Devolutions.Server

2021.5.0

Private/Utils/GetPermissionSummary.ps1

function GetPermissionSummary {
    Param (
        [Parameter(Mandatory)]
        [PSCustomObject]$entry,
        [string]$VaultName,
        [int]$Depth
    )
    $results = @()
    foreach ($sec in $entry.security) {

        #some special objects are returned, only handle RBAC permissions
        if ($sec.ViewRoles -is [system.array]) {

            $results += [PSCustomObject]@{
                Vault        = $vaultName
                Depth        = $Depth
                Entry        = $entry.Name
                OverrideType = [Devolutions.RemoteDesktopManager.SecurityRoleOverride]::Default
                Right        = [Devolutions.RemoteDesktopManager.SecurityRoleRight]::View
                Principals   = [string]::Join(', ', $sec.ViewRoles)
            }

        }

        foreach ($perm in $sec.Permissions) {

            #some special objects are returned, only handle RBAC permissions
            if ($perm.roles -is [system.array]) {

                $results += [PSCustomObject]@{
                    Vault        = $vaultName
                    Depth        = $Depth
                    Entry        = $entry.Name
                    OverrideType = [enum]::ToObject([Devolutions.RemoteDesktopManager.SecurityRoleOverride], $perm.override)
                    Right        = [enum]::ToObject([Devolutions.RemoteDesktopManager.SecurityRoleRight], $perm.right)
                    Principals   = [string]::Join(', ', $perm.roles)
                }
            }
        }
    }

    return $results
}