windows-server-2003/inetsrv/uddi/source/setup/ocm/objectpicker.cpp

//--------------------------------------------------------------------------

#ifndef _WIN32_WINNT
#define _WIN32_WINNT 0x0510
#endif

#ifndef WIN32_LEAN_AND_MEAN
#define WIN32_LEAN_AND_MEAN		// Exclude rarely-used stuff from Windows headers
#endif

#define SECURITY_WIN32
#include <windows.h>
#include <tchar.h>
#include <assert.h>
#include <objbase.h>
#include <objsel.h>
#include <Security.h>
#include <Secext.h>

#include "objectpicker.h"

#define OP_GENERIC_EXCEPTION ( ( DWORD ) 1 )

//--------------------------------------------------------------------------

extern HINSTANCE g_hInstance;

UINT g_cfDsObjectPicker = RegisterClipboardFormat( CFSTR_DSOP_DS_SELECTION_LIST );

static HRESULT InitObjectPicker( UINT uObjectType, IDsObjectPicker *pDsObjectPicker );

static HRESULT InitObjectPickerForComputers( IDsObjectPicker *pDsObjectPicker );

static HRESULT InitObjectPickerForGroups( IDsObjectPicker *pDsObjectPicker,
										  BOOL fMultiselect,
										  BOOL fWantSidPath );

static HRESULT InitObjectPickerForUsers( IDsObjectPicker *pDsObjectPicker,
										 BOOL fMultiselect );

static bool ProcessSelectedObjects( IDataObject *pdo, PTCHAR szObjectName, ULONG uBufSize );

//--------------------------------------------------------------------------
// returns true if no errors, false otherwise
// use GetLastError() to get error code
//
bool ObjectPicker( HWND hwndParent, UINT uObjectType, PTCHAR szObjectName, ULONG uBufSize )
{
	IDsObjectPicker *pDsObjectPicker = NULL;
	IDataObject *pdo = NULL;
	bool bRet = true; // assume no errors

	try
	{
		HRESULT hr = CoInitializeEx( NULL, COINIT_APARTMENTTHREADED );
		if( FAILED( hr ) )
			throw HRESULT_CODE( hr );

		//
		// Create an instance of the object picker.
		//
		hr = CoCreateInstance( 
			CLSID_DsObjectPicker,
			NULL,
			CLSCTX_INPROC_SERVER,
			IID_IDsObjectPicker,
			( void ** ) &pDsObjectPicker );

		if( FAILED( hr ) )
			throw HRESULT_CODE( hr );

		//
		// Initialize the object picker instance.
		//
		hr = InitObjectPicker( uObjectType, pDsObjectPicker );
		if( FAILED( hr ) )
			throw HRESULT_CODE( hr );

		//
		// Invoke the modal dialog.
		//
		hr = pDsObjectPicker->InvokeDialog( hwndParent, &pdo );
		if( S_OK == hr )
		{
			if( !ProcessSelectedObjects( pdo, szObjectName, uBufSize ))
				throw GetLastError();
		}
		else if( S_FALSE == hr ) // user pressed cancel
		{
			throw OP_GENERIC_EXCEPTION;
		}
		else
		{
			throw HRESULT_CODE( hr );
		}
	}
	catch( HRESULT hrErr )
	{
		SetLastError( hrErr );
		bRet = false;
	}
	catch( DWORD dwErr )
	{
		SetLastError( dwErr );
		bRet = false;
	}

	if( pdo )
		pdo->Release();

	if( pDsObjectPicker )
		pDsObjectPicker->Release();

	CoUninitialize();

	return bRet;
}

//--------------------------------------------------------------------------

static HRESULT InitObjectPicker( UINT uObjectType, IDsObjectPicker *pDsObjectPicker )
{
	if( NULL == pDsObjectPicker )
	{
		return E_INVALIDARG;
	}

	HRESULT hr = E_FAIL;

	if( OP_COMPUTER == uObjectType )
	{
		hr = InitObjectPickerForComputers( pDsObjectPicker );
	}
	else if( OP_USER == uObjectType )
	{
		hr = InitObjectPickerForUsers( pDsObjectPicker, FALSE );
	}
	else if( OP_GROUP == uObjectType )
	{
		hr = InitObjectPickerForGroups( pDsObjectPicker, FALSE, TRUE );
	}

	return hr;
}

//--------------------------------------------------------------------------

static bool ProcessSelectedObjects( IDataObject *pdo, PTCHAR szObjectName, ULONG uBufSize )
{
	PDS_SELECTION_LIST pDsSelList = NULL;
	bool dwRet = true; // assume ok

	STGMEDIUM stgmedium =
	{
		TYMED_HGLOBAL,
		NULL,
		NULL
	};

	FORMATETC formatetc =
	{
		( CLIPFORMAT ) g_cfDsObjectPicker,
		NULL,
		DVASPECT_CONTENT,
		-1,
		TYMED_HGLOBAL
	};

	try
	{
		//
		// Get the global memory block containing a user's selections.
		//
		HRESULT hr = pdo->GetData( &formatetc, &stgmedium );
		if( FAILED( hr ) )
			throw HRESULT_CODE( hr );

		//
		// Retrieve pointer to DS_SELECTION_LIST structure.
		//
		pDsSelList = ( PDS_SELECTION_LIST ) GlobalLock( stgmedium.hGlobal );
		if( !pDsSelList )
		{
			throw GetLastError();
		}

		//
		// assume there is only 1 item returned because
		// we have multi-select turned off
		//
		if( pDsSelList->cItems != 1 )
		{
			assert( false );
			throw OP_GENERIC_EXCEPTION;
		}

		UINT i = 0;

		//_tprintf( TEXT( "Object '%u'\n" ), i );
		//_tprintf( TEXT( "  Name '%ws'\n" ),  pDsSelList->aDsSelection[i].pwzName );
		//_tprintf( TEXT( "  Class '%ws'\n" ), pDsSelList->aDsSelection[i].pwzClass );
		//_tprintf( TEXT( "  Path '%ws'\n" ),  pDsSelList->aDsSelection[i].pwzADsPath );
		//_tprintf( TEXT( "  UPN '%ws'\n" ),   pDsSelList->aDsSelection[i].pwzUPN );

		//
		// did we request a computer name? If so, we get it directly in the pwzName field
		//
		if( 0 == _tcsicmp( pDsSelList->aDsSelection[i].pwzClass, TEXT( "computer" )) )
		{
			assert( uBufSize > _tcslen( pDsSelList->aDsSelection[i].pwzName ) );
			_tcsncpy( szObjectName, pDsSelList->aDsSelection[i].pwzName, uBufSize - 1 );
			szObjectName[ uBufSize - 1 ] = NULL;
		}
		//
		// user name or group takes some post-processsing...
		//
		else if( 0 == _tcsicmp( pDsSelList->aDsSelection[i].pwzClass, TEXT( "user" ) ) ||
			     0 == _tcsicmp( pDsSelList->aDsSelection[i].pwzClass, TEXT( "group" ) ) )
		{
			//
			// user names from the domain begin with "LDAP:"
			// strip off the prefix info, up to the first "cn="
			// then use the TranslateName API to get the form "domain\user" or "domain\group"
			//
			if( 0 == _tcsnicmp( pDsSelList->aDsSelection[i].pwzADsPath, TEXT( "LDAP:" ), 5 ) )
			{
				PTCHAR p = _tcsstr( pDsSelList->aDsSelection[i].pwzADsPath, TEXT( "CN=" ) );
				if( NULL == p )
					p = _tcsstr( pDsSelList->aDsSelection[i].pwzADsPath, TEXT( "cn=" ) );

				if( NULL == p )
				{
					assert( false );
					throw OP_GENERIC_EXCEPTION;
				}

				if( !TranslateName( p, NameFullyQualifiedDN, NameSamCompatible, szObjectName, &uBufSize ) )
					throw GetLastError();
			}
			//
			// otherwise, names on the local box begin with "winnt:"
			// and we are only interested in the last two sections of the string,
			// delimited by "/"
			//
			else if( 0 == _tcsnicmp( pDsSelList->aDsSelection[i].pwzADsPath, TEXT( "WINNT:" ), 6 ) )
			{
				PTCHAR p = pDsSelList->aDsSelection[i].pwzADsPath;
				PTCHAR pend = p + _tcslen( p );
				UINT uCount = 0;
				while( pend > p )
				{
					if( '/' == *pend )
					{
						*pend = '\\';
						uCount++;

						if( uCount == 2 )
						{
							p = pend + 1;
							break;
						}
					}
					pend--;
				}

				//
				// if this fails, assert during debug but do not stop
				//
				if( p == pend )
					assert( false );

				assert( uBufSize > _tcslen( p ) );
				_tcsncpy( szObjectName, p, uBufSize - 1 );
				szObjectName[ uBufSize - 1 ] = NULL;
			}
			else
			{
				assert( false );
				throw OP_GENERIC_EXCEPTION;
			}
		}
		else
		{
			assert( false );
			throw OP_GENERIC_EXCEPTION;
		}
	}

	catch( DWORD dwErr )
	{
		SetLastError( dwErr );
		dwRet = false;
	}

	if( pDsSelList )
		GlobalUnlock( stgmedium.hGlobal );

	ReleaseStgMedium( &stgmedium );

	return dwRet;
}

//+--------------------------------------------------------------------------
//
//  Function:   InitObjectPickerForGroups
//
//  Synopsis:   Call IDsObjectPicker::Initialize with arguments that will
//              set it to allow the user to pick one or more groups.
//
//  Arguments:  [pDsObjectPicker] - object picker interface instance
//
//  Returns:    Result of calling IDsObjectPicker::Initialize.
//
//  History:    10-14-1998   DavidMun   Created
//              1-8-2000     SergeiA    Adapted for IIS
//				9-6-2002	 a-dsebes	Adapted for UDDI
//
//---------------------------------------------------------------------------
HRESULT
InitObjectPickerForGroups( IDsObjectPicker *pDsObjectPicker, 
                           BOOL fMultiselect,
						   BOOL fWantSidPath )
{
    //
    // Prepare to initialize the object picker.
    // Set up the array of scope initializer structures.
    //

    static const int SCOPE_INIT_COUNT = 5;
    DSOP_SCOPE_INIT_INFO aScopeInit[ SCOPE_INIT_COUNT ];

    ZeroMemory( aScopeInit, sizeof( DSOP_SCOPE_INIT_INFO ) * SCOPE_INIT_COUNT );

    //
    // Target computer scope.  This adds a "Look In" entry for the
    // target computer.  Computer scopes are always treated as
    // downlevel (i.e., they use the WinNT provider).
    //
    aScopeInit[ 0 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 0 ].flType = DSOP_SCOPE_TYPE_TARGET_COMPUTER;
    aScopeInit[ 0 ].flScope = DSOP_SCOPE_FLAG_STARTING_SCOPE;

	aScopeInit[ 0 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_BUILTIN_GROUPS;
    aScopeInit[ 0 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_LOCAL_GROUPS;

	if( fWantSidPath )
	{
		aScopeInit[ 0 ].flScope |= DSOP_SCOPE_FLAG_WANT_SID_PATH;
	}

    //
    // The domain to which the target computer is joined.  Note we're
    // combining two scope types into flType here for convenience.
    //
    aScopeInit[ 1 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 1 ].flScope = 0;
    aScopeInit[ 1 ].flType = DSOP_SCOPE_TYPE_UPLEVEL_JOINED_DOMAIN | 
				   		     DSOP_SCOPE_TYPE_DOWNLEVEL_JOINED_DOMAIN;

	aScopeInit[ 1 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_GLOBAL_GROUPS_SE |
													DSOP_FILTER_UNIVERSAL_GROUPS_SE |
													DSOP_FILTER_DOMAIN_LOCAL_GROUPS_SE;
    aScopeInit[ 1 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_GLOBAL_GROUPS;

	if( fWantSidPath )
	{
		aScopeInit[ 1 ].flScope |= DSOP_SCOPE_FLAG_WANT_SID_PATH;
	}

    //
    // The domains in the same forest (enterprise) as the domain to which
    // the target machine is joined.  Note these can only be DS-aware
    //

    aScopeInit[ 2 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 2 ].flType = DSOP_SCOPE_TYPE_ENTERPRISE_DOMAIN;
    aScopeInit[ 2 ].flScope = 0;

	aScopeInit[ 2 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_GLOBAL_GROUPS_SE |
													  DSOP_FILTER_UNIVERSAL_GROUPS_SE;

	if( fWantSidPath )
	{
		aScopeInit[ 2 ].flScope |= DSOP_SCOPE_FLAG_WANT_SID_PATH;
	}

    //
    // Domains external to the enterprise but trusted directly by the
    // domain to which the target machine is joined.
    //
    // If the target machine is joined to an NT4 domain, only the
    // external downlevel domain scope applies, and it will cause
    // all domains trusted by the joined domain to appear.
    //

    aScopeInit[ 3 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 3 ].flScope = 0;
    aScopeInit[ 3 ].flType = DSOP_SCOPE_TYPE_EXTERNAL_UPLEVEL_DOMAIN |
							 DSOP_SCOPE_TYPE_EXTERNAL_DOWNLEVEL_DOMAIN;

	aScopeInit[ 3 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_GLOBAL_GROUPS_SE |
													  DSOP_FILTER_UNIVERSAL_GROUPS_SE;
    aScopeInit[ 3 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_GLOBAL_GROUPS;

	if( fWantSidPath )
	{
		aScopeInit[ 3 ].flScope |= DSOP_SCOPE_FLAG_WANT_SID_PATH;
	}

    //
    // The Global Catalog
    //

    aScopeInit[ 4 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 4 ].flScope = 0;
    aScopeInit[ 4 ].flType = DSOP_SCOPE_TYPE_GLOBAL_CATALOG;

	//
    // Only native mode applies to gc scope.
	//
    aScopeInit[ 4 ].FilterFlags.Uplevel.flNativeModeOnly = DSOP_FILTER_GLOBAL_GROUPS_SE |
														   DSOP_FILTER_UNIVERSAL_GROUPS_SE;

	if( fWantSidPath )
	{
		aScopeInit[ 4 ].flScope |= DSOP_SCOPE_FLAG_WANT_SID_PATH;
	}

    //
    // Put the scope init array into the object picker init array
    //

    DSOP_INIT_INFO InitInfo;
    ZeroMemory( &InitInfo, sizeof( InitInfo ) );
    InitInfo.cbSize = sizeof( InitInfo );

    //
    // The pwzTargetComputer member allows the object picker to be
    // retargetted to a different computer.  It will behave as if it
    // were being run ON THAT COMPUTER.
    //
    InitInfo.cDsScopeInfos = SCOPE_INIT_COUNT;
    InitInfo.aDsScopeInfos = aScopeInit;
    InitInfo.flOptions = fMultiselect ? DSOP_FLAG_MULTISELECT : 0;

    //
    // Note object picker makes its own copy of InitInfo.  Also note
    // that Initialize may be called multiple times, last call wins.
    //

    HRESULT hr = pDsObjectPicker->Initialize( &InitInfo );

	return hr;
}


//+--------------------------------------------------------------------------
//
//  Function:   InitObjectPickerForUsers
//
//  Synopsis:   Call IDsObjectPicker::Initialize with arguments that will
//              set it to allow the user to pick one or more groups.
//
//  Arguments:  [pDsObjectPicker] - object picker interface instance
//
//  Returns:    Result of calling IDsObjectPicker::Initialize.
//
//  History:    9-6-2002	 a-dsebes	Created.
//				
//
//---------------------------------------------------------------------------
HRESULT
InitObjectPickerForUsers( IDsObjectPicker *pDsObjectPicker, 
                          BOOL fMultiselect )
{
    //
    // Prepare to initialize the object picker.
    // Set up the array of scope initializer structures.
    //

    static const int SCOPE_INIT_COUNT = 5;
    DSOP_SCOPE_INIT_INFO aScopeInit[ SCOPE_INIT_COUNT ];

    ZeroMemory( aScopeInit, sizeof( DSOP_SCOPE_INIT_INFO ) * SCOPE_INIT_COUNT );

    //
    // Target computer scope.  This adds a "Look In" entry for the
    // target computer.  Computer scopes are always treated as
    // downlevel (i.e., they use the WinNT provider).
    //
    aScopeInit[ 0 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 0 ].flType = DSOP_SCOPE_TYPE_TARGET_COMPUTER;
    aScopeInit[ 0 ].flScope = DSOP_SCOPE_FLAG_STARTING_SCOPE;

	aScopeInit[ 0 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_USERS;
    aScopeInit[ 0 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_USERS;

    //
    // The domain to which the target computer is joined.  Note we're
    // combining two scope types into flType here for convenience.
    //
    aScopeInit[ 1 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 1 ].flScope = 0;
    aScopeInit[ 1 ].flType = DSOP_SCOPE_TYPE_UPLEVEL_JOINED_DOMAIN | 
				   		     DSOP_SCOPE_TYPE_DOWNLEVEL_JOINED_DOMAIN;

	aScopeInit[ 1 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_USERS;
    aScopeInit[ 1 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_USERS;

    //
    // The domains in the same forest (enterprise) as the domain to which
    // the target machine is joined.  Note these can only be DS-aware
    //
    aScopeInit[ 2 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 2 ].flType = DSOP_SCOPE_TYPE_ENTERPRISE_DOMAIN;
    aScopeInit[ 2 ].flScope = 0;

	aScopeInit[ 2 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_USERS;

    //
    // Domains external to the enterprise but trusted directly by the
    // domain to which the target machine is joined.
    //
    // If the target machine is joined to an NT4 domain, only the
    // external downlevel domain scope applies, and it will cause
    // all domains trusted by the joined domain to appear.
    //
    aScopeInit[ 3 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 3 ].flScope = 0;
    aScopeInit[ 3 ].flType = DSOP_SCOPE_TYPE_EXTERNAL_UPLEVEL_DOMAIN |
							 DSOP_SCOPE_TYPE_EXTERNAL_DOWNLEVEL_DOMAIN;

	aScopeInit[ 3 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_USERS;
    aScopeInit[ 3 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_USERS;

    //
    // The Global Catalog
    //
    aScopeInit[ 4 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 4 ].flScope = 0;
    aScopeInit[ 4 ].flType = DSOP_SCOPE_TYPE_GLOBAL_CATALOG;

	//
    // Only native mode applies to gc scope.
	//
	aScopeInit[ 4 ].FilterFlags.Uplevel.flNativeModeOnly = DSOP_FILTER_USERS;

    //
    // Put the scope init array into the object picker init array
    //
    DSOP_INIT_INFO InitInfo;
    ZeroMemory( &InitInfo, sizeof( InitInfo ) );
    InitInfo.cbSize = sizeof( InitInfo );

    //
    // The pwzTargetComputer member allows the object picker to be
    // retargetted to a different computer.  It will behave as if it
    // were being run ON THAT COMPUTER.
    //
    InitInfo.cDsScopeInfos = SCOPE_INIT_COUNT;
    InitInfo.aDsScopeInfos = aScopeInit;
    InitInfo.flOptions = fMultiselect ? DSOP_FLAG_MULTISELECT : 0;

    //
    // Note object picker makes its own copy of InitInfo.  Also note
    // that Initialize may be called multiple times, last call wins.
    //
    HRESULT hr = pDsObjectPicker->Initialize( &InitInfo );

	return hr;
}


//+--------------------------------------------------------------------------
//
//  Function:   InitObjectPickerForComputers
//
//  Synopsis:   Call IDsObjectPicker::Initialize with arguments that will
//              set it to allow the user to pick a single computer object.
//
//  Arguments:  [pDsObjectPicker] - object picker interface instance
//
//  Returns:    Result of calling IDsObjectPicker::Initialize.
//
//  History:    10-14-1998   DavidMun   Created
//              08-06-2002   a-dsebes   Adapted for UDDI.
//
//---------------------------------------------------------------------------

HRESULT
InitObjectPickerForComputers( IDsObjectPicker *pDsObjectPicker )
{
    //
    // Prepare to initialize the object picker.
    // Set up the array of scope initializer structures.
    //

    static const int SCOPE_INIT_COUNT = 2;
    DSOP_SCOPE_INIT_INFO aScopeInit[ SCOPE_INIT_COUNT ];

    ZeroMemory( aScopeInit, sizeof( DSOP_SCOPE_INIT_INFO ) * SCOPE_INIT_COUNT );

    //
    // Build a scope init struct for everything except the joined domain.
    //

    aScopeInit[ 0 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 0 ].flType = DSOP_SCOPE_TYPE_ENTERPRISE_DOMAIN
                             | DSOP_SCOPE_TYPE_GLOBAL_CATALOG
                             | DSOP_SCOPE_TYPE_EXTERNAL_UPLEVEL_DOMAIN
                             | DSOP_SCOPE_TYPE_EXTERNAL_DOWNLEVEL_DOMAIN
                             | DSOP_SCOPE_TYPE_WORKGROUP
                             | DSOP_SCOPE_TYPE_USER_ENTERED_UPLEVEL_SCOPE
                             | DSOP_SCOPE_TYPE_USER_ENTERED_DOWNLEVEL_SCOPE;

	aScopeInit[ 0 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_COMPUTERS;
    aScopeInit[ 0 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_COMPUTERS;


    //
    // scope for the joined domain, make it the default
    //
    aScopeInit[ 1 ].cbSize = sizeof( DSOP_SCOPE_INIT_INFO );
    aScopeInit[ 1 ].flType = DSOP_SCOPE_TYPE_UPLEVEL_JOINED_DOMAIN
                             | DSOP_SCOPE_TYPE_DOWNLEVEL_JOINED_DOMAIN;

	aScopeInit[ 1 ].FilterFlags.Uplevel.flBothModes = DSOP_FILTER_COMPUTERS;
    aScopeInit[ 1 ].FilterFlags.flDownlevel = DSOP_DOWNLEVEL_FILTER_COMPUTERS;
    aScopeInit[ 1 ].flScope = DSOP_SCOPE_FLAG_STARTING_SCOPE;

    //
    // Put the scope init array into the object picker init array
    //

    DSOP_INIT_INFO InitInfo;
    ZeroMemory( &InitInfo, sizeof( InitInfo ) );

    InitInfo.cbSize = sizeof( InitInfo );
    InitInfo.pwzTargetComputer = NULL;  // NULL == local machine
    InitInfo.cDsScopeInfos = SCOPE_INIT_COUNT;
    InitInfo.aDsScopeInfos = aScopeInit;

    //
    // Note object picker makes its own copy of InitInfo.  Also note
    // that Initialize may be called multiple times, last call wins.
    //

    return pDsObjectPicker->Initialize(&InitInfo);
}