Massachusetts Institute of Technology
Department Electrical Engineering and Computer Science

6.916: Software Engineering of Innovative Web Services
Room Reservation System

• Philip and Alex's Guide to Web Publishing, Chapters 3, 13, 14, 15
• http://www.arsdigita.com/doc/permissions.html

Useful references:

• http://www.arsdigita.com/asj/using-the-acs
• http://www.arsdigita.com/ad-training/acs-install/acs
• Acceptance test of the ArsDigita Community System

Online bboard for assistance:

• Pset 2 Q&A forum - For bootcamp and home study
• 6.916 problem set forum on class web site - For students in 6916

Objectives: Students should learn

• the fundamentals of the ArsDigita Community System (the "ACS", a toolkit that we'll be living with for the rest of the semester),
• how to build, install, and document a new module in the ACS,
• rudiments of ecommerce; how to bill someone's credit card.

In the first problem set, you learned how to use lots of new software tools. Mostly you needed to learn commands and procedure calls. You didn't care about the internals of Unix, Oracle, AOLserver, or the Tcl interpreter. In this second problem set, you will learn how to extend a library of source code. Thus, you'll have to learn about the internal structure of the toolkit. If you thought looking at your own source code was unpleasant, here's your chance to look at 200,000 lines of someone else's :-)

This problem set is different in style from the previous one, and you should work on it differently. The first problem set dealt mostly with mechanics, and you could pretty much work through it sitting at the computer. This problem set will require considerable reading and design before you begin to code. You may want to do only the very beginning of the problem set (exercise 0) in the lab and then work offline to develop your data model (exercise 1) and documentation (exercise 2). Although there are no formal checkpoints required for this problem set, it would be a good idea to show your work to a TA before continuing with exercise 3, to make sure your data model is adequate for completing the problem set.

The Big Picture

Users:	We're the world's leading experts on computers. We have a big building full of researchers, hundreds of advanced computer systems, and a handful of conference rooms. We'd like a Web-based system for scheduling conference rooms.
You:	How are you doing it now?
Users:	Secretaries, pencils, and paper appointment books.
You:	Ah. So how do you envision the computer-based system working?
Users:	Jane Nerd comes to the server and asks for a room from Time X to Time Y, capable of holding N people. The server offers Jane a choice of rooms, each one accompanied by a description of the AV facilities, and she can pick whichever she likes the best.
You:	Anything else special?
Users:	There is a set of Uber-Users. If Alice Uber can't find a room that she likes, we want her to be able to boot some grunts out of their reserved spot. Alice should not be able to preempt another Uber-User, though. The booted grunt should get an email alert from the server saying "Alice booted you; come back and pick another room."
You:	So any user can reserve any room?
Users:	No. Most of the conference rooms are reservable by anyone. However, some rooms require approval of reservations by a designated administrator (who can be any user in the community), unless the reservation was requested by an Uber-User. The designated administrator is notified by email any time that a reservation is requested for a particular room, and should be able to approve or deny the request by clicking on one of two encoded URLs in the email message.

The Big (Software) Picture

You're building a program that keeps track of users, groups of users, rooms, and room reservations. You could build this program from scratch, but we already have a documented, debugged toolkit, the ArsDigita Community System, designed to support communities of users, subsets of which are collected into groups. You can probably get your program finished faster if you start with the toolkit, but more importantly you will achieve higher reliability (e.g., the user registration stuff has been debugged already) and higher maintainability (because the user and user groups portions of the software are documented in a book chapter residing at a permanent URL: http://www.arsdigita.com/books/panda/community.html).

Some of what you'll be doing in this problem set is creating RDBMS tables from scratch and writing Tcl procedures to perform transactions on those tables, just as you did in problem set 1. Much of what you're doing here, though, is figuring out clean ways of using and extending the toolkit. Sometimes this is as simple as visiting the toolkit admin pages (/admin) of your server and using Web forms to add user groups.

Exercise 0: Installing the Arsdigita Community System -- Skip this part if you are in 6.916

The first thing you need to do is install the ACS. It is the base of code from which you will be building your service. Here are the steps for you to follow:

• Move your code from problem set 1 to your home directory.

  
  mkdir /home/stdXX/ps1
  cd /web/studentXX/
  mv * /home/stdXX/ps1
  
  

• Fetch the current ACS, and install it in your web directory. You might find the following commands helpful.

  
  cd /web/studentXX/
  wget http://software.arsdigita.com/dist/acs....tar.gz
  gunzip acs....tar.gz
  tar -xf acs....tar
  mv acs/* .
  
  

Read the installation instructions. Your AOLServers have already been configured so you can start at "Installing the ACS into Oracle," and skip the "Configuring AOLServer" and later sections. Remember to run the "load-geo-tables" script before loading the ACS data model.

The "parameters" subdirectory (/web/studentXX/parameters) contains server personality constants. You will find the default configuration file, ad.ini in your parameters subdirectory. You need to copy the default file and customize it with your server's name. (e.g., "yourservername" will be changed to "student51"). You can use the default file for reference but if you want to change the behavior of your server, you must edit serverXX.ini.

cd /web/studentXX/parameters
cp ad.ini studentXX.ini
emacs studentXX.ini

You can search and replace with the emacs command M-shift-5 (or M-x replace-string). Replace "yourservername" with "studentXX", where XX is your student number. Replace "yourdomain.com" with "lcswebXX.lcs.mit.edu".

One horrible bug with AOLserver (at least in 2.3.2): If there are Emacs backup files in the /parameters directory that start with #, you might find that your AOLserver is unable to start. If all seems hopeless, do a m-x Dired on the /parameters directory and look for backup files to delete.

Exercise 0: Installing the Arsdigita Community System -- Version for students in 6.916

While you were stting in rapt attention in lecture, a robot script scoured your server, diligently performing the operations described above. As a result of this, if you connect to your top-level server page, you'll see a screen asking to log in. Don't log in yet. More dramatically, if you look in your www directory (/web/stdXX/www/), you'll see about 60 files and subdirectories -- these are the ACS toolkit modules. Your old www directory, with all your work in it, has been renamed to /web/stdXX/www.old/. If you want to play with that again through your server, you should make a new subdirecotry in www and move it there. Similarly, any utilities you added to /web/stdXX/tcl/ have been moved to /web/stdXX/tcl.old/.

Even though we didn't ask you to install the toolkit manually, it would be a good idea to look through the installation instructions anyway, since they will give you a better idea of how Oracle, AOLServer, and ACS fit together.

Exercise 0.5: Take ownership of your server

Using Emacs, edit the stdXX.ini file of parameters for your server, in /web/stdXX/parameters directory on your server machine. (Or continue edting the file, if you were not in 6.916.)

Change the system name and the publisher name to something appropriate. For example, if you change the system name to "Joan's Scholarly Center", you'll then see many pages of your site display "Joan's Scholarly Center", including the very top-level page. You should also set the email address of the system owner and admin owner to your actual personal email address.

Restart your server, with restart-aolserver stdXX from the shell, and visit the top-level page to verify that it shows the appropriate system name and email address.

Exercise 0.6: Become your own best friend

You now have an installed ArsDigita Community System but there aren't any users. Visit the top-level page on your site (e.g., http://lcsweb51.lcs.mit.edu/) and note that you're asked to log in. Type your standard personal email address and register as a user.

Exercise 0.7: Make yourself a sysadmin

Log out, and log back in as the "system" user (password "changeme"). Go to site-wide adminstration and add your personal user (created in exercise 0.6) to the site-wide administrators user group. You should also change the passwords of the "system" user.

Exercise 0.7: Notice that your server is self-documenting

Use a Web browser to connect to the /doc subdirectory of your server and notice that you have a complete set of ArsDigita Community System documentation. You might find it useful to read the installation instructions and you will certainly want to read the developer's guide (/doc/developers.html). The latter starts off with an admonition to use proc_doc instead of proc when defining externally called procedures. Please follow this convention for the rest of the semester.

Exercise 0.9: Create some users

Repeatedly visit the login pages to create a bunch of users for your community, i.e., pretend you are "billg@microsoft.com", "president@whitehouse.gov", "wile_e_coyote@iq207.supergenius.com" and fill out the registration form. Remember that these will be the folks who are reserving conference rooms. Make sure that at least a couple of them have real email addresses because you want to be sure that you can test your email alerts. If you don't have any cooperative friends, you might wish to make yourself a hotmail or yahoo email account. Sadly, you can't make several users with the same email address because we constrain the email column in the users table to be unique.

Exercise 0.95: Create a user group

Read the documentation for the permissions package at /doc/permissions.html. You're going to use this package to figure out if someone is an uber user or not.

Using the Web forms in /admin/ug/ create a new user group of type "Administration". Call it "Reservation System Uber Users". The module field should be "reserve" and leave the submodule field blank.

This is the only user group that you will need to complete the pset. Using the admin forms, place one or two users in this group. They don't need to have any special role within the group, simple membership is fine.

Exercise 1: Build the data model

With the above preliminaries out of the way, it's time to start on the actual problem set: implementing the room reservation system and installing it as an ACS module. You'll need to follow the file naming and placement conventions set forth in http://www.arsdigita.com/doc/custom.html, create a SQL data model file to hold new table definitions for your room reservation system. Since part of the naming convention is that your data model file must be called "module-name.sql", you have to come up with a name for your module. In order to make life easier for us in looking over your shoulder, please refrain from being creative and call your module "reserve".

A good thing to do at this point is to step away from your computer with hardcopies of this problem set and http://www.arsdigita.com/books/sql/data-modeling.html. Read the problem set cover-to-cover before writing anything down. Otherwise, halfway through the pset, you might find yourself having to back up, alter tables, rewrite .tcl scripts, and rewrite documentation.

Here are some guidelines for your data model. Please note that this is not intended to be a complete listing of all the necessary steps.

• remember that users of your system are already represented in the ArsDigita Community System users table; an Uber User will be recognized by membership in the Uber Users user group that you created.

• in order that your data model be comprehensible to other ArsDigita Community System programmers, try to follow variable and table-naming conventions. Start by skimming Chapter 3 of Philip and Alex's Guide to Web Publishing, looking only at create table statements. Then surf around inside your own Web server's /doc/sql/ directory and look at community-core.sql, news.sql, and other files. When you're done, you should have picked up items such as
  • boolean data are represented in columns ending in "_p" and are char(1) with a check constraint limiting them to "f" and "t" (the "_p" comes from "predicate" and is an ancient Lisp programmer's convention)
  • keys in the database are all-lowercase, no spaces, underscores for separation, e.g., "q_and_a" for a bboard presentation type.

• Any time you are representing a person, you should do it by referencing the users table (defined in the /packages/acs-core/community-core.sql file). For example, here is how the bboard system records the identity of the person posting:

  create table bboard (
          msg_id          char(6) primary key,
  	...
          user_id         integer not null references users,
  	...
  

  You will need to do something similar in the rooms table to record which user is the designated administrator.

• You probably want to use generated keys for your table that holds rooms, rather than using the MIT classroom number or name. This will enable your system to handle gracefully situations in which a room is renamed because a rich person has donated money.

• To represent room reservations, you can use start_time and end_time columns (both of type date) or with start_time and duration columns (the latter would be of type number and would represent the fraction of a day during which the room was reserved).

• Instead of simply recording that a reservation was made (or approved), record the times of the users' actions. Columns of type date may be used for this (and testing for NULL in the approval_time can be used to find an unapproved reservation).

Now that you're written all of your create table statements and put them in a file named "/doc/sql/reserve.sql", feed the definitions to Oracle. If you don't want to cut and paste into SQL*Plus, you can use Unix shell I/O redirection:

sqlplus / < reserve.sql

If you slept through 6.170 and didn't learn how to write bug-free code, you might find yourself running this command repeatedly. Although Oracle provides powerful transaction management, data definition language statements such as create table can not be rolled back. So if your file defines three tables and there is an error in the definition of the second table, you will usually end up succeeding in defining two tables with the preceding command. You can go into Emacs and edit reserve.sql and then rerun the shell command. Oracle will ignore the first and third table definitions since the tables already exist and define only your second table.

You can check your work by using the SQL*Plus "describe" command, e.g., "describe users" or "describe rooms".

Exercise 2: Set down a list of legal transactions

Write a design spec for your system in a file named in accordance with http://www.arsdigita.com/doc/custom.html, i.e., it should probably go in /doc/reserve.html.

Include in this file a list of the legal transactions in your system. For each transaction, sketch the SQL and note any external implications, e.g., "administrator is sent email alert".

As an example of a documented module, visit http://www.arsdigita.com/doc/download (note that we neglected to carefully document the transactions to the tables; try to do a better job than we did).

Exercise 3a: Get the basic admin pages done

We're not going to worry about being able to edit room names or designated room administrators for the moment. Instead, let's build the simplest possible system that enables the site owner to create rooms:

• Build an index.tcl page under /admin/reserve/ that shows an HTML unordered list (UL) of the names of all the rooms, a blank line, and then an "add a room" link. This page should simply handle the situation in which there are no rooms registered.

• Build /admin/reserve/room-add.tcl (or .adp) and /admin/reserve/room-add-2.tcl that will insert a room into the database.

Connect to your admin directory, e.g. http://lcswebXX.lcs.mit.edu/admin/reserve. Create at least five rooms.

Note: By placing these pages under the /admin directory, you've restricted them to use by the site owner. This is acceptable because we presume adding a room to be an infrequent activity. Therefore, it isn't worth building user submission pages for new rooms and admin approval pages for those submissions.

Exercise 3b: Write the basic user pages

We're not going to worry about uber-users or room approval for the moment. Instead, let's build a basic system:

• Build /reserve/index.tcl, the gateway to the room reservation system. The script should start out by checking for a user_id cookie (use ad_verify_and_get_user_id, defined in /tcl/ad-security.tcl) and, if not present, redirecting users over to /register/index.tcl.

  For a logged-in user, the page starts out with an HTML form for requesting a new reservation. The form contains the following elements:

  • start and end date-times (or start time and duration; the user interface does not have to be consistent with the data model). If you want to make life easier for yourself, it is perfectly acceptable to force the user to enter date/times in ANSI timestamp format: "YYYY-MM-DD HH24:MI:SS". Then you can drop this right into Oracle using a to_date.
  • number of people who will be occupying the room
  Underneath this form, the page displays a personalized list of the rooms that the authenticated user has already reserved for the future, ordered by the start times. By showing this list automatically, you free yourself from having to write special pages to confirm reservations or check reservation history.

• Build /reserve/new.tcl that will take input from the form in index.tcl and find available rooms. This page should refrain from showing rooms that are booked for any part of the time period requested or rooms that aren't large enough for the number of people specified. For your query, it is wise to remember that
  • you can select from the rooms table with a WHERE clause that subqueries the room_reservations table.
  • Although SQL contains a BETWEEN operator, e.g., t1.start_time between t2.start_time and t2.end_time, it might not be the best way to catch all cases of overlapping rooms.
  • a professional SQL programmer would probably end up coding this with a where not exists (select 1 from ...)
  • don't worry about efficiency; it is okay to have a query that Oracle executes with an O[N^2] plan. It might be fast enough and, in any case, we're not paying you enough to build a scalable system.
  You'll have to pass the user's input from index.tcl through to new.tcl. You'll either be doing this with URL variables (if you've chosen an interface based on simple links) or HTML form hidden variables (if you've chosen a form interface with method=POST). In /home/nsadmin/modules/tcl/utilities.tcl we've defined export_url_vars and export_form_vars that facilitate this. If you have start_time and end_time defined as Tcl local variables, you can export them to the next page with new-2.tcl?[export_url_vars start_time end_time] or [export_form_vars start_time end_time] inside a form.

• Build /reserve/new-2.tcl to take input from new.tcl and ns_returnredirect back to index.tcl (where the user will see that the room has in fact been reserved). This page should make sure that there isn't a time conflict, then insert the reservation. If there is a time conflict, return an message to that effect and a link back to new.tcl with the user's original parameters in place (presumably this time new.tcl will not offer the already-booked room).

How could there be a time conflict given that the preceding page only showed free rooms? Here's the concurrency situation which we're worried about:

Olin Egghead says that he needs a room for 8 people at 3:00 pm tomorrow, for a 45-minute meeting.
Your module serves Olin the new.tcl page, showing that the Boesky Room is available.	Dorothy Alvelda says that she needs a room for 5 people tomorrow at 3:30 pm.
Olin is about to confirm the Boesky Room when the phone rings. A Wall Street firm is offering him $250,000 to become a C programmer in their commodities trading division. Olin immediately replies that he wouldn't consider abandoning his sacred academic principles for a minute. An hour later, Olin is still on the phone.	Since Olin has not yet booked any rooms, new.tcl shows Dorothy that the Boesky Room is among the available rooms at 3:30 tomorrow. Dorothy confirms the Boesky Room and new-2.tcl inserts a row into the database.
Olin hangs up and gets preoccupied with copying impressive-looking equations from the pizza delivery section of the Thessaloniki Yellow Pages into his latest research paper.
Olin remembers that he needs that room for tomorrow and unburies his browser window, but does not reload new.tcl (i.e., he is looking at the page generated a couple of hours ago). Oh yes, the Boesky Room will be fine. Olin clicks to reserve the Boesky Room at 3:00 pm tomorrow.

If you want to act like a professional Web programmer, you therefore have to run the same query in new-2.tcl that you ran in new.tcl to make sure that the room is in fact still free.

What do the users get from their professionally programmed systems? Double booked rooms. The average professional Web programmer probably won't handle the case where two users submit room requests at precisely the same second.

Hold yourself to a higher standard by making new-2.tcl lock the reservations table before querying to confirm room availability. Read the transactions chapter of SQL for Web Nerds (http://www.arsdigita.com/books/sql/) to find out how to lock tables.

Making it Real

We've got the rudiments. The site owner can define rooms. Users can book rooms. Reservations won't conflict. If you were a West Coast software company, you'd declare victory at this point. Issue some press releases, ship the product in a nice-looking shrink-wrapped box (as Release 3.2), and sell some shares to the public.

One of the ugly facets of offering a Web service, though, is that users will hammer you with email until you make the thing real.

Exercise 4: Finish the admin pages

Here's a step-by-step plan:

• Link each room in the /admin/reserve/index.tcl listing to room-edit.tcl where the site owner can change a room's name or mark a room as requiring approval. Part of marking a room as requiring approval is using /user-search.tcl to let the site owner choose a room administrator from the users table.

• Build a /admin/reserve/reports/ directory. The index.tcl page in this new directory should list the rooms and, for each room, show the total number of hours that the room has been reserved and the average number of people in a reservation for that room. This list should be sortable by name or number of hours booked. All the stats should be limited to reservations in the preceding 12 months (use the ADD_MONTHS function in SQL, documented at http://philip.greenspun.com/sql/ref/addmonths).

  Hints: You can do this report with a 4-line SQL query. You don't need to do any date arithmetic, summing, rounding, or averaging in Tcl (Oracle SQL has functions for these things). Keys to solving the problem are reading up on the SQL GROUP BY clause. Also note that order by 3 will order by the 3rd item in the select list.

  If you want to really do something nice, make the report include rooms for which there haven't been any reservations (showing the total hours as 0; hint: use NVL). If you want to preserve the one-year limit, you'll end up with a SQL query of the form

  select ...
  from table1, (select ... from table2 where ...) as table2
  where table1.col1 = table2.col2(+)
  

  Here you're querying from a real table and a view created on-the-fly from table2.

• Make the room names in the /admin/reserve/reports/index.tcl page hyperlink anchors. The targets for those anchors should be a details.tcl page where all the reservations are shown, most recent at the top.

Exercise 5: Finish the user pages

• Edit /reserve/new.tcl so that a member of the Uber User group sees both unreserved and reserved-but-bumpable (i.e., not reserved by another Uber User) rooms. A user who is not an Uber User should see a flag by rooms that require approval.

• Edit /reserve/new-2.tcl to recognize the following cases:
  • Uber User bumping regular user (delete original reservation; send email to regular user; place Uber User's reservation)

  • Regular user requesting approval-required room (insert reservation, email administrator, serve special page to user saying "your request has been submitted to ... and we'll let you know if it is approved")

  See the AOLserver Tcl Developer's Guide at aolserver.com for an explanation of the ns_sendmail API call

• We would like room administrators to be able to approve or deny room requests directly from their email client ("one-click approval"). So the email notice to a room administrator must contain a URL which, if visited, will approve the room request without the room administrator having to log in. An alternative URL in the same email message would allow the room admin to deny a reservation request. This mechanism should be reasonably secure, i.e., a user should not be able to approve his or her own request by doing some URL surgery.

  Hint: You can write a secret key into the reservations table at the time of the request and require that a one-click approval URL contain the secret key. Tcl doesn't contain a random number generator, though you can call randomRange, defined in our /home/nsadmin/modules/tcl/utilities.tcl file. Alternatively, you can simply use the integer returned by ns_time.

You now have a working system as envisioned by your clients. Congratulations.

Exercise 6: Making it Pay

If you're not doing this on an ArsDigita-maintained machine, you'll probably find it more trouble than it is worth to install the CyberCash software on your machine (painful), install our CyberCash interface from AOLserver (annoying), and get a merchant credit card account with CyberCash capability (takes 6 weeks and costs around $1000). You can still do the exercise, though, by using Eve Andersson's CyberCash emulator, available from http://www.arsdigita.com/free-tools/cybercash-emulator.txt.

Occasionally folks in Academia ask themselves "What is there that distinguishes us from McDonalds, Microsoft, and Oracle Corporation, aside from a lower growth rate and smaller revenues?" If the answer turns out to be "not much" then why not apply commercial logic to the conference room scheduler?

Assume that the admin reports show that the Boesky Room is in heavy demand. Let's make people pay to use the room. We'll bill their credit card numbers in real-time. Best of all: no refunds (even if the fee-based room has a room administrator and that person doesn't approve the request).

We're not kidding. Your code will be putting real transactions into the real banking system using CyberCash. If you set a $1000 price for a room and use your credit card to test your software, you will find a $1000 charge on your next statement. Ergo, you might prefer to set prices more in the range of 50 cents.

Here's the plan:

• Add a column to your data model so that a room can have an associated charge (a number; name the column fee unless you are passionately devoted to something else). Assume that we're only using US dollars so you don't need to record units.

  Remember that one of the beauties of Oracle is that you can add columns to tables and legacy software will continue to work. Visit the data modeling chapter of SQL for Web Nerds if you need to be reminded of the syntax of alter table.

• Alter the reservations table so that it has some of the ecommerce fields mentioned in http://www.arsdigita.com/books/panda/ecommerce.html, e.g., order_state, name_on_card, billing_zip_code.

• Augment /admin/reserve/room-edit.tcl so that the administrator can adjust the prices of various rooms and then add a small fee to one room (we recommend making this 0.25 or 0.50; remember that these are real credit cards and real money).

• Augment /reserve/new-2.tcl so that it will refuse to record a reservation for a room that has a non-NULL or non-0 fee. You'll be sending fee-based reservations into a separate ordering pipeline (see below) and you don't want clever nerds doing URL surgery to be able to bypass your billing system.

• Augment /reserve/new.tcl so that it mentions the fee for rooms that have one and links reservations for those over to http://yourservername/reserve/new-2-with-fee.tcl
• Augment /reserve/index.tcl so that it can display the following:
  • future rooms reserved for which a fee has been paid
  • old fee-based reservations
  • failed attempts to reserve fee-based rooms

• Build /reserve/new-2-with-fee.tcl so that it generates a reservation_id (for double-click protection) and presents a form asking for a credit card number, the name on the card, expiration date, and billing zip code. The form should target /reserve/new-2-with-fee-2.tcl

• Build /reserve/new-2-with-fee-2.tcl to:
  1. Open a transaction and take a lock on the reservations table.

  2. Check to see if there is already a row in the reservations table with the same reservation_id; if so, assume double click, abort the transaction (db_abort_transaction), ns_returnredirect to index.tcl page, and call return to terminate execution of the page.

  3. Insert a row in the reservations table with order_state of "confirmed". As explained in the "An Extra Layer of Transactions" section of http://www.arsdigita.com/books/panda/ecommerce.html, you want to make sure that you write something into your local database before going out to the credit card system and trying to bill someone's card.

  4. Release the lock (end the transaction).

  5. Bill credit card via CyberCash. Everyone in the class is using the same CyberCash account. CyberCash requires unique order IDs. So that you won't conflict with other students, you have to be absolutely sure that your order ID starts with "yourusername-" and then the reservation ID. You have two financial options. You can do an mauthonly with CyberCash, which will result in your credit limit being knocked down by the amount of the charge. No money will be withdrawn from your account. Or you can do the mauthonly and then a postauth to mark the transaction for settlement. In this case you'll find a charge on your next credit card bill from "ArsDigita, LLC" (we're using philg's personal merchant account; your money will be donated to charity or spent on dog treats).

     CyberCash is charging philg 20 cents per authorization so try not to do more than necessary to debug your pset.

  6. Update the row to reflect "authorized" or "failed".

  See http://www.cybercash.com/cybercash/merchants/docs/dev.pdf if you really want to understand the CyberCash system. If you just want to learn enough to get by, look at the code in order-2.tcl (from the open-source ArsDigita Shoppe package, available at http://www.arsdigita.com/free-tools/shoppe.html). Interesting lines in order-2.tcl include the following:

  # the auth step
  cc_send_to_server_21 "mauthonly" $args $cc_output
  
  # the mark for settlement step; only do this if you 
  # want the thrill of seeing charges on your bank statement
  cc_send_to_server_21 "postauth" $args $cc_output
  

  Hint: Cybercash expects amounts with format like this "USD 0.25"

• Modify /new.tcl and /new-2.tcl to prevent booking of rooms where there is already a reservation in any order_state except "failed".

• Build a financials directory /admin/reserve/money/ where you show lists of paid reservations and any problems, e.g., orders that were confirmed some time ago but didn't get pushed into "failed" or "authorized".

Congratulations. You're now an Official Web Entrepreneur (TM).

Exercise 7 (extra credit): Find a Venture Capitalist

Take the code that you wrote for this problem set. Give it a name that includes the neologism "collaborative" or "commerce". Find a venture capitalist to give you $6 million.

The Wide World of Oracle

We're going to shift gears now into a portion of the problem set designed to teach you more about Oracle and SQL.

Oraexercise 1: Concurrency and Isolation

Connect to Oracle in SQL*Plus and type "describe my_stocks" to make sure that your my_stocks table is still defined from problem set 1.

• start a second SQL*Plus session, connected as the same user as your first
• type "delete from my_stocks;" in Session 1
• type "select * from my_stocks;" in both sessions
• type "rollback;" in the Session 1

Oraexercise 2: The Importance of Commitment

• go back into SQL*Plus:

  SQL> create table foobar (
          the_key  integer primary key
  );
  SQL> insert into foobar (the_key) 
       values (1);
  
  1 row created.
  

  Leave this session open and do not type COMMIT
• build an AOLserver .tcl page that gets a database handle and then executes the same insert into foobar (the_key) values (1) statement
• go to a Web browser and request your AOLserver .tcl page
• watch the Web browser hang
• type "COMMIT;" into SQL*Plus
• look at the AOLserver error log

Repeat the above sequence but use ROLLBACK at the end in SQL*Plus instead of COMMIT.

The Narrow World of AOLserver

Imagine that you are a working Web developer and a client calls you to ask how much traffic the site you've built is getting. At the very least, you need the following skills:

• find your AOLserver's access log and load it into an Emacs buffer (hint: it should be at /home/nsadmin/log/yourservername.log). Generally we configure our AOLservers to roll the log at midnight so you're only looking at requests since early this morning.
• Use "m-x count-lines-page" to figure out how many hits there have been so far today.
• Go to the end of the buffer ("m->"). Grab a page from your server with a Web browser. Type "m-x revert-buffer" and make sure that the new request is logged (this way you know you're looking at your live access log).

Then the client calls upset because a development site is available for public access. Read the AOLserver administrator's guide at www.aolserver.com and then restrict access to URLs beginning with /foobar. Actually make a directory "foobar" under your server root and place a file in it. See if you can grab the file from a browser. (Note that AOLserver 3.0 will have you editing the perms database files and calling Tcl procs, while 2.3 has a fancy GUI interface for editing permissions.)

Mostly relevant for AOLserver 2.3: suppose that the client wants access to server admin pages, e.g., so that they can create new users. You don't want to give the client access to the nsadmin password, which you might share with other programmers for use on many servers. Create a new user called "myclient" in the "system" group so that they can have the same privileges as nsadmin.

Who Wrote This and When

This problem set was written by Philip Greenspun and Hal Abelson in February 1999 for MIT Course 6.916. It is copyright 1999 by them but may be reused provided credit is given to the original authors with a hyperlink to this document. (Updated August 29, 2000.)

It is permanently housed at http://philip.greenspun.com/teaching/psets/rooms/tcl/rooms.adp.

---

Maintainer: teadams@mit.edu