Private/RoleAssignmentOperations.ps1
|
<#
SAMPLE CODE NOTICE THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY. THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER. NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO. #> function New-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleDefinitionId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } 'EnvironmentGroupScope' { "/tenants/$TenantId/environmentGroups/$EnvironmentGroupId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments" } default { "authorization/roleAssignments" } } $query = "api-version=1" # Build the request body $body = @{ principalObjectId = $PrincipalObjectId principalType = $PrincipalType.ToString() scope = $scope roleDefinitionId = $RoleDefinitionId } | ConvertTo-Json Write-Verbose "Creating role assignment at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } function Get-RoleAssignments { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory=$false)] [bool]$IncludeParentScopes = $false, [Parameter(Mandatory=$false)] [bool]$ExpandSecurityGroups = $false, [Parameter(Mandatory=$false)] [bool]$ExpandEnvironmentGroups = $false, [Parameter(Mandatory=$false)] [bool]$IncludeNestedScopes = $false, [Parameter(Mandatory=$false)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory=$false)] [string]$PrincipalObjectId, [Parameter(Mandatory=$false)] [string]$Permission, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/listRoleAssignments" } default { "authorization/listRoleAssignments" } } $query = "api-version=1" # Build the request body $bodyHash = @{ Scope = $scope IncludeParentScopes = $IncludeParentScopes ExpandSecurityGroups = $ExpandSecurityGroups ExpandEnvironmentGroups = $ExpandEnvironmentGroups IncludeNestedScopes = $IncludeNestedScopes } if ($PSBoundParameters.ContainsKey('PrincipalType')) { $bodyHash['PrincipalType'] = $PrincipalType.ToString() } if (-not [string]::IsNullOrWhiteSpace($PrincipalObjectId)) { $bodyHash['PrincipalObjectId'] = $PrincipalObjectId } if (-not [string]::IsNullOrWhiteSpace($Permission)) { $bodyHash['Permission'] = $Permission } $body = $bodyHash | ConvertTo-Json Write-Verbose "Getting role assignments at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the initial request (POST with body) $httpMethod = [System.Net.Http.HttpMethod]::Post $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { return $null } $response = $contentString | ConvertFrom-Json $allResults = @() # Collect results from first page if ($null -ne $response.value) { $allResults += $response.value } # Handle OData pagination - use same HTTP method as original request while ($null -ne $response.'@odata.nextLink') { $nextLink = $response.'@odata.nextLink' Write-Verbose "Fetching next page: $nextLink" $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $nextLink -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { break } $response = $contentString | ConvertFrom-Json if ($null -ne $response.value) { $allResults += $response.value } } return $allResults } function Remove-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleAssignmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the path based on parameter set $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments/$RoleAssignmentId" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments/$RoleAssignmentId" } default { "authorization/roleAssignments/$RoleAssignmentId" } } $query = "api-version=1" Write-Verbose "Removing role assignment at path: $path" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -HttpMethod ([System.Net.Http.HttpMethod]::Delete) } # 200 = deleted, 404 = not found if ($result.StatusCode -eq 200) { return $true } elseif ($result.StatusCode -eq 404) { return $false } Assert-Result -Result $result return $false } function Test-PrincipalPermission { [CmdletBinding()] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string[]]$Permissions, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) $scope = "/tenants/$TenantId/environments/$EnvironmentId" $path = "authorization/environments/$EnvironmentId/checkPrincipalPermissionForScope" $query = "api-version=1" # Build the request body $body = @{ PrincipalObjectId = $PrincipalObjectId PrincipalType = $PrincipalType.ToString() Permissions = $Permissions Scope = $scope } | ConvertTo-Json Write-Verbose "Checking permissions at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } # SIG # Begin signature block # MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCyfmAKSD6lEwBt # AVwfK899v1bOy2m5P+jLtvPEusBEDaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK # KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIElsycnK # 1OtEs72W6SDi8lNaTAYOUPXdZwPAXsbxalZIMEIGCisGAQQBgjcCAQwxNDAyoBSA # EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w # DQYJKoZIhvcNAQEBBQAEggEAtAEbveK/gvUQLyC9hghGGsKYQtyFDDOWZeME/UpA # tlOm/G/HJlBcKjnxPzHQ7tKsurwCFs0YpSy7FN1jSlyFkx9KuRCoiq6yGa34LcSY # 2uFPy38QLZeO5E6SQN8F9WcFqcyAd2UziT0Po3BcySalTMEoHJcgjKJE3Dq52csb # QLYFlK/POUfaOsU6MIucA/TO7DeZxLvdPvnRSUXl7glGYp3ae5+oi+1VwcVi71BP # +h+OK5Hxu7gwK6mmMk3KOeQ3UEnPmJv1yqTObyNHlzfK/E7RpJHG2LNZVsHJ44ni # wlx+EUDeuYCBJUwwEXUigRCaiHwpJThR+BryVR0ZLb2kEqGCF5cwgheTBgorBgEE # AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD # BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD # ATAxMA0GCWCGSAFlAwQCAQUABCDIOyOF01kv1LtjHCPj5u7FwGwrU0pt6TjU4p50 # 0cU/kQIGamy1bb07GBMyMDI2MDgwNzE2MTEzMi4zMzVaMASAAgH0oIHRpIHOMIHL # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN # aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT # UyBFU046OTYwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiY1tD5nQ5P2HwABAAAC # JjANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe # Fw0yNjAyMTkxOTQwMDJaFw0yNzA1MTcxOTQwMDJaMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTYwMC0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC//w+ZZIL5RFFpVI8D3ZyuNu8I # zcAEOD30OLYjh337rXjcrIlOSzpJc4ZeUxEyli6x6F6zm4NR8dbPb9diDp/hOUzH # WGxiA1Z3RXKBb/4F/ojyvN43SEGWqSfVc3I3BlsYT35ecVAJ9kVf90YOv29tFjJB # BZkYvrT/DwwyRLscOyP4p+9/lyJjD+ULs3YXBhVrfZ+MbQB+BYKLqRvBKbj/wR9a # kNrMxQINoGaD5jZO/N/nSsmG2P1zv/cv4gSoMBnWeQIBkjd2I5w1DeXupp2vSiNm # R5sA2ZkBK3yiQWaJvRxODlkfiyHk9Mkk/TrYTjmjPCbhe+uqhHNRy8UlbOvWsCq0 # tRtUykHv39DgqAfJNrE8OSt835rBzDprrcAhwmgfhoVi4AKeqwikY0nUa48K0Qy8 # 0XT4fiEA3ExEZNaRFo9Nq/GwbfgqKqGmc9xhKuRFcjtua4KHZvnAvpWgEFSOCkov # Xs/BcLnkEHM9xZ8iUag5CyhNqXYYE/z0pcXdYaNIkQ68EWmuvLm7g9oofV2vOm5G # VNoghnkWG6nGPo/JwEgmA9oSS0EfvFRMWPA/gpSvF3shArKHnaEpVSSi3DNbyiuY # iEs9Ko0IkZc8xKFeQRaqGRxrB+2r/7B3X81Tps99KhFwg+wD87od22F2MUg1x7tw # t3gaVnFk0IZIwUPCGwIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFF3hn9fYJN2Y/Z9L # VbBPIxAzXHsQMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud # HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr # BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv # bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw # MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw # DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQA2Ux0tr9sYCjsq0FRy # iVpx15OurNXv6Qk7iX+ArVPlz3w4tqjcTNm1dt3tTua2wJMpJhPH8n7UXhmT98d5 # Du44Ll4adnse4SQfVg3QL6aRkXHnJUn8y9iftB/Py22n9xnwPFfj3QlDOSgLuHle # u97U0iH2ZaluYabWXJihdiYpK8cPHFlqZOAiot0+GD8dP+RMuvpxt/F2LmYelpoZ # wriiFOUmlxEUV7xJHyZZlDquskeyuq01DTv91N4qM8cfPPhl/2pc4HeMf/nd2Hou # ifJbDQFNd4WPhLzn0Sy3u1Zh3+S3tjQdqN+dyw60RaV+RXCoOLgFZ3MAg/GoDl+f # vb5hy/1a71ctX8wEad1Pf6def2pqfl3wFc++hkF8DXXTZofJN4YVaN3InwbAGQDD # kNK4lqecCixxmSKwidPynGeE5OtvNoK1pkLsm/i8F1RjGczZ/kSF2VDkqG866iQ+ # jVbGOQ6Du3eyyFcFKZoDJ4B5mEAS9aT2SKqllLeybOboH6r67siR5B/2Hnu7+KYu # YZy0BEadtA6ngG4cnSR9JsrkhhsKmb11ujqwgJyNx92MsoGGwNgN1aI0QID8CsjC # FwpfmMzlA44xHKYv3hmjxeqBS4uU5rQeiAnVgpJeaVGKm/lzPDtnppGV+7XhRp5b # 1ZxT/Z7Xxc+I7H7/jCtQDZoaZTCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA # AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX # 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q # UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d # q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN # pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k # rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d # Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS # Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8 # QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm # gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF # ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID # AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU # KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1 # GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0 # bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA # QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL # j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p # Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz # LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU # tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN # 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU # 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5 # KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy # qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6 # 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE # AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp # AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd # FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb # atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd # VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg # T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjk2MDAtMDVFMC1E # OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw # BwYFKw4DAhoDFQCi/fMxFtkqr7XMXdsRyWU0lSKHZ6CBgzCBgKR+MHwxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m # dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7iBtfTAiGA8y # MDI2MDgwNzE0NDMwOVoYDzIwMjYwODA4MTQ0MzA5WjB3MD0GCisGAQQBhFkKBAEx # LzAtMAoCBQDuIG19AgEAMAoCAQACAiV6AgH/MAcCAQACAhLYMAoCBQDuIb79AgEA # MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI # AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBACcIyf3w/0qvOiLOvl7Q5KbySWin # VA+SxkPC5ujvnkUEN2TxSED+6wL3XYx7rBPTZRFrXm+E/qIJHMcs1LuiVWDy0yFf # yHOEYw3VShLTRRhjLYVA/xGSQU3Bvz4Khwpqo98MqFa0687PxE6ZcQHt2oAHHcKV # V0Ig/WLYBwEYzvWjALlqPZtKo3xwSoXNF8vsrVk53mnW83/RKxj45zan/ezzXl3n # eEUcbt9ggXdzXIQuU5NWQDbv3i38ufJjsFKkPsMGGjURLqRpP5xrUIBfL6mS3HHS # Qjgf+BZhHW2Bp0upPnQBQyRST78bLiP1xapVggmjU0HbxU8PaKdh4APF6DAxggQN # MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ # MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u # MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiY1 # tD5nQ5P2HwABAAACJjANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G # CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCDjPY1pdr/XHtYNU3MssmSOpLG # emjc6s5dC1cFsU0HozCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIMwyXGFn # TNsZRBrs6GN/BbV0okaNP3VBYqLFjUsFnbgqMIGYMIGApH4wfDELMAkGA1UEBhMC # VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV # BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp # bWUtU3RhbXAgUENBIDIwMTACEzMAAAImNbQ+Z0OT9h8AAQAAAiYwIgQg2JPcs/SN # uCGQcn1KHunCx9YszyAAqMlPKqM1od4qB/gwDQYJKoZIhvcNAQELBQAEggIAiEvk # XDpnla4HjV9TPBN1zhRLLWn0+HhYqW4Qin/9DVHEVkeh7L8c0q6p2jWHjcWEUpe2 # PEO+2X4Fjz7+Hw+W/bvwlt6ziqFc28xPzflpvOJsZehSwjkga5ZmMUbfBtYpfNTw # lV+SNkS8BnwD/0MxKPkMQ7zgsm8iji7FTnNfm0h+rU6luvmVC4tmy9NxW+4jbYnI # 8fDCA2dLMOjJiouq6jFFmsaVIcFb/WkvVzLOL6zK1z5j12VUE3qyHg/tLuWZvpMA # 6CpqcSwEFUg4Lu78ulBnT2pPv5LwqJ/GHysvhJMex05PgI+Bbkz9MA8lHXDPttkz # xksHqyn5EVHixEego/Ae0PoyiCyCC5+bPIBXexlYNEyLNPdVIrG0CC3ulK/625YQ # 31oUM3mtPa6uvN5esDkWR6+2RyM7aIH0aLggLnqGwOAWOcNS4DXg9iXCN5vSqkcs # GsioxpEw/3kG8rJQ775WN1SMvT/pmouVot/8PkhxokCztHqwwm++PRJwTDkSInh+ # OzqpMcyZuFS12uxBSMCPg9KZKfP2VxrAuc1RmVbLiYymDIb6lfuWS3m3yXHdU4UX # 0U1vXBmkh2RkEsmZ21vMusz+w7KTet2yBNX49iVBFBUGK9FSN9wiEoJCI7QKI33K # NzEIKV4lMaO62TWDNyvIxNchcsgmmwwo4nYQX3E= # SIG # End signature block |