Copy from after create to after update

Question

Since all the old groups are deleted when a function is changed, we have created an after update for each function so that the user is added to the same groups as if it were an after create. As we have many functions, is it possible to create a script that copies all the "ifs" from the after create to an after update? Or is it possible to run an after update that queries all the after creates?

thank you

Answer 1

Hello,

You can use the below script. It should be execute in Windows PowerShell. When prompted, specify the credentials of the Adaxes service account. In the script:

• $serviceHost - the host name of the computer where Adaxes service is installed.
• $sourceRuleDN - the distinguished name (DN) of the business rule to copy actions/conditions from. For details on how to get an object DN, see https://adaxes.com/sdk/HowDoI.GetDnOfObject.
• $targetRuleDN - the distinguished name (DN) of the business rule to copy actions/conditions to.

[Reflection.Assembly]::LoadWithPartialName("Softerra.Adaxes.Adsi")

$serviceHost = "localhost"
$sourceRuleDN = "CN=After create user,CN=User,CN=Business Rules,CN=Configuration Objects,CN=Adaxes Configuration,CN=Adaxes" # TODO: modify me
$targetRuleDN = "CN=After update user,CN=User,CN=Business Rules,CN=Configuration Objects,CN=Adaxes Configuration,CN=Adaxes" # TODO: modify me

# Connect to the Adaxes service
$ns = New-Object "Softerra.Adaxes.Adsi.AdmNamespace"
$service = $ns.GetServiceDirectly($serviceHost)

# Prompt for credentials.
$credential = Get-Credential

$sourceRule = $service.OpenObject("Adaxes://$sourceRuleDN", $credential.UserName, $credential.GetNetworkCredential().Password, 0)
$targetRule = $service.OpenObject("Adaxes://$targetRuleDN", $credential.UserName, $credential.GetNetworkCredential().Password, 0)

# Copy actions and conditions
foreach ($set in $sourceRule.ConditionedActions)
{
    # Create a new set of actions and conditions
    $actionsAndConditions = $targetRule.ConditionedActions.Create()
    $actionsAndConditions.ConditionsLogicalOperation = 
        $set.ConditionsLogicalOperation
    $actionsAndConditions.SetInfo()

    # Copy conditions
    foreach ($condition in $set.Conditions)
    {
        $newCondition = $actionsAndConditions.Conditions.CreateEx($condition.Class)
        $newCondition.SetCondition($condition.GetCondition())
        $newCondition.SetInfo()
        $actionsAndConditions.Conditions.Add($newCondition)
    }

    # Copy actions
    foreach ($action in $set.Actions)
    {
        $newAction = $actionsAndConditions.Conditions.CreateEx($action.Class)
        $newAction.ExecutionOptions = $action.ExecutionOptions
        $actionObj = $action.GetAction()

        # 'add to group' -> 'remove from group'
        if ($actionObj.IsOperationOfType($null, "change membership") -and
            $actionObj.ActionType -eq "ADM_CHANGEGROUPMEMBERSHIPACTION_ADD")
        {
            $actionObj.ActionType = "ADM_CHANGEGROUPMEMBERSHIPACTION_REMOVE"
        }
        $newAction.SetAction($actionObj)
        $newAction.SetInfo()
        $actionsAndConditions.Actions.Add($newAction)
    }

    # Add the set to the custom command
    $targetRule.ConditionedActions.Add($actionsAndConditions)
}

Comments

Hello thank you for the code, but the code does not work. when we start the script, it deletes all the if. And now the actions in the if are changed to remove from group but it should rest add to group. thanks

---

Hello,

That is something that was present in the previous version of the script. There are only two options here:

1. Full replace of the actions/conditions in the target business rules (the way the script works).
2. Keep the existing actions/conditions in the target rules and add the ones from the source rule. If this is what you need, just remove line $targetRule.ConditionedActions.Clear() from the script. Keep in Mind that each time the script runs, all the actions/conditions will be copied and that is not something you can avoid.

---

Hello,

1. We agree with this. However, we now have a after create in the $sourceRuleDN with 3 if. these 3 if should be copied into 3 after update with the script. when i run the script, it deletes all the if in the $sourceRuleDN and copies nothing into the three $targetRuleDNs.

2. if the script would work, it changes the actions in the if from add to group to remove from group. however, add to group should remain add to group.

Thank you

---

Hello,

As per our tests, the script works exactly as it should for option one. The source rule remains untouched. Please, make sure to use the last version of the script and change nothing in it except for the variable values.

---

Thank you very much! I have found the error. I have about 60 positions in the $targetRuleDNs and one of them was the same as $sourceRuleDN. So everything was deleted and then copied... Which is also correct :D Thanks a lot!