Private/RoleAssignmentOperations.ps1
|
<#
SAMPLE CODE NOTICE THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY. THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER. NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO. #> function New-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleDefinitionId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } 'EnvironmentGroupScope' { "/tenants/$TenantId/environmentGroups/$EnvironmentGroupId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments" } default { "authorization/roleAssignments" } } $query = "api-version=1" # Build the request body $body = @{ principalObjectId = $PrincipalObjectId principalType = $PrincipalType.ToString() scope = $scope roleDefinitionId = $RoleDefinitionId } | ConvertTo-Json Write-Verbose "Creating role assignment at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } function Get-RoleAssignments { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory=$false)] [bool]$IncludeParentScopes = $false, [Parameter(Mandatory=$false)] [bool]$ExpandSecurityGroups = $false, [Parameter(Mandatory=$false)] [bool]$ExpandEnvironmentGroups = $false, [Parameter(Mandatory=$false)] [bool]$IncludeNestedScopes = $false, [Parameter(Mandatory=$false)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory=$false)] [string]$PrincipalObjectId, [Parameter(Mandatory=$false)] [string]$Permission, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/listRoleAssignments" } default { "authorization/listRoleAssignments" } } $query = "api-version=1" # Build the request body $bodyHash = @{ Scope = $scope IncludeParentScopes = $IncludeParentScopes ExpandSecurityGroups = $ExpandSecurityGroups ExpandEnvironmentGroups = $ExpandEnvironmentGroups IncludeNestedScopes = $IncludeNestedScopes } if ($PSBoundParameters.ContainsKey('PrincipalType')) { $bodyHash['PrincipalType'] = $PrincipalType.ToString() } if (-not [string]::IsNullOrWhiteSpace($PrincipalObjectId)) { $bodyHash['PrincipalObjectId'] = $PrincipalObjectId } if (-not [string]::IsNullOrWhiteSpace($Permission)) { $bodyHash['Permission'] = $Permission } $body = $bodyHash | ConvertTo-Json Write-Verbose "Getting role assignments at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the initial request (POST with body) $httpMethod = [System.Net.Http.HttpMethod]::Post $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { return $null } $response = $contentString | ConvertFrom-Json $allResults = @() # Collect results from first page if ($null -ne $response.value) { $allResults += $response.value } # Handle OData pagination - use same HTTP method as original request while ($null -ne $response.'@odata.nextLink') { $nextLink = $response.'@odata.nextLink' Write-Verbose "Fetching next page: $nextLink" $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $nextLink -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { break } $response = $contentString | ConvertFrom-Json if ($null -ne $response.value) { $allResults += $response.value } } return $allResults } function Remove-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleAssignmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the path based on parameter set $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments/$RoleAssignmentId" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments/$RoleAssignmentId" } default { "authorization/roleAssignments/$RoleAssignmentId" } } $query = "api-version=1" Write-Verbose "Removing role assignment at path: $path" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -HttpMethod ([System.Net.Http.HttpMethod]::Delete) } # 200 = deleted, 404 = not found if ($result.StatusCode -eq 200) { return $true } elseif ($result.StatusCode -eq 404) { return $false } Assert-Result -Result $result return $false } function Test-PrincipalPermission { [CmdletBinding()] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string[]]$Permissions, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) $scope = "/tenants/$TenantId/environments/$EnvironmentId" $path = "authorization/environments/$EnvironmentId/checkPrincipalPermissionForScope" $query = "api-version=1" # Build the request body $body = @{ PrincipalObjectId = $PrincipalObjectId PrincipalType = $PrincipalType.ToString() Permissions = $Permissions Scope = $scope } | ConvertTo-Json Write-Verbose "Checking permissions at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } # SIG # Begin signature block # MIInRQYJKoZIhvcNAQcCoIInNjCCJzICAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCyfmAKSD6lEwBt # AVwfK899v1bOy2m5P+jLtvPEusBEDaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnhMIIZ3QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK # KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIElsycnK # 1OtEs72W6SDi8lNaTAYOUPXdZwPAXsbxalZIMEIGCisGAQQBgjcCAQwxNDAyoBSA # EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w # DQYJKoZIhvcNAQEBBQAEggEAtAEbveK/gvUQLyC9hghGGsKYQtyFDDOWZeME/UpA # tlOm/G/HJlBcKjnxPzHQ7tKsurwCFs0YpSy7FN1jSlyFkx9KuRCoiq6yGa34LcSY # 2uFPy38QLZeO5E6SQN8F9WcFqcyAd2UziT0Po3BcySalTMEoHJcgjKJE3Dq52csb # QLYFlK/POUfaOsU6MIucA/TO7DeZxLvdPvnRSUXl7glGYp3ae5+oi+1VwcVi71BP # +h+OK5Hxu7gwK6mmMk3KOeQ3UEnPmJv1yqTObyNHlzfK/E7RpJHG2LNZVsHJ44ni # wlx+EUDeuYCBJUwwEXUigRCaiHwpJThR+BryVR0ZLb2kEqGCF5MwghePBgorBgEE # AYI3AwMBMYIXfzCCF3sGCSqGSIb3DQEHAqCCF2wwghdoAgEDMQ8wDQYJYIZIAWUD # BAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoD # ATAxMA0GCWCGSAFlAwQCAQUABCDIOyOF01kv1LtjHCPj5u7FwGwrU0pt6TjU4p50 # 0cU/kQIGaql+tX7TGBIyMDI2MDkyMzE5NDA0NC42NVowBIACAfSggdGkgc4wgcsx # CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt # b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1p # Y3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNT # IEVTTjpBMDAwLTA1RTAtRDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3Rh # bXAgU2VydmljZaCCEeowggcgMIIFCKADAgECAhMzAAACK7sAUP9NO5qhAAEAAAIr # MA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4X # DTI2MDIxOTE5NDAxMVoXDTI3MDUxNzE5NDAxMVowgcsxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh # IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBMDAwLTA1RTAt # RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIw # DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJfeaLo4PezJSpCbhCqCSso9tywr # 9DHd9hy0vz5UzW45jduiiLkbHBq5OBB/okUchNOjFLuCOoqUrw4UvMvpROXSPEQr # m3oO45yAld2+62KahOU5LQLeTIhNcEBeiP+CnqFFH3PpZGKnUq2SKVvd0lcKNCpP # 0/YK66Ov5XPyv5n6MOXT2OL+Jz/gbfiveZXCOz/8afH0+7fVXytcWJw2IDPGm5tr # Clt3ymp/OVZPa+cbeQX2XoyJERu8ndcctTAdCyHS39OtIXH+z/IKqklZgnqgKUbv # S2+wUfRpE/zAHhw/8IVrYgu+TbqLc5wkGX6moqMdNIHL2a/BM8QOWfNyjQ23xHql # I9NdmAGyxweGgp8LRZCY7NjaR5dsCZFNxkzJfPm/8AluagjTLTsFrO+3k2Rd10b1 # MStBbC2wXIgqsSUOBZ8d4KhO7XC7ZyIPd0rvbPdxraDOgQPFPaP0FchQpqJPNN1A # 9GwAxo7d1TTNobAwyXC1InIOHXhgSBmhS7m9Lwy6Ayp2s2OmHIvrnIqGOkBZuFiQ # gc7/S5mO73m0/zNk2pchGHi119Yck8BOf2v5zGTK6HbHRUt1/HWWYr1fc2MfQ22A # CzkkH/A6WTK653GYVN9ZXJGsvfuKyk5nxo8AWC/JHpw1OQamQWjfklGNyI2ZmJTi # pP1S3L5XmC50WTWPAgMBAAGjggFJMIIBRTAdBgNVHQ4EFgQUPhaO5BNQlu1t3eOa # 9mS7QVnZ5TYwHwYDVR0jBBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0f # BFgwVjBUoFKgUIZOaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwv # TWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsG # AQUFBwEBBGAwXjBcBggrBgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29t # L3BraW9wcy9jZXJ0cy9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAx # MCgxKS5jcnQwDAYDVR0TAQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAO # BgNVHQ8BAf8EBAMCB4AwDQYJKoZIhvcNAQELBQADggIBAM78IqxyIQzySvV+ofhO # V9ProQ2hOPFfDzXSnISrQ92uAvB+BPfH7WDPsJAe1R16+oxDmofIMuGbqlP3XUJi # QY37qD4xTt8xhOvp3dLGJ4nAEihaR9HiDtKK0bMwpTjrkoRh6N912hSCi8L/FxGl # oAs7mnf8DbjwHKEmIy20FA0O2xP8doIXBEUJRFvL9/xzWSTLwXzGQJcXP78y1nl3 # WVYWPA4jaB5kdar1eKEM6B57mdLaSijlXqfxcbbbRRN69V/6mCakgfvVcoNUhhMY # ZkmzrI+V8nZperDUwTg1HqiQ2xjc/UzfUfoMxhF8kY0E16nn3mRcaHdjMDdwKLKD # 6OYnnyH99O+OeAim5QV84OkOMXHSJzVigsA3GEIXdGFL2pgzsrjQ0SEqyFi5oCQg # bZcEpiKDev/T9vSyO+MHCznkBiicybcDypxf/qT1V9zSa/122ice5YZ8DZv6oTaq # kKeHMZt0MeruI5JkTDTWc26kAx/VzjWT0ihNDbPeLDrDhlmgs7KDhMoxunWSulPi # 2uKn/LfQK/mSHKoIM2ppdCkGQ5g43wuC2hDdqZU5fuLHmN2ufH+9TFNRKKBe+tZ0 # vtSTySmZLTO2jZOjLtpPmgHMJO9+P2In8E38TW+EUGSEkK9ns9W+wxKdNOaTHYVq # XaVWTO24Ajjh8P+7Isl1oxBLMIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAA # AAAAFTANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh # c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD # b3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUg # QXV0aG9yaXR5IDIwMTAwHhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8 # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1N # aWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQAD # ggIPADCCAgoCggIBAOThpkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2 # AX9sSuDivbk+F2Az/1xPx2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpS # g0S3po5GawcU88V29YZQ3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2r # rPY2vjUmZNqYO7oaezOtgFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k # 45GPsjksUZzpcGkNyjYtcI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSu # eik3rMvrg0XnRm7KMtXAhjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09 # /SDPc31BmkZ1zcRfNN0Sidb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR # 6L8FA6PRc6ZNN3SUHDSCD/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxC # aC4Q6oRRRuLRvWoYWmEBc8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaD # IV1fMHSRlJTYuVD5C4lh8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMUR # HXLvjflSxIUXk8A8FdsaN8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMB # AAGjggHdMIIB2TASBgkrBgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQq # p1L+ZMSavoKRPEY1Kc8Q/y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ # 6XIwXAYDVR0gBFUwUzBRBgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0 # cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRt # MBMGA1UdJQQMMAoGCCsGAQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBB # MAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP # 6KJcYmjRPZSQW9fOmhjEMFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWlj # cm9zb2Z0LmNvbS9wa2kvY3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2 # LTIzLmNybDBaBggrBgEFBQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cu # bWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMu # Y3J0MA0GCSqGSIb3DQEBCwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2 # Pk5HZHixBpOXPTEztTnXwnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03d # mLq2HnjYNi6cqYJWAAOwBb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1Tk # eFN1JFe53Z/zjj3G82jfZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kp # icO8F7BUhUKz/AyeixmJ5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKp # W99Jo3QMvOyRgNI95ko+ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrY # UP4KWN1APMdUbZ1jdEgssU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QB # jloZkWsNn6Qo3GcZKCS6OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkB # RH58oWFsc/4Ku+xBZj1p/cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0V # iY1w/ue10CgaiQuPNtq6TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq # 0Z4+7X6gMTN9vMvpe784cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1V # M1izoXBm8qGCA00wggI1AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEG # A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj # cm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBP # cGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046QTAwMC0wNUUwLUQ5 # NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAH # BgUrDgMCGgMVAAmsP3TKQemj/QAZvuWbC+wK2pE5oIGDMIGApH4wfDELMAkGA1UE # BhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAc # BgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0 # IFRpbWUtU3RhbXAgUENBIDIwMTAwDQYJKoZIhvcNAQELBQACBQDuXofyMCIYDzIw # MjYwOTIzMTcxNjM0WhgPMjAyNjA5MjQxNzE2MzRaMHQwOgYKKwYBBAGEWQoEATEs # MCowCgIFAO5eh/ICAQAwBwIBAAICFQwwBwIBAAICElowCgIFAO5f2XICAQAwNgYK # KwYBBAGEWQoEAjEoMCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQAC # AwGGoDANBgkqhkiG9w0BAQsFAAOCAQEAOBoc+AmKfxf78jo/67k4uZ1Y4+FlVzHN # AI9CRQlA/Zen/UEd1LGmDc6iLDan70O+A4rrgqFiPvb0iv4xE0pAA9VthLIzn0Y3 # JfM6C+uMgZ0lKAoG4PgszNb96e4hEXG7USE3biEvJP2uNShWowI5YWQSg4ZtNwD5 # s3ev7syQIcKlcuNluPAVYcmHf2HHEu0kWNs3WUtmKd3nnCWi7vxxnenqZbUjbtNg # sIwUvqz4rFeXfjBx541DNdWhddwJepXbrzRFnCGRmtrBM9OZSvWMSlldjKrGfP6g # MarZhkr1CuWnaRRBMAai2ZBYvIzfx+VP+q2aRqtGWg4EqtgAPmznIjGCBA0wggQJ # AgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAk # BgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACK7sAUP9N # O5qhAAEAAAIrMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZI # hvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIGqkAh4qiduhgdT6E9nJKAUYqaMw4tzD # owehfnN//HvAMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgcg4j9D+QV+1g # D4zY5j7UHHdqMEPr9YMC09Pa8WS/blIwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T # dGFtcCBQQ0EgMjAxMAITMwAAAiu7AFD/TTuaoQABAAACKzAiBCDPu0UP3gfvd1iG # S022ZcyWcr7L5hjSE2Muc+4eAnGovTANBgkqhkiG9w0BAQsFAASCAgBH6KGdXK+h # aMFt+INRNp2elJdxV9lLrQ994sjwsc+qKfyfKR/Lx6oPTONzY4/JI4owovRlggPB # dJWi2kB+5x41v4vn64k1d/EbmjyfWl2nyXYkQ9YUGzCLISzkWaQ/K6Xg/Z7S456g # QKt1uZMYs6AvX7Maz7ZgDsIcnUyQFgdx4WrRX4HeQkUqr25ED0Bl4n9SGUxn5eNA # Kge5nvBhYEcLwzZPnkyAVa/ujiG/m7LTaq81s9Pujp+hUkK8IeswlC5W90gXvS4S # LeXJgzhvTlockYm17/umpAg+U8EYSizbiB+RkMdqKap0ZvSP6d7zhxw/Re3uk3Xu # 6BqVc/kxbZtYj1hOX+LqN9lBQ9pFACN7Yqo9cFZ0AS4NCm06000cMcqpP2xWoFhv # PlLSEzetpN8KVubeouINP9TUnP9e4/1EpeS5zzjp9zjONkvbNJ374T7jtnAvNmhZ # tj3PNbEqWJ3mdtnVvvloVpO+dMYBSYqKMZWex1g1wpmZluvM3wd2F0IB6lkTeSTB # znoqGYepWhJ6rliKLTSYD13OBF5wxohLUE8QYCxDrEZZ4gU9eSVa2R8U4rDencrc # CW4DKJIf3fcoWL7t8/A5Ozzf84fHtjhFoH1WFbJb39dxEge/gSaj6i6E0NSeQtMw # r4hqEEa8Pq1HrX2lDhcy/gKP1bt4Hyz0pQ== # SIG # End signature block |