Devolutions.Server

2022.3.13.0

Private/Utils/GetPermissionSummary.ps1

function GetPermissionSummary {
    Param (
        [Parameter(Mandatory)]
        [PSCustomObject]$entry,
        [string]$VaultName,
        [int]$Depth
    )
    $results = @()
    foreach ($sec in $entry.security) {
    
        #some special objects are returned, only handle RBAC permissions
        if ($sec.ViewRoles -is [system.array]) {
    
            $results += [PSCustomObject]@{
                Vault        = $vaultName
                Depth        = $Depth
                Path         = $entry.group
                Entry        = $entry.Name
                OverrideType = [SecurityRoleOverride]::Default
                Right        = [SecurityRoleRight]::View
                Principals   = [string]::Join(', ', $sec.ViewRoles)
            }
    
        }
    
        foreach ($perm in $sec.Permissions) {
    
            #some special objects are returned, only handle RBAC permissions
            if ($perm.roles -is [system.array]) {
                $results += [PSCustomObject]@{
                    Vault        = $vaultName
                    Depth        = $Depth
                    Path         = $entry.group
                    Entry        = $entry.Name
                    OverrideType = $perm.override ? ([enum]::ToObject([SecurityRoleOverride], $perm.override)) : $null     
                    Right        = $perm.right ? ([enum]::ToObject([SecurityRoleRight], $perm.right)) : $null   
                    Principals   = [string]::Join(', ', $perm.roles)
                }
            }
        }
    }
    
    return $results
}