adamc@1004: open Meta
adamc@1001: 
adamc@1001: functor Make(M : sig
adamc@1003:                  con paper :: {(Type * Type)}
adamc@1010:                  constraint [Id, Document, Authors] ~ paper
adamc@1003:                  val paper : $(map meta paper)
adamc@1007:                  val paperFolder : folder paper
adamc@1003: 
adamc@1001:                  con review :: {(Type * Type)}
adamc@1003:                  constraint [Paper, User] ~ review
adamc@1003:                  val review : $(map meta review)
adamc@1011:                  val reviewFolder : folder review
adamc@1006: 
adamc@1006:                  val submissionDeadline : time
adamc@1009:                  val summarizePaper : $(map fst paper) -> xbody
adamc@1001:              end) = struct
adamc@1001: 
adamc@1003:     table user : {Id : int, Nam : string, Password : string, Chair : bool, OnPc : bool}
adamc@1003:           PRIMARY KEY Id,
adamc@1003:           CONSTRAINT Nam UNIQUE Nam
adamc@1003:     sequence userId
adamc@1003: 
adamc@1008:     con paper = [Id = int, Document = blob] ++ map fst M.paper
adamc@1003:     table paper : paper
adamc@1003:           PRIMARY KEY Id
adamc@1003:     sequence paperId
adamc@1003: 
adamc@1010:     table authorship : {Paper : int, User : int}
adamc@1010:           PRIMARY KEY (Paper, User),
adamc@1011:           CONSTRAINT Paper FOREIGN KEY Paper REFERENCES paper(Id) ON DELETE CASCADE,
adamc@1010:           CONSTRAINT User FOREIGN KEY User REFERENCES user(Id)
adamc@1010: 
adamc@1003:     con review = [Paper = int, User = int] ++ map fst M.review
adamc@1003:     table review : review
adamc@1003:           PRIMARY KEY (Paper, User),
adamc@1003:           CONSTRAINT Paper FOREIGN KEY Paper REFERENCES paper(Id),
adamc@1003:           CONSTRAINT User FOREIGN KEY User REFERENCES user(Id)
adamc@1003:     sequence reviewId
adamc@1003: 
adamc@1003:     cookie login : {Id : int, Password : string}
adamc@1003: 
adamc@1004:     val checkLogin =
adamc@1003:         r <- getCookie login;
adamc@1003:         case r of
adamc@1003:             None => return None
adamc@1003:           | Some r =>
adamc@1003:             oneOrNoRows1 (SELECT user.Id, user.Nam, user.Chair, user.OnPc
adamc@1003:                           FROM user
adamc@1003:                           WHERE user.Id = {[r.Id]}
adamc@1003:                             AND user.Password = {[r.Password]})
adamc@1003: 
adamc@1010:     val getLogin =
adamc@1010:         ro <- checkLogin;
adamc@1010:         case ro of
adamc@1010:             None => error <xml>You must be logged in to do that.</xml>
adamc@1010:           | Some r => return r
adamc@1010: 
adamc@1009:     fun checkPaper id =
adamc@1010:         r <- getLogin;
adamc@1010:         if r.OnPc then
adamc@1009:             return ()
adamc@1009:         else
adamc@1010:             error <xml>You aren't authorized to see that paper.</xml>
adamc@1009: 
adamc@1004:     structure Users = BulkEdit.Make(struct
adamc@1004:                                         con keyName = #Id
adamc@1004:                                         val visible = {Nam = string "Name",
adamc@1004:                                                        Chair = bool "Chair?",
adamc@1004:                                                        OnPc = bool "On PC?"}
adamc@1004: 
adamc@1004:                                         val title = "Users"
adamc@1004:                                         val isAllowed =
adamc@1004:                                             me <- checkLogin;
adamc@1004:                                             return (Option.isSome me)
adamc@1004: 
adamc@1004:                                         val t = user
adamc@1004:                                     end)
adamc@1004: 
adamc@1003:     fun doRegister r =
adamc@1003:         n <- oneRowE1 (SELECT COUNT( * ) AS N
adamc@1003:                        FROM user
adamc@1003:                        WHERE user.Nam = {[r.Nam]});
adamc@1003:         if n > 0 then
adamc@1003:             register (Some "Sorry; that username is taken.")
adamc@1003:         else
adamc@1003:             id <- nextval userId;
adamc@1003:             dml (INSERT INTO user (Id, Nam, Password, Chair, OnPc)
adamc@1003:                  VALUES ({[id]}, {[r.Nam]}, {[r.Password]}, FALSE, FALSE));
adamc@1003:             setCookie login {Id = id, Password = r.Password};
adamc@1003:             main ()
adamc@1003: 
adamc@1003:     and register msg = return <xml><body>
adamc@1003:       <h1>Registering a New Account</h1>
adamc@1003: 
adamc@1003:       {case msg of
adamc@1003:            None => <xml/>
adamc@1003:          | Some msg => <xml><div>{[msg]}</div></xml>}
adamc@1003: 
adamc@1003:       <form><table>
adamc@1003:         <tr> <th>Username:</th> <td><textbox{#Nam}/></td> </tr>
adamc@1003:         <tr> <th>Password:</th> <td><password{#Password}/></td> </tr>
adamc@1003:         <tr> <th><submit action={doRegister}/></th> </tr>
adamc@1003:       </table></form>
adamc@1003:     </body></xml>
adamc@1003: 
adamc@1006:     and signin r =
adamc@1006:         ro <- oneOrNoRowsE1 (SELECT user.Id AS N
adamc@1006:                              FROM user
adamc@1006:                              WHERE user.Nam = {[r.Nam]}
adamc@1006:                                AND user.Password = {[r.Password]});
adamc@1006:         (case ro of
adamc@1006:              None => return ()
adamc@1006:            | Some id => setCookie login {Id = id, Password = r.Password});
adamc@1006:         m <- main' ();
adamc@1006:         return <xml><body>
adamc@1006:           {case ro of
adamc@1006:                None => <xml><div>Invalid username or password.</div></xml>
adamc@1006:              | _ => <xml/>}
adamc@1006: 
adamc@1006:           {m}
adamc@1006:         </body></xml>
adamc@1006: 
adamc@1006:     and main' () =
adamc@1004:         me <- checkLogin;
adamc@1006:         now <- now;
adamc@1006:         return <xml><ul>
adamc@1003:           {case me of
adamc@1006:                None => <xml>
adamc@1006:                  <li><a link={register None}>Register for access</a></li>
adamc@1006:                  <li><b>Log in:</b> <form><table>
adamc@1006:                    <tr> <th>Username:</th> <td><textbox{#Nam}/></td> </tr>
adamc@1006:                    <tr> <th>Password:</th> <td><password{#Password}/></td> </tr>
adamc@1006:                    <tr> <th><submit value="Log in" action={signin}/></th> </tr>
adamc@1006:                  </table></form></li>
adamc@1006:                </xml>
adamc@1004:              | Some me => <xml>
adamc@1004:                <div>Welcome, {[me.Nam]}!</div>
adamc@1004: 
adamc@1004:                {if me.Chair then
adamc@1004:                     <xml><li><a link={Users.main ()}>Manage users</a></li></xml>
adamc@1004:                 else
adamc@1004:                     <xml/>}
adamc@1006: 
adamc@1009:                {if me.OnPc then
adamc@1009:                     <xml><li><a link={all ()}>All papers</a></li></xml>
adamc@1009:                 else
adamc@1009:                     <xml/>}
adamc@1009: 
adamc@1006:                {if now < M.submissionDeadline then
adamc@1007:                     <xml><li><a link={submit ()}>Submit</a></li></xml>
adamc@1006:                 else
adamc@1006:                     <xml/>}
adamc@1004:              </xml>}
adamc@1006:         </ul></xml>
adamc@1006: 
adamc@1006:     and main () =
adamc@1006:         m <- main' ();
adamc@1006:         return <xml><body>{m}</body></xml>
adamc@1001: 
adamc@1008:     and submit () =
adamc@1008:         let
adamc@1009:             fun doSubmit r =
adamc@1010:                 me <- getLogin;
adamc@1010:                 coauthors <- List.mapM (fn name => oneOrNoRowsE1 (SELECT user.Id AS N
adamc@1010:                                                                   FROM user
adamc@1010:                                                                   WHERE user.Nam = {[name.Nam]})) r.Authors;
adamc@1010:                 if List.exists Option.isNone coauthors then
adamc@1010:                     error <xml>At least one of those coauthor usernames isn't registered.</xml>
adamc@1010:                 else
adamc@1010:                     id <- nextval paperId;
adamc@1010:                     dml (insert paper ({Id = sql_inject id, Document = sql_inject (fileData r.Document)}
adamc@1010:                                            ++ ensql M.paper (r -- #Authors -- #Document) M.paperFolder));
adamc@1010:                     List.app (fn uid =>
adamc@1010:                                  case uid of
adamc@1010:                                      None => error <xml>Impossible empty uid!</xml>
adamc@1010:                                    | Some uid => dml (INSERT INTO authorship (Paper, User)
adamc@1010:                                                       VALUES ({[id]}, {[uid]})))
adamc@1010:                              (Some me.Id :: coauthors);
adamc@1010:                     return <xml><body>
adamc@1010:                       Thanks for submitting!
adamc@1010:                     </body></xml>
adamc@1008:         in
adamc@1010:             me <- getLogin;
adamc@1015:             numAuthors <- Dnat.zero;
adamc@1010: 
adamc@1008:             return <xml><body>
adamc@1008:               <h1>Submit a Paper</h1>
adamc@1008:               
adamc@1008:               <form>
adamc@1010:                 <b>Author:</b> {[me.Nam]}<br/>
adamc@1010:                 <subforms{#Authors}>
adamc@1015:                   {Dnat.render <xml><entry><b>Author:</b> <textbox{#Nam}/><br/></entry></xml> numAuthors}
adamc@1010:                 </subforms>
adamc@1015:                 <button value="Add author" onclick={Dnat.inc numAuthors}/><br/>
adamc@1015:                 <button value="Remove author" onclick={Dnat.dec numAuthors}/><br/>
adamc@1010:                 <br/>
adamc@1010: 
adamc@1010:                 {useMore (allWidgets M.paper M.paperFolder)}
adamc@1008:                 <b>Paper:</b> <upload{#Document}/><br/>
adamc@1008:                 <submit value="Submit" action={doSubmit}/>
adamc@1008:               </form>
adamc@1008:             </body></xml>
adamc@1008:         end
adamc@1007: 
adamc@1009:     and all () =
adamc@1009:         ps <- queryX (SELECT paper.Id, paper.{{map fst M.paper}} FROM paper)
adamc@1009:               (fn r => <xml><li><a link={one r.Paper.Id}>{M.summarizePaper (r.Paper -- #Id)}</a></li></xml>);
adamc@1009:         return <xml><body>
adamc@1009:           <h1>All Papers</h1>
adamc@1009: 
adamc@1009:           <ul>
adamc@1009:             {ps}
adamc@1009:           </ul>
adamc@1009:         </body></xml>
adamc@1009: 
adamc@1009:     and one id =
adamc@1012:         let
adamc@1012:             fun newReview r =
adamc@1012:                 me <- getLogin;
adamc@1012:                 checkPaper id;
adamc@1012:                 dml (insert review ({Paper = sql_inject id, User = sql_inject me.Id}
adamc@1012:                                         ++ ensql M.review r M.reviewFolder));
adamc@1012:                 one id
adamc@1009: 
adamc@1012:             fun saveReview r =
adamc@1012:                 me <- getLogin;
adamc@1012:                 checkPaper id;
adamc@1012:                 dml (update [map fst M.review] ! (ensql M.review r M.reviewFolder)
adamc@1012:                             review (WHERE T.Paper = {[id]} AND T.User = {[me.Id]}));
adamc@1012:                 one id
adamc@1012:         in
adamc@1012:             me <- getLogin;
adamc@1012:             checkPaper id;
adamc@1012:             ro <- oneOrNoRows (SELECT paper.{{map fst M.paper}}, octet_length(paper.Document) AS N
adamc@1012:                                FROM paper
adamc@1012:                                WHERE paper.Id = {[id]});
adamc@1012:             authors <- queryX (SELECT user.Nam
adamc@1012:                                FROM authorship
adamc@1012:                                  JOIN user ON authorship.User = user.Id
adamc@1012:                                WHERE authorship.Paper = {[id]})
adamc@1012:                               (fn r => <xml><li>{[r.User.Nam]}</li></xml>);
adamc@1012:             myReview <- oneOrNoRows1 (SELECT review.{{map fst M.review}}
adamc@1012:                                       FROM review
adamc@1012:                                       WHERE review.User = {[me.Id]}
adamc@1012:                                         AND review.Paper = {[id]});
adamc@1012:             case ro of
adamc@1012:                 None => error <xml>Paper not found!</xml>
adamc@1012:               | Some r => return <xml><body>
adamc@1012:                 <h1>Paper #{[id]}</h1>
adamc@1010: 
adamc@1012:                 <h3>Authors:</h3>
adamc@1012:                 <ul>
adamc@1012:                   {authors}
adamc@1012:                 </ul>
adamc@1009: 
adamc@1012:                 {allContent M.paper r.Paper M.paperFolder}<br/>
adamc@1011: 
adamc@1012:                 {if r.N = 0 then
adamc@1012:                      <xml><div>No paper uploaded yet.</div></xml>
adamc@1012:                  else
adamc@1012:                      <xml><a link={download id}>Download paper</a> ({[r.N]} bytes)</xml>}
adamc@1011: 
adamc@1012:                 <hr/>
adamc@1011: 
adamc@1012:                 {case myReview of
adamc@1012:                      None => <xml>
adamc@1012:                        <h2>Add Your Review</h2>
adamc@1012:                        
adamc@1012:                        <form>
adamc@1012:                          {allWidgets M.review M.reviewFolder}
adamc@1012:                          <submit value="Add" action={newReview}/>
adamc@1012:                        </form>
adamc@1012:                      </xml>
adamc@1012:                    | Some myReview => <xml>
adamc@1012:                      <h2>Edit Your Review</h2>
adamc@1012: 
adamc@1012:                      <form>
adamc@1012:                        {allPopulated M.review myReview M.reviewFolder}
adamc@1012:                        <submit value="Save" action={saveReview}/>
adamc@1012:                      </form>
adamc@1012:                    </xml>}
adamc@1012:               </body></xml>
adamc@1012:         end
adamc@1009: 
adamc@1009:     and download id =
adamc@1009:         checkPaper id;
adamc@1009:         ro <- oneOrNoRows (SELECT paper.Document
adamc@1009:                            FROM paper
adamc@1009:                            WHERE paper.Id = {[id]});
adamc@1009:         case ro of
adamc@1009:             None => error <xml>Paper not found!</xml>
adamc@1009:           | Some r => returnBlob r.Paper.Document (blessMime "application/pdf")
adamc@1009: 
adamc@1001: end