Private/RoleAssignmentOperations.ps1
|
<#
SAMPLE CODE NOTICE THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY. THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER. NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO. #> function New-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleDefinitionId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } 'EnvironmentGroupScope' { "/tenants/$TenantId/environmentGroups/$EnvironmentGroupId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments" } default { "authorization/roleAssignments" } } $query = "api-version=1" # Build the request body $body = @{ principalObjectId = $PrincipalObjectId principalType = $PrincipalType.ToString() scope = $scope roleDefinitionId = $RoleDefinitionId } | ConvertTo-Json Write-Verbose "Creating role assignment at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } function Get-RoleAssignments { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory=$false)] [bool]$IncludeParentScopes = $false, [Parameter(Mandatory=$false)] [bool]$ExpandSecurityGroups = $false, [Parameter(Mandatory=$false)] [bool]$ExpandEnvironmentGroups = $false, [Parameter(Mandatory=$false)] [bool]$IncludeNestedScopes = $false, [Parameter(Mandatory=$false)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory=$false)] [string]$PrincipalObjectId, [Parameter(Mandatory=$false)] [string]$Permission, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/listRoleAssignments" } default { "authorization/listRoleAssignments" } } $query = "api-version=1" # Build the request body $bodyHash = @{ Scope = $scope IncludeParentScopes = $IncludeParentScopes ExpandSecurityGroups = $ExpandSecurityGroups ExpandEnvironmentGroups = $ExpandEnvironmentGroups IncludeNestedScopes = $IncludeNestedScopes } if ($PSBoundParameters.ContainsKey('PrincipalType')) { $bodyHash['PrincipalType'] = $PrincipalType.ToString() } if (-not [string]::IsNullOrWhiteSpace($PrincipalObjectId)) { $bodyHash['PrincipalObjectId'] = $PrincipalObjectId } if (-not [string]::IsNullOrWhiteSpace($Permission)) { $bodyHash['Permission'] = $Permission } $body = $bodyHash | ConvertTo-Json Write-Verbose "Getting role assignments at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the initial request (POST with body) $httpMethod = [System.Net.Http.HttpMethod]::Post $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { return $null } $response = $contentString | ConvertFrom-Json $allResults = @() # Collect results from first page if ($null -ne $response.value) { $allResults += $response.value } # Handle OData pagination - use same HTTP method as original request while ($null -ne $response.'@odata.nextLink') { $nextLink = $response.'@odata.nextLink' Write-Verbose "Fetching next page: $nextLink" $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $nextLink -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { break } $response = $contentString | ConvertFrom-Json if ($null -ne $response.value) { $allResults += $response.value } } return $allResults } function Remove-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleAssignmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the path based on parameter set $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments/$RoleAssignmentId" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments/$RoleAssignmentId" } default { "authorization/roleAssignments/$RoleAssignmentId" } } $query = "api-version=1" Write-Verbose "Removing role assignment at path: $path" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -HttpMethod ([System.Net.Http.HttpMethod]::Delete) } # 200 = deleted, 404 = not found if ($result.StatusCode -eq 200) { return $true } elseif ($result.StatusCode -eq 404) { return $false } Assert-Result -Result $result return $false } function Test-PrincipalPermission { [CmdletBinding()] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string[]]$Permissions, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) $scope = "/tenants/$TenantId/environments/$EnvironmentId" $path = "authorization/environments/$EnvironmentId/checkPrincipalPermissionForScope" $query = "api-version=1" # Build the request body $body = @{ PrincipalObjectId = $PrincipalObjectId PrincipalType = $PrincipalType.ToString() Permissions = $Permissions Scope = $scope } | ConvertTo-Json Write-Verbose "Checking permissions at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } # SIG # Begin signature block # MIInbgYJKoZIhvcNAQcCoIInXzCCJ1sCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCyfmAKSD6lEwBt # AVwfK899v1bOy2m5P+jLtvPEusBEDaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghn7MIIZ9wIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZI # hvcNAQkEMSIEIElsycnK1OtEs72W6SDi8lNaTAYOUPXdZwPAXsbxalZIMEIGCisG # AQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAEggEAaeVpoD7tAOLSup/9fxTe # KiuJp9cGf0wQ60pwUniyPBducSsUc5/dTozpxNwMgRRu7eM5GYSlFeU3d7ohj2Pn # J882uAlG6MMIt7NHCbtZFW3jnoSk0C7/EpchFH3oeM6mI7cT5oVQNIBEkrLUJ6KM # NdGYfrDvOTjwRMULRPP6BgSd3ecNaZLhUF60JEV+wrDBsez9T7Oe3ePVEk7YCNSq # EqR+HVW91iXrkX1zndM5vNyxP40TOgXE8VNJbgFK+ModXM/FylRMAC1TasB4S7an # J/UPVgFiH9aTw6/3Aw7bqg/mky4Rgkhi3/RHp6yUxT+Y2+Vgf53OTMXSsQG2XUUb # SKGCF60wghepBgorBgEEAYI3AwMBMYIXmTCCF5UGCSqGSIb3DQEHAqCCF4YwgheC # AgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFaBgsqhkiG9w0BCRABBKCCAUkEggFFMIIB # QQIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQCAQUABCD+1g0XIE/Q2dGszsM4 # ci6lFIVM1wCw6uyqpry97n/nYQIGaokH+5qsGBMyMDI2MDkwMjAwMjg0OS41Mzda # MASAAgH0oIHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv # bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0 # aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0 # ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzElMCMG # A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEfswggcoMIIFEKAD # AgECAhMzAAACHUvAkoc4hX45AAEAAAIdMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m # dCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI1MDgxNDE4NDgzM1oXDTI2MTExMzE4 # NDgzM1owgdMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD # VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLTAr # BgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJhdGlvbnMgTGltaXRlZDEnMCUG # A1UECxMeblNoaWVsZCBUU1MgRVNOOjQzMUEtMDVFMC1EOTQ3MSUwIwYDVQQDExxN # aWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIICIjANBgkqhkiG9w0BAQEFAAOC # Ag8AMIICCgKCAgEAorSgaAA8oOl4ph574zw29egUN8DDepRHLX8FM1zHNJmXG6Kr # SqUKwzcKafopuYdPTETTCvb9aJfESuAU0iGNUFI/D6R0kvdfpe2oPX+E3sbTQvGi # 4JPH5qdIYUaJ45V/4bqe8eNvbWzpC+ZKjH193DeiI1XAI918JoQmBhlEXo/Ton17 # 21luZJgincsf5LjMY3jX84WyXUSX3dsS7h/7xVI+w1yjg7pa+0y3o/me2Tsv6UJU # dSTQap5ORGSfCnclnP1z3IiiWIWr3Vo7aIPWsgJzq3m5GxpxUHCQk8qzUhk50y/u # B+LGE3WIK2C77iy9iFsSfSLUnyMEzGRDW9mXHT4PH7Ozz6CHqQEiNvwcHqlvlCh1 # pHQh1NXQSAqOoVBs5mi6easf6yxWTfe5DrR79503r8pU6VqC2Y9XMRU4wH9QbYXY # sIUZ33Jmndy22W1LBDAbxBPQHCBlncGDU3BgdhVUVLe80mggFO98FdkWho67w4kP # dCTRkvdvkY8PrQYE/nQjHXCa0g7LcMttZb6ejMHfQ+tUWXv6+nZ4Ynkr2OkaxclF # Cw4RIYNMWD26AWbQj/WEdzga18fKtw66L5gzXPza6jFBfPJeKE3H8QAuwpirmH4m # s+5nUjNNQOmNgqJn0U1+3Yn7ClswD79YN0r3fdbYBMDApBZJpNlK7q7HXRsCAwEA # AaOCAUkwggFFMB0GA1UdDgQWBBSEWfBxNEamZtXm8gl92Yq80jfxXTAfBgNVHSME # GDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNVHR8EWDBWMFSgUqBQhk5odHRw # Oi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNyb3NvZnQlMjBUaW1l # LVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYIKwYBBQUHAQEEYDBeMFwGCCsG # AQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NlcnRzL01p # Y3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNydDAMBgNVHRMB # Af8EAjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA4GA1UdDwEB/wQEAwIHgDAN # BgkqhkiG9w0BAQsFAAOCAgEAkdweB4yxvLspLKq0D+miyD4Q0EcxVFpNZuJxiR54 # gWRkeTDDuymNeB03JhlsBpbwSYJ5uZSgDBCvwHED2VL8lJpFlOprJzxsXWC2NTfA # +O+PO5Fk5jw6LHh6jeBADDEdQAx3Hqi7Zm0JwvQ93z5f6dtxkm29WqOcHYXRXfAQ # wy1hSrLXyfeblqR66jpP/9n0fCkWU4ggsUjQpQ2Ngj1DV09J4Y3y7p9Nd81+Xs6q # Yo++7RKm8qiB/5NDeigOLjlAeFgiEXIRUJW+mJyqpQw+OORlaqcFjR8Hu0G+/7bM # dek68YX+kPpDBk7Ue+I/xgiYJ1xcDRBn/vczLtN72+RIlD4UgXYLuBSCk//pDEPX # 5z39Cr+rkc6E4Y28FPk4BhloAyvp628P4xfElQY8TcxraUbZShypocE6ny95D1K1 # BkltZmrHVKCxmglnuOlM15NKIrXFlXCzdqpCtIwQ417wNAVF/QDPvzzbumPdTi6f # b0tLbScYobV6zvbBsMsKEME4Tj1b9oIXC8dybJq4nbboEXYpRwi1QAbpSNrn+PxG # W9uf1q63FnMJu4gm3Oh63njW/iVf723quzyHrSijWMgY0HiRiHQi0Jyu0h8MdhRU # p7mxbmLQckPiOFwAlIaUN/k725y/aLWpkRU6fqmLlEOyH5WpyLd23AYy9r8v+Qob # a6swggdxMIIFWaADAgECAhMzAAAAFcXna54Cm0mZAAAAAAAVMA0GCSqGSIb3DQEB # CwUAMIGIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMTIwMAYD # VQQDEylNaWNyb3NvZnQgUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgMjAxMDAe # Fw0yMTA5MzAxODIyMjVaFw0zMDA5MzAxODMyMjVaMHwxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFBDQSAyMDEwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5OGm # TOe0ciELeaLL1yR5vQ7VgtP97pwHB9KpbE51yMo1V/YBf2xK4OK9uT4XYDP/XE/H # ZveVU3Fa4n5KWv64NmeFRiMMtY0Tz3cywBAY6GB9alKDRLemjkZrBxTzxXb1hlDc # wUTIcVxRMTegCjhuje3XD9gmU3w5YQJ6xKr9cmmvHaus9ja+NSZk2pg7uhp7M62A # W36MEBydUv626GIl3GoPz130/o5Tz9bshVZN7928jaTjkY+yOSxRnOlwaQ3KNi1w # jjHINSi947SHJMPgyY9+tVSP3PoFVZhtaDuaRr3tpK56KTesy+uDRedGbsoy1cCG # MFxPLOJiss254o2I5JasAUq7vnGpF1tnYN74kpEeHT39IM9zfUGaRnXNxF803RKJ # 1v2lIH1+/NmeRd+2ci/bfV+AutuqfjbsNkz2K26oElHovwUDo9Fzpk03dJQcNIIP # 8BDyt0cY7afomXw/TNuvXsLz1dhzPUNOwTM5TI4CvEJoLhDqhFFG4tG9ahhaYQFz # ymeiXtcodgLiMxhy16cg8ML6EgrXY28MyTZki1ugpoMhXV8wdJGUlNi5UPkLiWHz # NgY1GIRH29wb0f2y1BzFa/ZcUlFdEtsluq9QBXpsxREdcu+N+VLEhReTwDwV2xo3 # xwgVGD94q0W29R6HXtqPnhZyacaue7e3PmriLq0CAwEAAaOCAd0wggHZMBIGCSsG # AQQBgjcVAQQFAgMBAAEwIwYJKwYBBAGCNxUCBBYEFCqnUv5kxJq+gpE8RjUpzxD/ # LwTuMB0GA1UdDgQWBBSfpxVdAF5iXYP05dJlpxtTNRnpcjBcBgNVHSAEVTBTMFEG # DCsGAQQBgjdMg30BATBBMD8GCCsGAQUFBwIBFjNodHRwOi8vd3d3Lm1pY3Jvc29m # dC5jb20vcGtpb3BzL0RvY3MvUmVwb3NpdG9yeS5odG0wEwYDVR0lBAwwCgYIKwYB # BQUHAwgwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMA8G # A1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU1fZWy4/oolxiaNE9lJBb186aGMQw # VgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9j # cmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3JsMFoGCCsGAQUF # BwEBBE4wTDBKBggrBgEFBQcwAoY+aHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3Br # aS9jZXJ0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcnQwDQYJKoZIhvcNAQEL # BQADggIBAJ1VffwqreEsH2cBMSRb4Z5yS/ypb+pcFLY+TkdkeLEGk5c9MTO1OdfC # cTY/2mRsfNB1OW27DzHkwo/7bNGhlBgi7ulmZzpTTd2YurYeeNg2LpypglYAA7AF # vonoaeC6Ce5732pvvinLbtg/SHUB2RjebYIM9W0jVOR4U3UkV7ndn/OOPcbzaN9l # 9qRWqveVtihVJ9AkvUCgvxm2EhIRXT0n4ECWOKz3+SmJw7wXsFSFQrP8DJ6LGYnn # 8AtqgcKBGUIZUnWKNsIdw2FzLixre24/LAl4FOmRsqlb30mjdAy87JGA0j3mSj5m # O0+7hvoyGtmW9I/2kQH2zsZ0/fZMcm8Qq3UwxTSwethQ/gpY3UA8x1RtnWN0SCyx # TkctwRQEcb9k+SS+c23Kjgm9swFXSVRk2XPXfx5bRAGOWhmRaw2fpCjcZxkoJLo4 # S5pu+yFUa2pFEUep8beuyOiJXk+d0tBMdrVXVAmxaQFEfnyhYWxz/gq77EFmPWn9 # y8FBSX5+k77L+DvktxW/tM4+pTFRhLy/AsGConsXHRWJjXD+57XQKBqJC4822rpM # +Zv/Cuk0+CQ1ZyvgDbjmjJnW4SLq8CdCPSWU5nR0W2rRnj7tfqAxM328y+l7vzhw # RNGQ8cirOoo6CGJ/2XBjU02N7oJtpQUQwXEGahC0HVUzWLOhcGbyoYIDVjCCAj4C # AQEwggEBoYHZpIHWMIHTMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv # bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0 # aW9uMS0wKwYDVQQLEyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0 # ZWQxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjo0MzFBLTA1RTAtRDk0NzElMCMG # A1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaIjCgEBMAcGBSsOAwIa # AxUAuoO+BKbfXzqyfi9GLEdWHkCLeT+ggYMwgYCkfjB8MQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T # dGFtcCBQQ0EgMjAxMDANBgkqhkiG9w0BAQsFAAIFAO5BXSUwIhgPMjAyNjA5MDEx # NDE4MTNaGA8yMDI2MDkwMjE0MTgxM1owdDA6BgorBgEEAYRZCgQBMSwwKjAKAgUA # 7kFdJQIBADAHAgEAAgIpiTAHAgEAAgISaDAKAgUA7kKupQIBADA2BgorBgEEAYRZ # CgQCMSgwJjAMBgorBgEEAYRZCgMCoAowCAIBAAIDB6EgoQowCAIBAAIDAYagMA0G # CSqGSIb3DQEBCwUAA4IBAQCGBMMEZQCyFU7gwIesNoSlX93er6aP0h39p0a3w0zs # SwyooV0JijlOQL7ZouAwhbWwcVWXQczLGNZKeCEU2ABsK6F/wgXxvWOcpydBwuPl # nlYA4aZctIfsSZxFeQr0DY52Oj2T8ZvT49xFFQhzM9QosGSyv5QTogFUKVlsiH+X # 3v960xl4fIQMxL1VS4anzjexZaPbvBNaGr7dAIvSmpVZx4iiDKM6BJW7drbn4e65 # GLpOKZmk6OCRZT0h2xWCqvRICPZH7UL9iZoXJf7sxxhQyuLbyJGQJftmF77EHs2Q # pF6toUhdluWUIGZXi2HD/L2OUmg543bc6hQTLLom2HRhMYIEDTCCBAkCAQEwgZMw # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTACEzMAAAIdS8CShziFfjkAAQAA # Ah0wDQYJYIZIAWUDBAIBBQCgggFKMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRAB # BDAvBgkqhkiG9w0BCQQxIgQgk4eeKycZpej8+/PifcwSZyrAndHA9h/61cnmNek6 # 2MQwgfoGCyqGSIb3DQEJEAIvMYHqMIHnMIHkMIG9BCCxtpXMXEiLJzrqM77ep4rT # NwrMOj6gpWN9hZvpj5QFUTCBmDCBgKR+MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQI # EwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3Nv # ZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBD # QSAyMDEwAhMzAAACHUvAkoc4hX45AAEAAAIdMCIEIHq/1RTQgQXoy5gGWmHg0Oyi # ce6MDY8kPPKtTKUH8c1NMA0GCSqGSIb3DQEBCwUABIICAGsRkCpHQvNQL4sNTkcS # QYkpKokfSXNbXo9xDeg+J5ZdG27ODCT+A4WRDxKbGUfj11ERWbEZm5XRc9iqY4oJ # LmhrwWNOGniW22gLXYQwNIINJntdYeTJMgclZMrWlVgi852YP17Iyj2JlvlUYG6N # 1lrxrahQlqjtzDD/ruh4fz3JGQjmw8YSkJofWGzv6t0m7Lamp79PlmCB/HGPDauj # n3Di0TTwVm37yYQkyNfWB6BWaWNV5zbPMzc8+lQgfC7GBgSzobx8uFuwx1YGElmM # PwJnLPn0z5pqr8o2ucBXduek3XOLjy1Gp9lsKxsd3SkFtxX2PCs9eqVZ6OOSZ7Bm # eg92afIQ1kp1k/p+iittKIxRG1tyS8RUlmsUXHbp0d/MGUZC0HgAj1HqJ/IwrQcR # kX4s6TTFVoKRekilxYyPYAHxAEassN2baZCkBVN+qc+OhkUw0Hf9n0WSf/ynxqtZ # gjTpteJXOvJOWb/K8cG5IkTg2tyJm3vE4SDbcyk1mVyGrPZLBp2aJrDbUZBkMsC+ # NwK2F23Kx7xw2QFDpuwYvY+nxb0B7cisMbv22bXiQYtNgrMEzyLNwLksdMCZXJ2K # CfmbPcUrx79jiqTj5eghWOze3Sct8T/N4+ZOk5YxIAtEmdZNFsx+kp4AM/bzuvnh # 5XFuzdVYIAI1vJUECoPBfAWS # SIG # End signature block |