select" ),
2244                     jsonObjectGetKey( node, "from" ),
2245                     jsonObjectGetKey( node, "where" ),
2246                     jsonObjectGetKey( node, "having" ),
2247                     jsonObjectGetKey( node, "order_by" ),
2248                     jsonObjectGetKey( node, "limit" ),
2249                     jsonObjectGetKey( node, "offset" ),
2250                     SUBSELECT
2251                 );
2252
2253                 buffer_fadd(sql_buf, "NOT EXISTS ( %s )", subpred);
2254                 free(subpred);
2255             } else {
2256
2257                 char* class = osrfHashGet(meta, "classname");
2258                 osrfHash* fields = osrfHashGet(meta, "fields");
2259                 osrfHash* field = osrfHashGet( fields, search_itr->key );
2260
2261
2262                 if (!field) {
2263                     char* table = getSourceDefinition(meta);
2264                     osrfLogError(
2265                         OSRF_LOG_MARK,
2266                         "%s: Attempt to reference non-existent column %s on %s (%s)",
2267                         MODULENAME,
2268                         search_itr->key,
2269                         table,
2270                         class
2271                     );
2272                     buffer_free(sql_buf);
2273                     free(table);
2274                                         jsonIteratorFree(search_itr);
2275                                         return NULL;
2276                 }
2277
2278                 char* subpred = searchPredicate( class, field, node );
2279                 buffer_add( sql_buf, subpred );
2280                 free(subpred);
2281             }
2282         }
2283             jsonIteratorFree(search_itr);
2284
2285     } else {
2286         // ERROR ... only hash and array allowed at this level
2287         char* predicate_string = jsonObjectToJSON( search_hash );
2288         osrfLogError(
2289             OSRF_LOG_MARK,
2290             "%s: Invalid predicate structure: %s",
2291             MODULENAME,
2292             predicate_string
2293         );
2294         buffer_free(sql_buf);
2295         free(predicate_string);
2296         return NULL;
2297     }
2298
2299
2300         return buffer_release(sql_buf);
2301 }
2302
2303 static char* SELECT (
2304                 /* method context */ osrfMethodContext* ctx,
2305
2306                 /* SELECT   */ jsonObject* selhash,
2307                 /* FROM     */ jsonObject* join_hash,
2308                 /* WHERE    */ jsonObject* search_hash,
2309                 /* HAVING   */ jsonObject* having_hash,
2310                 /* ORDER BY */ jsonObject* order_hash,
2311                 /* LIMIT    */ jsonObject* limit,
2312                 /* OFFSET   */ jsonObject* offset,
2313                 /* flags    */ int flags
2314 ) {
2315         const char* locale = osrf_message_get_last_locale();
2316
2317         // in case we don't get a select list
2318         jsonObject* defaultselhash = NULL;
2319
2320         // general tmp objects
2321         const jsonObject* tmp_const;
2322         jsonObject* selclass = NULL;
2323         jsonObject* selfield = NULL;
2324         jsonObject* snode = NULL;
2325         jsonObject* onode = NULL;
2326
2327         char* string = NULL;
2328         int from_function = 0;
2329         int first = 1;
2330         int gfirst = 1;
2331         //int hfirst = 1;
2332
2333         // the core search class
2334         char* core_class = NULL;
2335
2336         // metadata about the core search class
2337         osrfHash* core_meta = NULL;
2338
2339         // punt if there's no core class
2340         if (!join_hash || ( join_hash->type == JSON_HASH && !join_hash->size ))
2341                 return NULL;
2342
2343         // get the core class -- the only key of the top level FROM clause, or a string
2344         if (join_hash->type == JSON_HASH) {
2345                 jsonIterator* tmp_itr = jsonNewIterator( join_hash );
2346                 snode = jsonIteratorNext( tmp_itr );
2347
2348                 core_class = strdup( tmp_itr->key );
2349                 join_hash = snode;
2350
2351                 jsonObject* extra = jsonIteratorNext( tmp_itr );
2352
2353                 jsonIteratorFree( tmp_itr );
2354                 snode = NULL;
2355
2356                 // There shouldn't be more than one entry in join_hash
2357                 if( extra )
2358                         return NULL;    // Malformed join_hash; extra entry
2359
2360         } else if (join_hash->type == JSON_ARRAY) {
2361         from_function = 1;
2362         selhash = NULL;
2363
2364         } else if (join_hash->type == JSON_STRING) {
2365                 core_class = jsonObjectToSimpleString( join_hash );
2366                 join_hash = NULL;
2367         }
2368         else
2369                 return NULL;
2370
2371         // punt if we don't know about the core class (and it's not a function)
2372         if (!from_function && !(core_meta = osrfHashGet( oilsIDL(), core_class ))) {
2373                 free(core_class);
2374                 return NULL;
2375         }
2376
2377         // if the select list is empty, or the core class field list is '*',
2378         // build the default select list ...
2379         if (!selhash) {
2380                 selhash = defaultselhash = jsonNewObjectType(JSON_HASH);
2381                 jsonObjectSetKey( selhash, core_class, jsonNewObjectType(JSON_ARRAY) );
2382         } else if ( (tmp_const = jsonObjectGetKeyConst( selhash, core_class )) && tmp_const->type == JSON_STRING ) {
2383                 char* _x = jsonObjectToSimpleString( tmp_const );
2384                 if (!strncmp( "*", _x, 1 )) {
2385                         jsonObjectRemoveKey( selhash, core_class );
2386                         jsonObjectSetKey( selhash, core_class, jsonNewObjectType(JSON_ARRAY) );
2387                 }
2388                 free(_x);
2389         }
2390
2391         // the query buffer
2392         growing_buffer* sql_buf = buffer_init(128);
2393
2394         // temp buffer for the SELECT list
2395         growing_buffer* select_buf = buffer_init(128);
2396         growing_buffer* order_buf = buffer_init(128);
2397         growing_buffer* group_buf = buffer_init(128);
2398         growing_buffer* having_buf = buffer_init(128);
2399
2400         // Build a select list
2401         if(from_function)   // From a function we select everything
2402                 OSRF_BUFFER_ADD_CHAR( select_buf, '*' );
2403         else {
2404
2405                 // If we need to build a default list, do so
2406                 jsonObject* _tmp = jsonObjectGetKey( selhash, core_class );
2407                 if ( _tmp && !_tmp->size ) {
2408
2409                         int i = 0;
2410                         char* field;
2411                         osrfHash* core_fields = osrfHashGet( core_meta, "fields" );
2412
2413                 osrfStringArray* keys = osrfHashKeys( core_fields );
2414                         while ( (field = osrfStringArrayGetString(keys, i++)) ) {
2415                         if ( strncasecmp( "true", osrfHashGet( osrfHashGet( core_fields, field ), "virtual" ), 4 ) )
2416                                         jsonObjectPush( _tmp, jsonNewObject( field ) );
2417                 }
2418                         osrfStringArrayFree(keys);
2419                 }
2420
2421                 // Now build the actual select list
2422             int sel_pos = 1;
2423             jsonObject* is_agg = jsonObjectFindPath(selhash, "//aggregate");
2424             first = 1;
2425             gfirst = 1;
2426             jsonIterator* selclass_itr = jsonNewIterator( selhash );
2427             while ( (selclass = jsonIteratorNext( selclass_itr )) ) {    // For each class
2428
2429                     // round trip through the idl, just to be safe
2430                         const char* cname = selclass_itr->key;
2431                         osrfHash* idlClass = osrfHashGet( oilsIDL(), cname );
2432                     if (!idlClass)
2433                                 // No such class.  Skip it.
2434                                 continue;
2435
2436                     // Make sure the target relation is in the join tree.
2437
2438                         // At this point join_hash is a step down from the join_hash we
2439                         // received as a parameter.  If the original was a JSON_STRING,
2440                         // then json_hash is now NULL.  If the original was a JSON_HASH,
2441                         // then json_hash is now the first (and only) entry in it,
2442                         // denoting the core class.  We've already excluded the
2443                         // possibility that the original was a JSON_ARRAY, because in
2444                         // that case from_function would be non-NULL, and we wouldn't
2445                         // be here.
2446
2447                     if ( strcmp( core_class, cname )) {
2448                             if (!join_hash)
2449                                         // There's only one class in the FROM clause,
2450                                         // and this isn't it.  Skip it.
2451                                         continue;
2452
2453                                 if (join_hash->type == JSON_STRING) {
2454                                     string = jsonObjectToSimpleString(join_hash);
2455                                         int different = strcmp( string, cname );
2456                                     free(string);
2457                                         if ( different )
2458                                                 // There's only one class in the FROM clause,
2459                                                 // and this isn't it.  Skip it.
2460                                                 continue;
2461                                 } else {
2462                                     jsonObject* found = jsonObjectFindPath(join_hash, "//%s", cname);
2463                                         unsigned long size = found->size;
2464                                         jsonObjectFree( found );
2465                                         if ( 0 == size )
2466                                                 // No such class anywhere in the join tree.  Skip it.
2467                                                 continue;
2468                                 }
2469                     }
2470
2471                         // Look up some attributes of the current class, so that we
2472                         // don't have to look them up again for each field
2473                         osrfHash* class_field_set = osrfHashGet( idlClass, "fields" );
2474                         char* class_pkey = osrfHashGet( idlClass, "primarykey" );
2475                         char* class_tname = osrfHashGet( idlClass, "tablename" );
2476
2477                     // stitch together the column list ...
2478                     jsonIterator* select_itr = jsonNewIterator( selclass );
2479                     while ( (selfield = jsonIteratorNext( select_itr )) ) {   // for each SELECT column
2480
2481                                 // If we need a separator comma, add one
2482                                 if (first) {
2483                                         first = 0;
2484                                 } else {
2485                                         OSRF_BUFFER_ADD_CHAR( select_buf, ',' );
2486                                 }
2487
2488                             // ... if it's a string, just toss it on the pile
2489                             if (selfield->type == JSON_STRING) {
2490
2491                                     // again, just to be safe
2492                                         const char* _requested_col = selfield->value.s;
2493                                     osrfHash* field = osrfHashGet( class_field_set, _requested_col );
2494                                     if (!field) continue;               // No such field in current class; skip it
2495
2496                                         const char* col_name = osrfHashGet(field, "name");
2497
2498                     if (locale) {
2499                             const char* i18n;
2500                                     if (flags & DISABLE_I18N)
2501                             i18n = NULL;
2502                                                 else
2503                                                         i18n = osrfHashGet(field, "i18n");
2504
2505                             if ( i18n && !strncasecmp("true", i18n, 4)) {
2506                             buffer_fadd( select_buf,
2507                                                                 " oils_i18n_xlate('%s', '%s', '%s', '%s', \"%s\".%s::TEXT, '%s') AS \"%s\"",
2508                                                                 class_tname, cname, col_name, class_pkey, cname, class_pkey, locale, col_name );
2509                         } else {
2510                                             buffer_fadd(select_buf, " \"%s\".%s AS \"%s\"", cname, col_name, col_name );
2511                         }
2512                     } else {
2513                                         buffer_fadd(select_buf, " \"%s\".%s AS \"%s\"", cname, col_name, col_name );
2514                     }
2515
2516                             // ... but it could be an object, in which case we check for a Field Transform
2517                             } else {
2518
2519                                     char* _column = jsonObjectToSimpleString( jsonObjectGetKeyConst( selfield, "column" ) );
2520
2521                                     // Get the field definition from the IDL
2522                                     osrfHash* field = osrfHashGet( class_field_set, _column );
2523                                     if (!field) continue;         // No such field defined in IDL.  Skip it.
2524
2525                                         // Decide what to use as a column alias
2526                                         char* _alias;
2527                                         if ((tmp_const = jsonObjectGetKeyConst( selfield, "alias" ))) {
2528                                                 _alias = jsonObjectToSimpleString( tmp_const );
2529                                                 free(_column);
2530                                         } else {         // Use column name as its own alias
2531                                                 _alias = _column;
2532                                         }
2533                                         _column = NULL;   // To emphasize that we're through with _column
2534
2535                                         if (jsonObjectGetKeyConst( selfield, "transform" )) {
2536                                                 char* transform_str = searchFieldTransform(cname, field, selfield);
2537                                                 buffer_fadd(select_buf, " %s AS \"%s\"", transform_str, _alias);
2538                                                 free(transform_str);
2539                                         } else {
2540
2541                                                 const char* fname = osrfHashGet(field, "name");
2542
2543                         if (locale) {
2544                                     const char* i18n;
2545                                         if (flags & DISABLE_I18N)
2546                                 i18n = NULL;
2547                                                         else
2548                                                                 i18n = osrfHashGet(field, "i18n");
2549
2550                                     if ( i18n && !strncasecmp("true", i18n, 4)) {
2551                                 buffer_fadd( select_buf,
2552                                                                         " oils_i18n_xlate('%s', '%s', '%s', '%s', \"%s\".%s::TEXT, '%s') AS \"%s\"",
2553                                                                         class_tname, cname, fname, class_pkey, cname, class_pkey, locale, _alias);
2554                             } else {
2555                                                     buffer_fadd(select_buf, " \"%s\".%s AS \"%s\"", cname, fname, _alias);
2556                             }
2557                         } else {
2558                                                 buffer_fadd(select_buf, " \"%s\".%s AS \"%s\"", cname, fname, _alias);
2559                         }
2560                                     }
2561
2562                                     free(_alias);
2563                             }
2564
2565                             if (is_agg->size || (flags & SELECT_DISTINCT)) {
2566
2567                                         const jsonObject* aggregate_obj = jsonObjectGetKey( selfield, "aggregate" );
2568                                     if ( !(
2569                             jsonBoolIsTrue( aggregate_obj ) ||
2570                                 ((int)jsonObjectGetNumber( aggregate_obj )) == 1 // support 1/0 for perl's sake
2571                          )
2572                     ) {
2573                                             if (gfirst) {
2574                                                     gfirst = 0;
2575                                             } else {
2576                                                         OSRF_BUFFER_ADD_CHAR( group_buf, ',' );
2577                                             }
2578
2579                                             buffer_fadd(group_buf, " %d", sel_pos);
2580                                         /*
2581                                     } else if (is_agg = jsonObjectGetKey( selfield, "having" )) {
2582                                             if (gfirst) {
2583                                                     gfirst = 0;
2584                                             } else {
2585                                                         OSRF_BUFFER_ADD_CHAR( group_buf, ',' );
2586                                             }
2587
2588                                             _column = searchFieldTransform(cname, field, selfield);
2589                                                 OSRF_BUFFER_ADD_CHAR(group_buf, ' ');
2590                                                 OSRF_BUFFER_ADD(group_buf, _column);
2591                                             _column = searchFieldTransform(cname, field, selfield);
2592                                         */
2593                                     }
2594                             }
2595
2596                             sel_pos++;
2597                     } // end while -- iterating across SELECT columns
2598
2599             jsonIteratorFree(select_itr);
2600             } // end while -- iterating across classes
2601
2602         jsonIteratorFree(selclass_itr);
2603
2604             if (is_agg) jsonObjectFree(is_agg);
2605     }
2606
2607
2608         char* col_list = buffer_release(select_buf);
2609         char* table = NULL;
2610         if (from_function) table = searchValueTransform(join_hash);
2611         else table = getSourceDefinition(core_meta);
2612
2613         // Put it all together
2614         buffer_fadd(sql_buf, "SELECT %s FROM %s AS \"%s\" ", col_list, table, core_class );
2615         free(col_list);
2616         free(table);
2617
2618     if (!from_function) {
2619             // Now, walk the join tree and add that clause
2620             if ( join_hash ) {
2621                     char* join_clause = searchJOIN( join_hash, core_meta );
2622                     buffer_add(sql_buf, join_clause);
2623                     free(join_clause);
2624             }
2625
2626                 // Build a WHERE clause, if there is one
2627             if ( search_hash ) {
2628                     buffer_add(sql_buf, " WHERE ");
2629
2630                     // and it's on the WHERE clause
2631                     char* pred = searchWHERE( search_hash, core_meta, AND_OP_JOIN, ctx );
2632
2633                     if (pred) {
2634                                 buffer_add(sql_buf, pred);
2635                                 free(pred);
2636                         } else {
2637                                 if (ctx) {
2638                                 osrfAppSessionStatus(
2639                                         ctx->session,
2640                                         OSRF_STATUS_INTERNALSERVERERROR,
2641                                         "osrfMethodException",
2642                                         ctx->request,
2643                                         "Severe query error in WHERE predicate -- see error log for more details"
2644                                 );
2645                             }
2646                             free(core_class);
2647                             buffer_free(having_buf);
2648                             buffer_free(group_buf);
2649                             buffer_free(order_buf);
2650                             buffer_free(sql_buf);
2651                             if (defaultselhash) jsonObjectFree(defaultselhash);
2652                             return NULL;
2653                     }
2654         }
2655
2656                 // Build a HAVING clause, if there is one
2657             if ( having_hash ) {
2658                     buffer_add(sql_buf, " HAVING ");
2659
2660                     // and it's on the the WHERE clause
2661                     char* pred = searchWHERE( having_hash, core_meta, AND_OP_JOIN, ctx );
2662
2663                     if (pred) {
2664                                 buffer_add(sql_buf, pred);
2665                                 free(pred);
2666                         } else {
2667                                 if (ctx) {
2668                                 osrfAppSessionStatus(
2669                                         ctx->session,
2670                                         OSRF_STATUS_INTERNALSERVERERROR,
2671                                         "osrfMethodException",
2672                                         ctx->request,
2673                                         "Severe query error in HAVING predicate -- see error log for more details"
2674                                 );
2675                             }
2676                             free(core_class);
2677                             buffer_free(having_buf);
2678                             buffer_free(group_buf);
2679                             buffer_free(order_buf);
2680                             buffer_free(sql_buf);
2681                             if (defaultselhash) jsonObjectFree(defaultselhash);
2682                             return NULL;
2683                     }
2684             }
2685
2686                 // Build an ORDER BY clause, if there is one
2687             first = 1;
2688             jsonIterator* class_itr = jsonNewIterator( order_hash );
2689             while ( (snode = jsonIteratorNext( class_itr )) ) {
2690
2691                     if (!jsonObjectGetKeyConst(selhash,class_itr->key))
2692                             continue;
2693
2694                     if ( snode->type == JSON_HASH ) {
2695
2696                         jsonIterator* order_itr = jsonNewIterator( snode );
2697                             while ( (onode = jsonIteratorNext( order_itr )) ) {
2698
2699                                     if (!oilsIDLFindPath( "/%s/fields/%s", class_itr->key, order_itr->key ))
2700                                             continue;
2701
2702                                     char* direction = NULL;
2703                                     if ( onode->type == JSON_HASH ) {
2704                                             if ( jsonObjectGetKeyConst( onode, "transform" ) ) {
2705                                                     string = searchFieldTransform(
2706                                                             class_itr->key,
2707                                                             oilsIDLFindPath( "/%s/fields/%s", class_itr->key, order_itr->key ),
2708                                                             onode
2709                                                     );
2710                                             } else {
2711                                                     growing_buffer* field_buf = buffer_init(16);
2712                                                     buffer_fadd(field_buf, "\"%s\".%s", class_itr->key, order_itr->key);
2713                                                     string = buffer_release(field_buf);
2714                                             }
2715
2716                                             if ( (tmp_const = jsonObjectGetKeyConst( onode, "direction" )) ) {
2717                                                     direction = jsonObjectToSimpleString(tmp_const);
2718                                                     if (!strncasecmp(direction, "d", 1)) {
2719                                                             free(direction);
2720                                                             direction = " DESC";
2721                                                     } else {
2722                                                             free(direction);
2723                                                             direction = " ASC";
2724                                                     }
2725                                             }
2726
2727                                     } else {
2728                                             string = strdup(order_itr->key);
2729                                             direction = jsonObjectToSimpleString(onode);
2730                                             if (!strncasecmp(direction, "d", 1)) {
2731                                                     free(direction);
2732                                                     direction = " DESC";
2733                                             } else {
2734                                                     free(direction);
2735                                                     direction = " ASC";
2736                                             }
2737                                     }
2738
2739                                     if (first) {
2740                                             first = 0;
2741                                     } else {
2742                                             buffer_add(order_buf, ", ");
2743                                     }
2744
2745                                     buffer_add(order_buf, string);
2746                                     free(string);
2747
2748                                     if (direction) {
2749                                             buffer_add(order_buf, direction);
2750                                     }
2751
2752                             } // end while
2753                 // jsonIteratorFree(order_itr);
2754
2755                     } else if ( snode->type == JSON_ARRAY ) {
2756
2757                         jsonIterator* order_itr = jsonNewIterator( snode );
2758                             while ( (onode = jsonIteratorNext( order_itr )) ) {
2759
2760                                     char* _f = jsonObjectToSimpleString( onode );
2761
2762                                     if (!oilsIDLFindPath( "/%s/fields/%s", class_itr->key, _f))
2763                                             continue;
2764
2765                                     if (first) {
2766                                             first = 0;
2767                                     } else {
2768                                             buffer_add(order_buf, ", ");
2769                                     }
2770
2771                                     buffer_add(order_buf, _f);
2772                                     free(_f);
2773
2774                             } // end while
2775                 // jsonIteratorFree(order_itr);
2776
2777
2778                     // IT'S THE OOOOOOOOOOOLD STYLE!
2779                     } else {
2780                             osrfLogError(OSRF_LOG_MARK, "%s: Possible SQL injection attempt; direct order by is not allowed", MODULENAME);
2781                             if (ctx) {
2782                                 osrfAppSessionStatus(
2783                                         ctx->session,
2784                                         OSRF_STATUS_INTERNALSERVERERROR,
2785                                         "osrfMethodException",
2786                                         ctx->request,
2787                                         "Severe query error -- see error log for more details"
2788                                 );
2789                             }
2790
2791                             free(core_class);
2792                             buffer_free(having_buf);
2793                             buffer_free(group_buf);
2794                             buffer_free(order_buf);
2795                             buffer_free(sql_buf);
2796                             if (defaultselhash) jsonObjectFree(defaultselhash);
2797                             jsonIteratorFree(class_itr);
2798                             return NULL;
2799                     }
2800
2801             } // end while
2802                 // jsonIteratorFree(class_itr);
2803         }
2804
2805
2806         string = buffer_release(group_buf);
2807
2808         if (strlen(string)) {
2809                 OSRF_BUFFER_ADD( sql_buf, " GROUP BY " );
2810                 OSRF_BUFFER_ADD( sql_buf, string );
2811         }
2812
2813         free(string);
2814
2815         string = buffer_release(having_buf);
2816
2817         if (strlen(string)) {
2818                 OSRF_BUFFER_ADD( sql_buf, " HAVING " );
2819                 OSRF_BUFFER_ADD( sql_buf, string );
2820         }
2821
2822         free(string);
2823
2824         string = buffer_release(order_buf);
2825
2826         if (strlen(string)) {
2827                 OSRF_BUFFER_ADD( sql_buf, " ORDER BY " );
2828                 OSRF_BUFFER_ADD( sql_buf, string );
2829         }
2830
2831         free(string);
2832
2833         if ( limit ){
2834                 string = jsonObjectToSimpleString(limit);
2835                 buffer_fadd( sql_buf, " LIMIT %d", atoi(string) );
2836                 free(string);
2837         }
2838
2839         if (offset) {
2840                 string = jsonObjectToSimpleString(offset);
2841                 buffer_fadd( sql_buf, " OFFSET %d", atoi(string) );
2842                 free(string);
2843         }
2844
2845         if (!(flags & SUBSELECT)) OSRF_BUFFER_ADD_CHAR(sql_buf, ';');
2846
2847         free(core_class);
2848         if (defaultselhash) jsonObjectFree(defaultselhash);
2849
2850         return buffer_release(sql_buf);
2851
2852 }
2853
2854 static char* buildSELECT ( jsonObject* search_hash, jsonObject* order_hash, osrfHash* meta, osrfMethodContext* ctx ) {
2855
2856         const char* locale = osrf_message_get_last_locale();
2857
2858         osrfHash* fields = osrfHashGet(meta, "fields");
2859         char* core_class = osrfHashGet(meta, "classname");
2860
2861         const jsonObject* join_hash = jsonObjectGetKeyConst( order_hash, "join" );
2862
2863         jsonObject* node = NULL;
2864         jsonObject* snode = NULL;
2865         jsonObject* onode = NULL;
2866         const jsonObject* _tmp = NULL;
2867         jsonObject* selhash = NULL;
2868         jsonObject* defaultselhash = NULL;
2869
2870         growing_buffer* sql_buf = buffer_init(128);
2871         growing_buffer* select_buf = buffer_init(128);
2872
2873         if ( !(selhash = jsonObjectGetKey( order_hash, "select" )) ) {
2874                 defaultselhash = jsonNewObjectType(JSON_HASH);
2875                 selhash = defaultselhash;
2876         }
2877
2878         if ( !jsonObjectGetKeyConst(selhash,core_class) ) {
2879                 jsonObjectSetKey( selhash, core_class, jsonNewObjectType(JSON_ARRAY) );
2880                 jsonObject* flist = jsonObjectGetKey( selhash, core_class );
2881
2882                 int i = 0;
2883                 char* field;
2884
2885                 osrfStringArray* keys = osrfHashKeys( fields );
2886                 while ( (field = osrfStringArrayGetString(keys, i++)) ) {
2887                         if ( strcasecmp( "true", osrfHashGet( osrfHashGet( fields, field ), "virtual" ) ) )
2888                                 jsonObjectPush( flist, jsonNewObject( field ) );
2889                 }
2890                 osrfStringArrayFree(keys);
2891         }
2892
2893         int first = 1;
2894         jsonIterator* class_itr = jsonNewIterator( selhash );
2895         while ( (snode = jsonIteratorNext( class_itr )) ) {
2896
2897                 osrfHash* idlClass = osrfHashGet( oilsIDL(), class_itr->key );
2898                 if (!idlClass) continue;
2899                 char* cname = osrfHashGet(idlClass, "classname");
2900
2901                 if (strcmp(core_class,class_itr->key)) {
2902                         if (!join_hash) continue;
2903
2904                         jsonObject* found =  jsonObjectFindPath(join_hash, "//%s", class_itr->key);
2905                         if (!found->size) {
2906                                 jsonObjectFree(found);
2907                                 continue;
2908                         }
2909
2910                         jsonObjectFree(found);
2911                 }
2912
2913                 jsonIterator* select_itr = jsonNewIterator( snode );
2914                 while ( (node = jsonIteratorNext( select_itr )) ) {
2915                         char* item_str = jsonObjectToSimpleString(node);
2916                         osrfHash* field = osrfHashGet( osrfHashGet( idlClass, "fields" ), item_str );
2917                         free(item_str);
2918                         char* fname = osrfHashGet(field, "name");
2919
2920                         if (!field) continue;
2921
2922                         if (first) {
2923                                 first = 0;
2924                         } else {
2925                                 OSRF_BUFFER_ADD_CHAR(select_buf, ',');
2926                         }
2927
2928             if (locale) {
2929                         const char* i18n;
2930                                 const jsonObject* i18n_obj = jsonObjectGetKey( order_hash, "no_i18n" );
2931                             if (
2932                                         jsonBoolIsTrue( i18n_obj ) ||
2933                                         ((int)jsonObjectGetNumber( i18n_obj )) == 1 // support 1/0 for perl's sake
2934                 ) i18n = NULL;
2935                                 else
2936                                         i18n = osrfHashGet(field, "i18n");
2937
2938                         if ( i18n && !strncasecmp("true", i18n, 4)) {
2939                         char* pkey = osrfHashGet(idlClass, "primarykey");
2940                         char* tname = osrfHashGet(idlClass, "tablename");
2941
2942                     buffer_fadd(select_buf, " oils_i18n_xlate('%s', '%s', '%s', '%s', \"%s\".%s::TEXT, '%s') AS \"%s\"", tname, cname, fname, pkey, cname, pkey, locale, fname);
2943                 } else {
2944                                 buffer_fadd(select_buf, " \"%s\".%s", cname, fname);
2945                 }
2946             } else {
2947                             buffer_fadd(select_buf, " \"%s\".%s", cname, fname);
2948             }
2949                 }
2950
2951         jsonIteratorFree(select_itr);
2952         }
2953
2954     jsonIteratorFree(class_itr);
2955
2956         char* col_list = buffer_release(select_buf);
2957         char* table = getSourceDefinition(meta);
2958
2959         buffer_fadd(sql_buf, "SELECT %s FROM %s AS \"%s\"", col_list, table, core_class );
2960         free(col_list);
2961         free(table);
2962
2963         if ( join_hash ) {
2964                 char* join_clause = searchJOIN( join_hash, meta );
2965                 OSRF_BUFFER_ADD_CHAR(sql_buf, ' ');
2966                 OSRF_BUFFER_ADD(sql_buf, join_clause);
2967                 free(join_clause);
2968         }
2969
2970         osrfLogDebug(OSRF_LOG_MARK, "%s pre-predicate SQL =  %s",
2971                                  MODULENAME, OSRF_BUFFER_C_STR(sql_buf));
2972
2973         buffer_add(sql_buf, " WHERE ");
2974
2975         char* pred = searchWHERE( search_hash, meta, AND_OP_JOIN, ctx );
2976         if (!pred) {
2977                 osrfAppSessionStatus(
2978                         ctx->session,
2979                         OSRF_STATUS_INTERNALSERVERERROR,
2980                                 "osrfMethodException",
2981                                 ctx->request,
2982                                 "Severe query error -- see error log for more details"
2983                         );
2984                 buffer_free(sql_buf);
2985                 if(defaultselhash) jsonObjectFree(defaultselhash);
2986                 return NULL;
2987         } else {
2988                 buffer_add(sql_buf, pred);
2989                 free(pred);
2990         }
2991
2992         if (order_hash) {
2993                 char* string = NULL;
2994                 if ( (_tmp = jsonObjectGetKeyConst( order_hash, "order_by" )) ){
2995
2996                         growing_buffer* order_buf = buffer_init(128);
2997
2998                         first = 1;
2999                         jsonIterator* class_itr = jsonNewIterator( _tmp );
3000                         while ( (snode = jsonIteratorNext( class_itr )) ) {
3001
3002                                 if (!jsonObjectGetKeyConst(selhash,class_itr->key))
3003                                         continue;
3004
3005                                 if ( snode->type == JSON_HASH ) {
3006
3007                                         jsonIterator* order_itr = jsonNewIterator( snode );
3008                                         while ( (onode = jsonIteratorNext( order_itr )) ) {
3009
3010                                                 if (!oilsIDLFindPath( "/%s/fields/%s", class_itr->key, order_itr->key ))
3011                                                         continue;
3012
3013                                                 char* direction = NULL;
3014                                                 if ( onode->type == JSON_HASH ) {
3015                                                         if ( jsonObjectGetKeyConst( onode, "transform" ) ) {
3016                                                                 string = searchFieldTransform(
3017                                                                         class_itr->key,
3018                                                                         oilsIDLFindPath( "/%s/fields/%s", class_itr->key, order_itr->key ),
3019                                                                         onode
3020                                                                 );
3021                                                         } else {
3022                                                                 growing_buffer* field_buf = buffer_init(16);
3023                                                                 buffer_fadd(field_buf, "\"%s\".%s", class_itr->key, order_itr->key);
3024                                                                 string = buffer_release(field_buf);
3025                                                         }
3026
3027                                                         if ( (_tmp = jsonObjectGetKeyConst( onode, "direction" )) ) {
3028                                                                 direction = jsonObjectToSimpleString(_tmp);
3029                                                                 if (!strncasecmp(direction, "d", 1)) {
3030                                                                         free(direction);
3031                                                                         direction = " DESC";
3032                                                                 } else {
3033                                                                         free(direction);
3034                                                                         direction = " ASC";
3035                                                                 }
3036                                                         }
3037
3038                                                 } else {
3039                                                         string = strdup(order_itr->key);
3040                                                         direction = jsonObjectToSimpleString(onode);
3041                                                         if (!strncasecmp(direction, "d", 1)) {
3042                                                                 free(direction);
3043                                                                 direction = " DESC";
3044                                                         } else {
3045                                                                 free(direction);
3046                                                                 direction = " ASC";
3047                                                         }
3048                                                 }
3049
3050                                                 if (first) {
3051                                                         first = 0;
3052                                                 } else {
3053                                                         buffer_add(order_buf, ", ");
3054                                                 }
3055
3056                                                 buffer_add(order_buf, string);
3057                                                 free(string);
3058
3059                                                 if (direction) {
3060                                                         buffer_add(order_buf, direction);
3061                                                 }
3062
3063                                         }
3064
3065                     jsonIteratorFree(order_itr);
3066
3067                                 } else {
3068                                         string = jsonObjectToSimpleString(snode);
3069                                         buffer_add(order_buf, string);
3070                                         free(string);
3071                                         break;
3072                                 }
3073
3074                         }
3075
3076             jsonIteratorFree(class_itr);
3077
3078                         string = buffer_release(order_buf);
3079
3080                         if (strlen(string)) {
3081                                 OSRF_BUFFER_ADD( sql_buf, " ORDER BY " );
3082                                 OSRF_BUFFER_ADD( sql_buf, string );
3083                         }
3084
3085                         free(string);
3086                 }
3087
3088                 if ( (_tmp = jsonObjectGetKeyConst( order_hash, "limit" )) ){
3089                         string = jsonObjectToSimpleString(_tmp);
3090                         buffer_fadd(
3091                                 sql_buf,
3092                                 " LIMIT %d",
3093                                 atoi(string)
3094                         );
3095                         free(string);
3096                 }
3097
3098                 _tmp = jsonObjectGetKeyConst( order_hash, "offset" );
3099                 if (_tmp) {
3100                         string = jsonObjectToSimpleString(_tmp);
3101                         buffer_fadd(
3102                                 sql_buf,
3103                                 " OFFSET %d",
3104                                 atoi(string)
3105                         );
3106                         free(string);
3107                 }
3108         }
3109
3110         if (defaultselhash) jsonObjectFree(defaultselhash);
3111
3112         OSRF_BUFFER_ADD_CHAR(sql_buf, ';');
3113         return buffer_release(sql_buf);
3114 }
3115
3116 int doJSONSearch ( osrfMethodContext* ctx ) {
3117         if(osrfMethodVerifyContext( ctx )) {
3118                 osrfLogError( OSRF_LOG_MARK,  "Invalid method context" );
3119                 return -1;
3120         }
3121
3122         osrfLogDebug(OSRF_LOG_MARK, "Recieved query request");
3123
3124         int err = 0;
3125
3126         // XXX for now...
3127         dbhandle = writehandle;
3128
3129         jsonObject* hash = jsonObjectGetIndex(ctx->params, 0);
3130
3131     int flags = 0;
3132
3133         if (jsonBoolIsTrue(jsonObjectGetKey( hash, "distinct" )))
3134          flags |= SELECT_DISTINCT;
3135
3136         if ( ((int)jsonObjectGetNumber(jsonObjectGetKey( hash, "distinct" ))) == 1 ) // support 1/0 for perl's sake
3137          flags |= SELECT_DISTINCT;
3138
3139         if (jsonBoolIsTrue(jsonObjectGetKey( hash, "no_i18n" )))
3140          flags |= DISABLE_I18N;
3141
3142         if ( ((int)jsonObjectGetNumber(jsonObjectGetKey( hash, "no_i18n" ))) == 1 ) // support 1/0 for perl's sake
3143          flags |= DISABLE_I18N;
3144
3145         osrfLogDebug(OSRF_LOG_MARK, "Building SQL ...");
3146         char* sql = SELECT(
3147                         ctx,
3148                         jsonObjectGetKey( hash, "select" ),
3149                         jsonObjectGetKey( hash, "from" ),
3150                         jsonObjectGetKey( hash, "where" ),
3151                         jsonObjectGetKey( hash, "having" ),
3152                         jsonObjectGetKey( hash, "order_by" ),
3153                         jsonObjectGetKey( hash, "limit" ),
3154                         jsonObjectGetKey( hash, "offset" ),
3155                         flags
3156         );
3157
3158         if (!sql) {
3159                 err = -1;
3160                 return err;
3161         }
3162
3163         osrfLogDebug(OSRF_LOG_MARK, "%s SQL =  %s", MODULENAME, sql);
3164         dbi_result result = dbi_conn_query(dbhandle, sql);
3165
3166         if(result) {
3167                 osrfLogDebug(OSRF_LOG_MARK, "Query returned with no errors");
3168
3169                 if (dbi_result_first_row(result)) {
3170                         /* JSONify the result */
3171                         osrfLogDebug(OSRF_LOG_MARK, "Query returned at least one row");
3172
3173                         do {
3174                                 jsonObject* return_val = oilsMakeJSONFromResult( result );
3175                                 osrfAppRespond( ctx, return_val );
3176                 jsonObjectFree( return_val );
3177                         } while (dbi_result_next_row(result));
3178
3179                 } else {
3180                         osrfLogDebug(OSRF_LOG_MARK, "%s returned no results for query %s", MODULENAME, sql);
3181                 }
3182
3183                 osrfAppRespondComplete( ctx, NULL );
3184
3185                 /* clean up the query */
3186                 dbi_result_free(result);
3187
3188         } else {
3189                 err = -1;
3190                 osrfLogError(OSRF_LOG_MARK, "%s: Error with query [%s]", MODULENAME, sql);
3191                 osrfAppSessionStatus(
3192                         ctx->session,
3193                         OSRF_STATUS_INTERNALSERVERERROR,
3194                         "osrfMethodException",
3195                         ctx->request,
3196                         "Severe query error -- see error log for more details"
3197                 );
3198         }
3199
3200         free(sql);
3201         return err;
3202 }
3203
3204 static jsonObject* doFieldmapperSearch ( osrfMethodContext* ctx, osrfHash* meta,
3205                 const jsonObject* params, int* err ) {
3206
3207         // XXX for now...
3208         dbhandle = writehandle;
3209
3210         osrfHash* links = osrfHashGet(meta, "links");
3211         osrfHash* fields = osrfHashGet(meta, "fields");
3212         char* core_class = osrfHashGet(meta, "classname");
3213         char* pkey = osrfHashGet(meta, "primarykey");
3214
3215         const jsonObject* _tmp;
3216         jsonObject* obj;
3217         jsonObject* search_hash = jsonObjectGetIndex(params, 0);
3218         jsonObject* order_hash = jsonObjectGetIndex(params, 1);
3219
3220         char* sql = buildSELECT( search_hash, order_hash, meta, ctx );
3221         if (!sql) {
3222                 osrfLogDebug(OSRF_LOG_MARK, "Problem building query, returning NULL");
3223                 *err = -1;
3224                 return NULL;
3225         }
3226
3227         osrfLogDebug(OSRF_LOG_MARK, "%s SQL =  %s", MODULENAME, sql);
3228
3229         dbi_result result = dbi_conn_query(dbhandle, sql);
3230         if( NULL == result ) {
3231                 osrfLogError(OSRF_LOG_MARK, "%s: Error retrieving %s with query [%s]",
3232                         MODULENAME, osrfHashGet(meta, "fieldmapper"), sql);
3233                 osrfAppSessionStatus(
3234                         ctx->session,
3235                         OSRF_STATUS_INTERNALSERVERERROR,
3236                         "osrfMethodException",
3237                         ctx->request,
3238                         "Severe query error -- see error log for more details"
3239                 );
3240                 *err = -1;
3241                 free(sql);
3242                 return jsonNULL;
3243
3244         } else {
3245                 osrfLogDebug(OSRF_LOG_MARK, "Query returned with no errors");
3246         }
3247
3248         jsonObject* res_list = jsonNewObjectType(JSON_ARRAY);
3249         osrfHash* dedup = osrfNewHash();
3250
3251         if (dbi_result_first_row(result)) {
3252                 /* JSONify the result */
3253                 osrfLogDebug(OSRF_LOG_MARK, "Query returned at least one row");
3254                 do {
3255                         obj = oilsMakeFieldmapperFromResult( result, meta );
3256                         char* pkey_val = oilsFMGetString( obj, pkey );
3257                         if ( osrfHashGet( dedup, pkey_val ) ) {
3258                                 jsonObjectFree(obj);
3259                                 free(pkey_val);
3260                         } else {
3261                                 osrfHashSet( dedup, pkey_val, pkey_val );
3262                                 jsonObjectPush(res_list, obj);
3263                         }
3264                 } while (dbi_result_next_row(result));
3265         } else {
3266                 osrfLogDebug(OSRF_LOG_MARK, "%s returned no results for query %s",
3267                         MODULENAME, sql );
3268         }
3269
3270         osrfHashFree(dedup);
3271         /* clean up the query */
3272         dbi_result_free(result);
3273         free(sql);
3274
3275         if (res_list->size && order_hash) {
3276                 _tmp = jsonObjectGetKeyConst( order_hash, "flesh" );
3277                 if (_tmp) {
3278                         int x = (int)jsonObjectGetNumber(_tmp);
3279                         if (x == -1 || x > max_flesh_depth) x = max_flesh_depth;
3280
3281                         const jsonObject* temp_blob;
3282                         if ((temp_blob = jsonObjectGetKeyConst( order_hash, "flesh_fields" )) && x > 0) {
3283
3284                                 jsonObject* flesh_blob = jsonObjectClone( temp_blob );
3285                                 const jsonObject* flesh_fields = jsonObjectGetKeyConst( flesh_blob, core_class );
3286
3287                                 osrfStringArray* link_fields = NULL;
3288
3289                                 if (flesh_fields) {
3290                                         if (flesh_fields->size == 1) {
3291                                                 char* _t = jsonObjectToSimpleString( jsonObjectGetIndex( flesh_fields, 0 ) );
3292                                                 if (!strcmp(_t,"*")) link_fields = osrfHashKeys( links );
3293                                                 free(_t);
3294                                         }
3295
3296                                         if (!link_fields) {
3297                                                 jsonObject* _f;
3298                                                 link_fields = osrfNewStringArray(1);
3299                                                 jsonIterator* _i = jsonNewIterator( flesh_fields );
3300                                                 while ((_f = jsonIteratorNext( _i ))) {
3301                                                         osrfStringArrayAdd( link_fields, jsonObjectToSimpleString( _f ) );
3302                                                 }
3303                         jsonIteratorFree(_i);
3304                                         }
3305                                 }
3306
3307                                 jsonObject* cur;
3308                                 jsonIterator* itr = jsonNewIterator( res_list );
3309                                 while ((cur = jsonIteratorNext( itr ))) {
3310
3311                                         int i = 0;
3312                                         char* link_field;
3313
3314                                         while ( (link_field = osrfStringArrayGetString(link_fields, i++)) ) {
3315
3316                                                 osrfLogDebug(OSRF_LOG_MARK, "Starting to flesh %s", link_field);
3317
3318                                                 osrfHash* kid_link = osrfHashGet(links, link_field);
3319                                                 if (!kid_link) continue;
3320
3321                                                 osrfHash* field = osrfHashGet(fields, link_field);
3322                                                 if (!field) continue;
3323
3324                                                 osrfHash* value_field = field;
3325
3326                                                 osrfHash* kid_idl = osrfHashGet(oilsIDL(), osrfHashGet(kid_link, "class"));
3327                                                 if (!kid_idl) continue;
3328
3329                                                 if (!(strcmp( osrfHashGet(kid_link, "reltype"), "has_many" ))) { // has_many
3330                                                         value_field = osrfHashGet( fields, osrfHashGet(meta, "primarykey") );
3331                                                 }
3332
3333                                                 if (!(strcmp( osrfHashGet(kid_link, "reltype"), "might_have" ))) { // might_have
3334                                                         value_field = osrfHashGet( fields, osrfHashGet(meta, "primarykey") );
3335                                                 }
3336
3337                                                 osrfStringArray* link_map = osrfHashGet( kid_link, "map" );
3338
3339                                                 if (link_map->size > 0) {
3340                                                         jsonObject* _kid_key = jsonNewObjectType(JSON_ARRAY);
3341                                                         jsonObjectPush(
3342                                                                 _kid_key,
3343                                                                 jsonNewObject( osrfStringArrayGetString( link_map, 0 ) )
3344                                                         );
3345
3346                                                         jsonObjectSetKey(
3347                                                                 flesh_blob,
3348                                                                 osrfHashGet(kid_link, "class"),
3349                                                                 _kid_key
3350                                                         );
3351                                                 };
3352
3353                                                 osrfLogDebug(
3354                                                         OSRF_LOG_MARK,
3355                                                         "Link field: %s, remote class: %s, fkey: %s, reltype: %s",
3356                                                         osrfHashGet(kid_link, "field"),
3357                                                         osrfHashGet(kid_link, "class"),
3358                                                         osrfHashGet(kid_link, "key"),
3359                                                         osrfHashGet(kid_link, "reltype")
3360                                                 );
3361
3362                                                 jsonObject* fake_params = jsonNewObjectType(JSON_ARRAY);
3363                                                 jsonObjectPush(fake_params, jsonNewObjectType(JSON_HASH)); // search hash
3364                                                 jsonObjectPush(fake_params, jsonNewObjectType(JSON_HASH)); // order/flesh hash
3365
3366                                                 osrfLogDebug(OSRF_LOG_MARK, "Creating dummy params object...");
3367
3368                                                 char* search_key =
3369                                                 jsonObjectToSimpleString(
3370                                                         jsonObjectGetIndex(
3371                                                                 cur,
3372                                                                 atoi( osrfHashGet(value_field, "array_position") )
3373                                                         )
3374                                                 );
3375
3376                                                 if (!search_key) {
3377                                                         osrfLogDebug(OSRF_LOG_MARK, "Nothing to search for!");
3378                                                         continue;
3379                                                 }
3380
3381                                                 jsonObjectSetKey(
3382                                                         jsonObjectGetIndex(fake_params, 0),
3383                                                         osrfHashGet(kid_link, "key"),
3384                                                         jsonNewObject( search_key )
3385                                                 );
3386
3387                                                 free(search_key);
3388
3389
3390                                                 jsonObjectSetKey(
3391                                                         jsonObjectGetIndex(fake_params, 1),
3392                                                         "flesh",
3393                                                         jsonNewNumberObject( (double)(x - 1 + link_map->size) )
3394                                                 );
3395
3396                                                 if (flesh_blob)
3397                                                         jsonObjectSetKey( jsonObjectGetIndex(fake_params, 1), "flesh_fields", jsonObjectClone(flesh_blob) );
3398
3399                                                 if (jsonObjectGetKeyConst(order_hash, "order_by")) {
3400                                                         jsonObjectSetKey(
3401                                                                 jsonObjectGetIndex(fake_params, 1),
3402                                                                 "order_by",
3403                                                                 jsonObjectClone(jsonObjectGetKeyConst(order_hash, "order_by"))
3404                                                         );
3405                                                 }
3406
3407                                                 if (jsonObjectGetKeyConst(order_hash, "select")) {
3408                                                         jsonObjectSetKey(
3409                                                                 jsonObjectGetIndex(fake_params, 1),
3410                                                                 "select",
3411                                                                 jsonObjectClone(jsonObjectGetKeyConst(order_hash, "select"))
3412                                                         );
3413                                                 }
3414
3415                                                 jsonObject* kids = doFieldmapperSearch(ctx, kid_idl, fake_params, err);
3416
3417                                                 if(*err) {
3418                                                         jsonObjectFree( fake_params );
3419                                                         osrfStringArrayFree(link_fields);
3420                                                         jsonIteratorFree(itr);
3421                                                         jsonObjectFree(res_list);
3422                                                         jsonObjectFree(flesh_blob);
3423                                                         return jsonNULL;
3424                                                 }
3425
3426                                                 osrfLogDebug(OSRF_LOG_MARK, "Search for %s return %d linked objects", osrfHashGet(kid_link, "class"), kids->size);
3427
3428                                                 jsonObject* X = NULL;
3429                                                 if ( link_map->size > 0 && kids->size > 0 ) {
3430                                                         X = kids;
3431                                                         kids = jsonNewObjectType(JSON_ARRAY);
3432
3433                                                         jsonObject* _k_node;
3434                                                         jsonIterator* _k = jsonNewIterator( X );
3435                                                         while ((_k_node = jsonIteratorNext( _k ))) {
3436                                                                 jsonObjectPush(
3437                                                                         kids,
3438                                                                         jsonObjectClone(
3439                                                                                 jsonObjectGetIndex(
3440                                                                                         _k_node,
3441                                                                                         (unsigned long)atoi(
3442                                                                                                 osrfHashGet(
3443                                                                                                         osrfHashGet(
3444                                                                                                                 osrfHashGet(
3445                                                                                                                         osrfHashGet(
3446                                                                                                                                 oilsIDL(),
3447                                                                                                                                 osrfHashGet(kid_link, "class")
3448                                                                                                                         ),
3449                                                                                                                         "fields"
3450                                                                                                                 ),
3451                                                                                                                 osrfStringArrayGetString( link_map, 0 )
3452                                                                                                         ),
3453                                                                                                         "array_position"
3454                                                                                                 )
3455                                                                                         )
3456                                                                                 )
3457                                                                         )
3458                                                                 );
3459                                                         }
3460                                                         jsonIteratorFree(_k);
3461                                                 }
3462
3463                                                 if (!(strcmp( osrfHashGet(kid_link, "reltype"), "has_a" )) || !(strcmp( osrfHashGet(kid_link, "reltype"), "might_have" ))) {
3464                                                         osrfLogDebug(OSRF_LOG_MARK, "Storing fleshed objects in %s", osrfHashGet(kid_link, "field"));
3465                                                         jsonObjectSetIndex(
3466                                                                 cur,
3467                                                                 (unsigned long)atoi( osrfHashGet( field, "array_position" ) ),
3468                                                                 jsonObjectClone( jsonObjectGetIndex(kids, 0) )
3469                                                         );
3470                                                 }
3471
3472                                                 if (!(strcmp( osrfHashGet(kid_link, "reltype"), "has_many" ))) { // has_many
3473                                                         osrfLogDebug(OSRF_LOG_MARK, "Storing fleshed objects in %s", osrfHashGet(kid_link, "field"));
3474                                                         jsonObjectSetIndex(
3475                                                                 cur,
3476                                                                 (unsigned long)atoi( osrfHashGet( field, "array_position" ) ),
3477                                                                 jsonObjectClone( kids )
3478                                                         );
3479                                                 }
3480
3481                                                 if (X) {
3482                                                         jsonObjectFree(kids);
3483                                                         kids = X;
3484                                                 }
3485
3486                                                 jsonObjectFree( kids );
3487                                                 jsonObjectFree( fake_params );
3488
3489                                                 osrfLogDebug(OSRF_LOG_MARK, "Fleshing of %s complete", osrfHashGet(kid_link, "field"));
3490                                                 osrfLogDebug(OSRF_LOG_MARK, "%s", jsonObjectToJSON(cur));
3491
3492                                         }
3493                                 }
3494                                 jsonObjectFree( flesh_blob );
3495                                 osrfStringArrayFree(link_fields);
3496                                 jsonIteratorFree(itr);
3497                         }
3498                 }
3499         }
3500
3501         return res_list;
3502 }
3503
3504
3505 static jsonObject* doUpdate(osrfMethodContext* ctx, int* err ) {
3506
3507         osrfHash* meta = osrfHashGet( (osrfHash*) ctx->method->userData, "class" );
3508 #ifdef PCRUD
3509         jsonObject* target = jsonObjectGetIndex( ctx->params, 1 );
3510 #else
3511         jsonObject* target = jsonObjectGetIndex( ctx->params, 0 );
3512 #endif
3513
3514         if (!verifyObjectClass(ctx, target)) {
3515                 *err = -1;
3516                 return jsonNULL;
3517         }
3518
3519         if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
3520                 osrfAppSessionStatus(
3521                         ctx->session,
3522                         OSRF_STATUS_BADREQUEST,
3523                         "osrfMethodException",
3524                         ctx->request,
3525                         "No active transaction -- required for UPDATE"
3526                 );
3527                 *err = -1;
3528                 return jsonNULL;
3529         }
3530
3531         if (osrfHashGet( meta, "readonly" ) && strncasecmp("true", osrfHashGet( meta, "readonly" ), 4)) {
3532                 osrfAppSessionStatus(
3533                         ctx->session,
3534                         OSRF_STATUS_BADREQUEST,
3535                         "osrfMethodException",
3536                         ctx->request,
3537                         "Cannot UPDATE readonly class"
3538                 );
3539                 *err = -1;
3540                 return jsonNULL;
3541         }
3542
3543         dbhandle = writehandle;
3544
3545         char* trans_id = osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" );
3546
3547         // Set the last_xact_id
3548         int index = oilsIDL_ntop( target->classname, "last_xact_id" );
3549         if (index > -1) {
3550                 osrfLogDebug(OSRF_LOG_MARK, "Setting last_xact_id to %s on %s at position %d", trans_id, target->classname, index);
3551                 jsonObjectSetIndex(target, index, jsonNewObject(trans_id));
3552         }
3553
3554         char* pkey = osrfHashGet(meta, "primarykey");
3555         osrfHash* fields = osrfHashGet(meta, "fields");
3556
3557         char* id = oilsFMGetString( target, pkey );
3558
3559         osrfLogDebug(
3560                 OSRF_LOG_MARK,
3561                 "%s updating %s object with %s = %s",
3562                 MODULENAME,
3563                 osrfHashGet(meta, "fieldmapper"),
3564                 pkey,
3565                 id
3566         );
3567
3568         growing_buffer* sql = buffer_init(128);
3569         buffer_fadd(sql,"UPDATE %s SET", osrfHashGet(meta, "tablename"));
3570
3571         int i = 0;
3572         int first = 1;
3573         char* field_name;
3574         osrfStringArray* field_list = osrfHashKeys( fields );
3575         while ( (field_name = osrfStringArrayGetString(field_list, i++)) ) {
3576
3577                 osrfHash* field = osrfHashGet( fields, field_name );
3578
3579                 if(!( strcmp( field_name, pkey ) )) continue;
3580                 if(!( strcmp( osrfHashGet(osrfHashGet(fields,field_name), "virtual"), "true" ) )) continue;
3581
3582                 const jsonObject* field_object = oilsFMGetObject( target, field_name );
3583
3584                 char* value;
3585                 if (field_object && field_object->classname) {
3586                         value = oilsFMGetString(
3587                                 field_object,
3588                                 (char*)oilsIDLFindPath("/%s/primarykey", field_object->classname)
3589             );
3590                 } else {
3591                         value = jsonObjectToSimpleString( field_object );
3592                 }
3593
3594                 osrfLogDebug( OSRF_LOG_MARK, "Updating %s object with %s = %s", osrfHashGet(meta, "fieldmapper"), field_name, value);
3595
3596                 if (!field_object || field_object->type == JSON_NULL) {
3597                         if ( !(!( strcmp( osrfHashGet(meta, "classname"), "au" ) ) && !( strcmp( field_name, "passwd" ) )) ) { // arg at the special case!
3598                                 if (first) first = 0;
3599                                 else OSRF_BUFFER_ADD_CHAR(sql, ',');
3600                                 buffer_fadd( sql, " %s = NULL", field_name );
3601                         }
3602
3603                 } else if ( !strcmp(osrfHashGet(field, "primitive"), "number") ) {
3604                         if (first) first = 0;
3605                         else OSRF_BUFFER_ADD_CHAR(sql, ',');
3606
3607                         if ( !strncmp(osrfHashGet(field, "datatype"), "INT", (size_t)3) ) {
3608                                 buffer_fadd( sql, " %s = %ld", field_name, atol(value) );
3609                         } else if ( !strcmp(osrfHashGet(field, "datatype"), "NUMERIC") ) {
3610                                 buffer_fadd( sql, " %s = %f", field_name, atof(value) );
3611                         }
3612
3613                         osrfLogDebug( OSRF_LOG_MARK, "%s is of type %s", field_name, osrfHashGet(field, "datatype"));
3614
3615                 } else {
3616                         if ( dbi_conn_quote_string(dbhandle, &value) ) {
3617                                 if (first) first = 0;
3618                                 else OSRF_BUFFER_ADD_CHAR(sql, ',');
3619                                 buffer_fadd( sql, " %s = %s", field_name, value );
3620
3621                         } else {
3622                                 osrfLogError(OSRF_LOG_MARK, "%s: Error quoting string [%s]", MODULENAME, value);
3623                                 osrfAppSessionStatus(
3624                                         ctx->session,
3625                                         OSRF_STATUS_INTERNALSERVERERROR,
3626                                         "osrfMethodException",
3627                                         ctx->request,
3628                                         "Error quoting string -- please see the error log for more details"
3629                                 );
3630                                 free(value);
3631                                 free(id);
3632                                 buffer_free(sql);
3633                                 *err = -1;
3634                                 return jsonNULL;
3635                         }
3636                 }
3637
3638                 free(value);
3639
3640         }
3641
3642         jsonObject* obj = jsonNewObject(id);
3643
3644         if ( strcmp( osrfHashGet( osrfHashGet( osrfHashGet(meta, "fields"), pkey ), "primitive" ), "number" ) )
3645                 dbi_conn_quote_string(dbhandle, &id);
3646
3647         buffer_fadd( sql, " WHERE %s = %s;", pkey, id );
3648
3649         char* query = buffer_release(sql);
3650         osrfLogDebug(OSRF_LOG_MARK, "%s: Update SQL [%s]", MODULENAME, query);
3651
3652         dbi_result result = dbi_conn_query(dbhandle, query);
3653         free(query);
3654
3655         if (!result) {
3656                 jsonObjectFree(obj);
3657                 obj = jsonNewObject(NULL);
3658                 osrfLogError(
3659                         OSRF_LOG_MARK,
3660                         "%s ERROR updating %s object with %s = %s",
3661                         MODULENAME,
3662                         osrfHashGet(meta, "fieldmapper"),
3663                         pkey,
3664                         id
3665                 );
3666         }
3667
3668         free(id);
3669
3670         return obj;
3671 }
3672
3673 static jsonObject* doDelete(osrfMethodContext* ctx, int* err ) {
3674
3675         osrfHash* meta = osrfHashGet( (osrfHash*) ctx->method->userData, "class" );
3676
3677         if (!osrfHashGet( (osrfHash*)ctx->session->userData, "xact_id" )) {
3678                 osrfAppSessionStatus(
3679                         ctx->session,
3680                         OSRF_STATUS_BADREQUEST,
3681                         "osrfMethodException",
3682                         ctx->request,
3683                         "No active transaction -- required for DELETE"
3684                 );
3685                 *err = -1;
3686                 return jsonNULL;
3687         }
3688
3689         if (osrfHashGet( meta, "readonly" ) && strncasecmp("true", osrfHashGet( meta, "readonly" ), 4)) {
3690                 osrfAppSessionStatus(
3691                         ctx->session,
3692                         OSRF_STATUS_BADREQUEST,
3693                         "osrfMethodException",
3694                         ctx->request,
3695                         "Cannot DELETE readonly class"
3696                 );
3697                 *err = -1;
3698                 return jsonNULL;
3699         }
3700
3701         dbhandle = writehandle;
3702
3703         jsonObject* obj;
3704
3705         char* pkey = osrfHashGet(meta, "primarykey");
3706
3707         int _obj_pos = 0;
3708 #ifdef PCRUD
3709                 _obj_pos = 1;
3710 #endif
3711
3712         char* id;
3713         if (jsonObjectGetIndex(ctx->params, _obj_pos)->classname) {
3714                 if (!verifyObjectClass(ctx, jsonObjectGetIndex( ctx->params, _obj_pos ))) {
3715                         *err = -1;
3716                         return jsonNULL;
3717                 }
3718
3719                 id = oilsFMGetString( jsonObjectGetIndex(ctx->params, _obj_pos), pkey );
3720         } else {
3721 #ifdef PCRUD
3722         if (!verifyObjectPCRUD( ctx, NULL )) {
3723                         *err = -1;
3724                         return jsonNULL;
3725         }
3726 #endif
3727                 id = jsonObjectToSimpleString(jsonObjectGetIndex(ctx->params, _obj_pos));
3728         }
3729
3730         osrfLogDebug(
3731                 OSRF_LOG_MARK,
3732                 "%s deleting %s object with %s = %s",
3733                 MODULENAME,
3734                 osrfHashGet(meta, "fieldmapper"),
3735                 pkey,
3736                 id
3737         );
3738
3739         obj = jsonNewObject(id);
3740
3741         if ( strcmp( osrfHashGet( osrfHashGet( osrfHashGet(meta, "fields"), pkey ), "primitive" ), "number" ) )
3742                 dbi_conn_quote_string(writehandle, &id);
3743
3744         dbi_result result = dbi_conn_queryf(writehandle, "DELETE FROM %s WHERE %s = %s;", osrfHashGet(meta, "tablename"), pkey, id);
3745
3746         if (!result) {
3747                 jsonObjectFree(obj);
3748                 obj = jsonNewObject(NULL);
3749                 osrfLogError(
3750                         OSRF_LOG_MARK,
3751                         "%s ERROR deleting %s object with %s = %s",
3752                         MODULENAME,
3753                         osrfHashGet(meta, "fieldmapper"),
3754                         pkey,
3755                         id
3756                 );
3757         }
3758
3759         free(id);
3760
3761         return obj;
3762
3763 }
3764
3765
3766 static jsonObject* oilsMakeFieldmapperFromResult( dbi_result result, osrfHash* meta) {
3767         if(!(result && meta)) return jsonNULL;
3768
3769         jsonObject* object = jsonNewObject(NULL);
3770         jsonObjectSetClass(object, osrfHashGet(meta, "classname"));
3771
3772         osrfHash* fields = osrfHashGet(meta, "fields");
3773
3774         osrfLogInternal(OSRF_LOG_MARK, "Setting object class to %s ", object->classname);
3775
3776         osrfHash* _f;
3777         time_t _tmp_dt;
3778         char dt_string[256];
3779         struct tm gmdt;
3780
3781         int fmIndex;
3782         int columnIndex = 1;
3783         int attr;
3784         unsigned short type;
3785         const char* columnName;
3786
3787         /* cycle through the column list */
3788         while( (columnName = dbi_result_get_field_name(result, columnIndex++)) ) {
3789
3790                 osrfLogInternal(OSRF_LOG_MARK, "Looking for column named [%s]...", (char*)columnName);
3791
3792                 fmIndex = -1; // reset the position
3793
3794                 /* determine the field type and storage attributes */
3795                 type = dbi_result_get_field_type(result, columnName);
3796                 attr = dbi_result_get_field_attribs(result, columnName);
3797
3798                 /* fetch the fieldmapper index */
3799                 if( (_f = osrfHashGet(fields, (char*)columnName)) ) {
3800                         char* virt = (char*)osrfHashGet(_f, "virtual");
3801                         char* pos = (char*)osrfHashGet(_f, "array_position");
3802
3803                         if ( !virt || !pos || !(strcmp( virt, "true" )) ) continue;
3804
3805                         fmIndex = atoi( pos );
3806                         osrfLogInternal(OSRF_LOG_MARK, "... Found column at position [%s]...", pos);
3807                 } else {
3808                         continue;
3809                 }
3810
3811                 if (dbi_result_field_is_null(result, columnName)) {
3812                         jsonObjectSetIndex( object, fmIndex, jsonNewObject(NULL) );
3813                 } else {
3814
3815                         switch( type ) {
3816
3817                                 case DBI_TYPE_INTEGER :
3818
3819                                         if( attr & DBI_INTEGER_SIZE8 )
3820                                                 jsonObjectSetIndex( object, fmIndex,
3821                                                         jsonNewNumberObject(dbi_result_get_longlong(result, columnName)));
3822                                         else
3823                                                 jsonObjectSetIndex( object, fmIndex,
3824                                                         jsonNewNumberObject(dbi_result_get_int(result, columnName)));
3825
3826                                         break;
3827
3828                                 case DBI_TYPE_DECIMAL :
3829                                         jsonObjectSetIndex( object, fmIndex,
3830                                                         jsonNewNumberObject(dbi_result_get_double(result, columnName)));
3831                                         break;
3832
3833                                 case DBI_TYPE_STRING :
3834
3835
3836                                         jsonObjectSetIndex(
3837                                                 object,
3838                                                 fmIndex,
3839                                                 jsonNewObject( dbi_result_get_string(result, columnName) )
3840                                         );
3841
3842                                         break;
3843
3844                                 case DBI_TYPE_DATETIME :
3845
3846                                         memset(dt_string, '\0', sizeof(dt_string));
3847                                         memset(&gmdt, '\0', sizeof(gmdt));
3848
3849                                         _tmp_dt = dbi_result_get_datetime(result, columnName);
3850
3851
3852                                         if (!(attr & DBI_DATETIME_DATE)) {
3853                                                 gmtime_r( &_tmp_dt, &gmdt );
3854                                                 strftime(dt_string, sizeof(dt_string), "%T", &gmdt);
3855                                         } else if (!(attr & DBI_DATETIME_TIME)) {
3856                                                 localtime_r( &_tmp_dt, &gmdt );
3857                                                 strftime(dt_string, sizeof(dt_string), "%F", &gmdt);
3858                                         } else {
3859                                                 localtime_r( &_tmp_dt, &gmdt );
3860                                                 strftime(dt_string, sizeof(dt_string), "%FT%T%z", &gmdt);
3861                                         }
3862
3863                                         jsonObjectSetIndex( object, fmIndex, jsonNewObject(dt_string) );
3864
3865                                         break;
3866
3867                                 case DBI_TYPE_BINARY :
3868                                         osrfLogError( OSRF_LOG_MARK,
3869                                                 "Can't do binary at column %s : index %d", columnName, columnIndex - 1);
3870                         }
3871                 }
3872         }
3873
3874         return object;
3875 }
3876
3877 static jsonObject* oilsMakeJSONFromResult( dbi_result result ) {
3878         if(!result) return jsonNULL;
3879
3880         jsonObject* object = jsonNewObject(NULL);
3881
3882         time_t _tmp_dt;
3883         char dt_string[256];
3884         struct tm gmdt;
3885
3886         int fmIndex;
3887         int columnIndex = 1;
3888         int attr;
3889         unsigned short type;
3890         const char* columnName;
3891
3892         /* cycle through the column list */
3893         while( (columnName = dbi_result_get_field_name(result, columnIndex++)) ) {
3894
3895                 osrfLogInternal(OSRF_LOG_MARK, "Looking for column named [%s]...", (char*)columnName);
3896
3897                 fmIndex = -1; // reset the position
3898
3899                 /* determine the field type and storage attributes */
3900                 type = dbi_result_get_field_type(result, columnName);
3901                 attr = dbi_result_get_field_attribs(result, columnName);
3902
3903                 if (dbi_result_field_is_null(result, columnName)) {
3904                         jsonObjectSetKey( object, columnName, jsonNewObject(NULL) );
3905                 } else {
3906
3907                         switch( type ) {
3908
3909                                 case DBI_TYPE_INTEGER :
3910
3911                                         if( attr & DBI_INTEGER_SIZE8 )
3912                                                 jsonObjectSetKey( object, columnName, jsonNewNumberObject(dbi_result_get_longlong(result, columnName)) );
3913                                         else
3914                                                 jsonObjectSetKey( object, columnName, jsonNewNumberObject(dbi_result_get_int(result, columnName)) );
3915                                         break;
3916
3917                                 case DBI_TYPE_DECIMAL :
3918                                         jsonObjectSetKey( object, columnName, jsonNewNumberObject(dbi_result_get_double(result, columnName)) );
3919                                         break;
3920
3921                                 case DBI_TYPE_STRING :
3922                                         jsonObjectSetKey( object, columnName, jsonNewObject(dbi_result_get_string(result, columnName)) );
3923                                         break;
3924
3925                                 case DBI_TYPE_DATETIME :
3926
3927                                         memset(dt_string, '\0', sizeof(dt_string));
3928                                         memset(&gmdt, '\0', sizeof(gmdt));
3929
3930                                         _tmp_dt = dbi_result_get_datetime(result, columnName);
3931
3932
3933                                         if (!(attr & DBI_DATETIME_DATE)) {
3934                                                 gmtime_r( &_tmp_dt, &gmdt );
3935                                                 strftime(dt_string, sizeof(dt_string), "%T", &gmdt);
3936                                         } else if (!(attr & DBI_DATETIME_TIME)) {
3937                                                 localtime_r( &_tmp_dt, &gmdt );
3938                                                 strftime(dt_string, sizeof(dt_string), "%F", &gmdt);
3939                                         } else {
3940                                                 localtime_r( &_tmp_dt, &gmdt );
3941                                                 strftime(dt_string, sizeof(dt_string), "%FT%T%z", &gmdt);
3942                                         }
3943
3944                                         jsonObjectSetKey( object, columnName, jsonNewObject(dt_string) );
3945                                         break;
3946
3947                                 case DBI_TYPE_BINARY :
3948                                         osrfLogError( OSRF_LOG_MARK,
3949                                                 "Can't do binary at column %s : index %d", columnName, columnIndex - 1);
3950                         }
3951                 }
3952         }
3953
3954         return object;
3955 }
3956