Modules/AzureDevOpsDsc.Common/Resources/Functions/Public/AzDoPipelinePermission/Set-AzDoPipelinePermission.ps1
|
Function Set-AzDoPipelinePermission { [CmdletBinding()] param ( [Parameter(Mandatory = $true)][string]$ProjectName, [Parameter(Mandatory = $true)][string]$PipelineName, [Parameter(Mandatory = $true)][string]$GroupName, [Parameter(Mandatory = $true)][bool]$isInherited, [Parameter()][HashTable[]]$Permissions, [Parameter()][HashTable]$LookupResult, [Parameter()][Ensure]$Ensure, [Parameter()][System.Management.Automation.SwitchParameter]$Force ) Write-Verbose "[Set-AzDoPipelinePermission] Started." $SecurityNamespace = Get-CacheItem -Key 'Build' -Type 'SecurityNamespaces' $Project = Get-CacheItem -Key $ProjectName -Type 'LiveProjects' if ((-not $SecurityNamespace) -or (-not $Project)) { Write-Error "[Set-AzDoPipelinePermission] Security namespace or project not found." -ErrorAction Continue return } # DescriptorACLList intentionally empty: 'merge=false' on the Set-AzDoPermission POST replaces the # ACL per-token, so there is no need to re-submit every other token's (pipeline's) ACL - same # bug/fix as Set-AzDoSecurityNamespacePermission.ps1. $serializeACLParams = @{ ReferenceACLs = $LookupResult.propertiesChanged DescriptorACLList = @() DescriptorMatchToken = ($LocalizedDataAzSerializationPatten.BuildPermission -f $Project.id) } $params = @{ OrganizationName = (Get-AzDoOrganizationName) SecurityNamespaceID = $SecurityNamespace.namespaceId SerializedACLs = ConvertTo-ACLHashtable @serializeACLParams ClearACEs = $true DifferenceACLs = $LookupResult.DifferenceACLs } Set-AzDoPermission @params } |