public static void SaveRole(List <string> anOperations, string aRole, string aStoreName, List <string> allTreeOperations)
{
try
{
//Make sure all operations exist in Azman
List <string> allOperations = AzManReader.ReadOperations(aStoreName);
List <string> excludedOperations = new List <string>();
if (allOperations != null)
{
List <string> addOperations = new List <string>();
foreach (string operation in anOperations)
{
if (allOperations.Contains(operation))
{
addOperations.Add(operation);
}
}
foreach (string operation in allOperations)
{
if (!allTreeOperations.Contains(operation))
{
excludedOperations.Add(operation);
}
}
//read OK and Cancel operations
List <string> oKAndCancelOperations = AzManReader.ReadOkCancelAndCloseOperations(aStoreName);
if (oKAndCancelOperations != null)
{
foreach (string operation in allOperations)
{
if (oKAndCancelOperations.Contains(operation))
{
excludedOperations.Remove(operation);
}
}
addOperations.AddRange(excludedOperations);
//save down the operations into the role in AuthStore
AzAuthorizationStore store = new AzAuthorizationStore();
string storeLocation = AzManReader.GetAuthStoreLocation(aStoreName);
string roleName = "_" + aRole;
//4 = AZ_AZSTORE_FLAG_BATCH_UPDATE
store.Initialize(4, storeLocation, null);
foreach (IAzApplication3 application in store.Applications)
{
foreach (IAzRoleDefinition role in application.RoleDefinitions)
{
if (role.Name != roleName)
{
continue;
}
//remove all existing operations in the role
foreach (string operation in role.Operations)
{
role.DeleteOperation(operation);
}
//Role needs to be submitted after deleting operations otherwise Azman freaks out
role.Submit();
//Save all selected operations to the role
foreach (string operationString in addOperations)
{
role.AddOperation(operationString);
}
foreach (string oKOrCancelOperation in oKAndCancelOperations)
{
role.AddOperation(oKOrCancelOperation);
}
//Submit role so changes are saved
role.Submit();
MessageBox.Show("Setting for " + aRole + " has been saved.", "Role Settings Saved", MessageBoxButtons.OK);
}
//Submit everything just to be sure
application.Submit();
}
store.Submit();
}
}
}
catch (COMException ce)
{
MessageBox.Show(null, ce.Message + "\n" + ce.ErrorCode.ToString(), "COMException occurred");
}
catch (Exception ex)
{
if (ex is UnauthorizedAccessException)
{
MessageBox.Show("Access denied to " + aStoreName + "AuthStore.xml. Maybe it is read-only?", "", MessageBoxButtons.OK);
}
else
{
MessageBox.Show("Failed to save configuration", "", MessageBoxButtons.OK);
}
}
}
private static void MergeStores(string fromStoreLocation, string toStoreLocation)
{
LogEntry entry = new LogEntry();
entry.Severity = TraceEventType.Verbose;
entry.Priority = -1;
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Merging authorization stores.\nFrom Store = \"{0}\"\nTo Store = \"{1}\"...", fromStoreLocation, toStoreLocation);
Logger.Write(entry);
}
try
{
AzAuthorizationStore fromStore = new AzAuthorizationStore();
fromStore.Initialize(0, fromStoreLocation, null);
AzAuthorizationStore toStore = new AzAuthorizationStore();
toStore.Initialize(AZ_AZSTORE_FLAG_BATCH_UPDATE, toStoreLocation, null);
foreach (IAzApplication3 fromApplication in fromStore.Applications)
{
IAzApplication3 toApplication = (IAzApplication3)((IAzAuthorizationStore3)toStore).OpenApplication2(fromApplication.Name, null);
var operationsDictionary = new Dictionary <string, IAzOperation>();
int nextOperationId = 0;
foreach (IAzOperation toOperation in toApplication.Operations)
{
operationsDictionary.Add(toOperation.Name, toOperation);
nextOperationId = Math.Max(nextOperationId, toOperation.OperationID);
}
foreach (IAzOperation fromOperation in fromApplication.Operations)
{
IAzOperation toOperation = null;
if (operationsDictionary.ContainsKey(fromOperation.Name))
{
toOperation = operationsDictionary[fromOperation.Name];
}
else
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding new Operation \"{0}\"...", fromOperation.Name);
Logger.Write(entry);
}
toOperation = toApplication.CreateOperation(fromOperation.Name);
nextOperationId++;
toOperation.OperationID = nextOperationId;
}
toOperation.Description = fromOperation.Description;
toOperation.Submit();
}
var tasksDictionary = new Dictionary <string, IAzTask>();
foreach (IAzTask toTask in toApplication.Tasks)
{
tasksDictionary.Add(toTask.Name, toTask);
}
foreach (IAzTask fromTask in fromApplication.Tasks)
{
IAzTask toTask = null;
if (tasksDictionary.ContainsKey(fromTask.Name))
{
toTask = tasksDictionary[fromTask.Name];
}
else
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding new Task \"{0}\"...", fromTask.Name);
Logger.Write(entry);
}
toTask = toApplication.CreateTask(fromTask.Name);
}
toTask.IsRoleDefinition = fromTask.IsRoleDefinition;
toTask.Description = fromTask.Description;
foreach (string taskOperation in fromTask.Operations)
{
if (!((object[])toTask.Operations).Contains(taskOperation))
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding Operation \"{0}\" to Task \"{1}\"...", taskOperation, toTask.Name);
Logger.Write(entry);
}
toTask.AddOperation(taskOperation);
}
}
toTask.Submit();
}
var rolesDictionary = new Dictionary <string, IAzRoleDefinition>();
foreach (IAzRoleDefinition toRole in toApplication.RoleDefinitions)
{
rolesDictionary.Add(toRole.Name, toRole);
}
foreach (IAzRoleDefinition fromRole in fromApplication.RoleDefinitions)
{
IAzRoleDefinition toRole = null;
if (rolesDictionary.ContainsKey(fromRole.Name))
{
toRole = rolesDictionary[fromRole.Name];
}
else
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding new Role Definition \"{0}\"...", fromRole.Name);
Logger.Write(entry);
}
toRole = toApplication.CreateRoleDefinition(fromRole.Name);
}
toRole.Description = toRole.Description;
foreach (string roleOperation in fromRole.Operations)
{
if (!((object[])toRole.Operations).Contains(roleOperation))
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding Operation \"{0}\" to Role Definition \"{1}\"...", roleOperation, toRole.Name);
Logger.Write(entry);
}
toRole.AddOperation(roleOperation);
}
}
foreach (string roleTask in fromRole.Tasks)
{
if (!((object[])toRole.Tasks).Contains(roleTask))
{
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Adding Task \"{0}\" to Role Definition \"{1}\"...", roleTask, toRole.Name);
Logger.Write(entry);
}
toRole.AddTask(roleTask);
}
}
toRole.Submit();
}
}
if (Logger.ShouldLog(entry))
{
entry.Message = string.Format("Submitting changes...");
Logger.Write(entry);
}
toStore.Submit();
}
catch (Exception ex)
{
AuthorizationException authException = new AuthorizationException(string.Format("Failed to merge authorization stores.\nFrom Store = \"{0}\"\nTo Store = \"{1}\"\n", fromStoreLocation, toStoreLocation), ex);
entry.Severity = TraceEventType.Error;
if (Logger.ShouldLog(entry))
{
entry.Message = authException.ToString();
Logger.Write(entry);
}
throw authException;
}
}