Private/RoleAssignmentOperations.ps1
|
<#
SAMPLE CODE NOTICE THIS SAMPLE CODE IS MADE AVAILABLE AS IS. MICROSOFT MAKES NO WARRANTIES, WHETHER EXPRESS OR IMPLIED, OF FITNESS FOR A PARTICULAR PURPOSE, OF ACCURACY OR COMPLETENESS OF RESPONSES, OF RESULTS, OR CONDITIONS OF MERCHANTABILITY. THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS SAMPLE CODE REMAINS WITH THE USER. NO TECHNICAL SUPPORT IS PROVIDED. YOU MAY NOT DISTRIBUTE THIS CODE UNLESS YOU HAVE A LICENSE AGREEMENT WITH MICROSOFT THAT ALLOWS YOU TO DO SO. #> function New-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleDefinitionId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } 'EnvironmentGroupScope' { "/tenants/$TenantId/environmentGroups/$EnvironmentGroupId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments" } default { "authorization/roleAssignments" } } $query = "api-version=1" # Build the request body $body = @{ principalObjectId = $PrincipalObjectId principalType = $PrincipalType.ToString() scope = $scope roleDefinitionId = $RoleDefinitionId } | ConvertTo-Json Write-Verbose "Creating role assignment at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } function Get-RoleAssignments { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory=$false)] [bool]$IncludeParentScopes = $false, [Parameter(Mandatory=$false)] [bool]$ExpandSecurityGroups = $false, [Parameter(Mandatory=$false)] [bool]$ExpandEnvironmentGroups = $false, [Parameter(Mandatory=$false)] [bool]$IncludeNestedScopes = $false, [Parameter(Mandatory=$false)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory=$false)] [string]$PrincipalObjectId, [Parameter(Mandatory=$false)] [string]$Permission, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the scope and path based on parameter set $scope = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "/tenants/$TenantId/environments/$EnvironmentId" } default { "/tenants/$TenantId" } } $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/listRoleAssignments" } default { "authorization/listRoleAssignments" } } $query = "api-version=1" # Build the request body $bodyHash = @{ Scope = $scope IncludeParentScopes = $IncludeParentScopes ExpandSecurityGroups = $ExpandSecurityGroups ExpandEnvironmentGroups = $ExpandEnvironmentGroups IncludeNestedScopes = $IncludeNestedScopes } if ($PSBoundParameters.ContainsKey('PrincipalType')) { $bodyHash['PrincipalType'] = $PrincipalType.ToString() } if (-not [string]::IsNullOrWhiteSpace($PrincipalObjectId)) { $bodyHash['PrincipalObjectId'] = $PrincipalObjectId } if (-not [string]::IsNullOrWhiteSpace($Permission)) { $bodyHash['Permission'] = $Permission } $body = $bodyHash | ConvertTo-Json Write-Verbose "Getting role assignments at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the initial request (POST with body) $httpMethod = [System.Net.Http.HttpMethod]::Post $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { return $null } $response = $contentString | ConvertFrom-Json $allResults = @() # Collect results from first page if ($null -ne $response.value) { $allResults += $response.value } # Handle OData pagination - use same HTTP method as original request while ($null -ne $response.'@odata.nextLink') { $nextLink = $response.'@odata.nextLink' Write-Verbose "Fetching next page: $nextLink" $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $nextLink -AccessToken $secureAccessToken -Content $body -HttpMethod $httpMethod } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if (-not $contentString) { break } $response = $contentString | ConvertFrom-Json if ($null -ne $response.value) { $allResults += $response.value } } return $allResults } function Remove-RoleAssignment { [CmdletBinding(DefaultParameterSetName = 'TenantScope')] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$RoleAssignmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory, ParameterSetName = 'EnvironmentGroupScope')] [ValidateNotNullOrEmpty()] [string]$EnvironmentGroupId, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) # Build the path based on parameter set $path = switch ($PSCmdlet.ParameterSetName) { 'EnvironmentScope' { "authorization/environments/$EnvironmentId/roleAssignments/$RoleAssignmentId" } 'EnvironmentGroupScope' { "authorization/environmentGroups/$EnvironmentGroupId/roleAssignments/$RoleAssignmentId" } default { "authorization/roleAssignments/$RoleAssignmentId" } } $query = "api-version=1" Write-Verbose "Removing role assignment at path: $path" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -HttpMethod ([System.Net.Http.HttpMethod]::Delete) } # 200 = deleted, 404 = not found if ($result.StatusCode -eq 200) { return $true } elseif ($result.StatusCode -eq 404) { return $false } Assert-Result -Result $result return $false } function Test-PrincipalPermission { [CmdletBinding()] param( [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$TenantId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$EnvironmentId, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string]$PrincipalObjectId, [Parameter(Mandatory)] [AuthorizationPrincipalType]$PrincipalType, [Parameter(Mandatory)] [ValidateNotNullOrEmpty()] [string[]]$Permissions, [Parameter(Mandatory=$false)] [PPEndpoint]$Endpoint = [PPEndpoint]::Prod ) $scope = "/tenants/$TenantId/environments/$EnvironmentId" $path = "authorization/environments/$EnvironmentId/checkPrincipalPermissionForScope" $query = "api-version=1" # Build the request body $body = @{ PrincipalObjectId = $PrincipalObjectId PrincipalType = $PrincipalType.ToString() Permissions = $Permissions Scope = $scope } | ConvertTo-Json Write-Verbose "Checking permissions at path: $path" Write-Verbose "Request body: $body" # Build the full URI using global API endpoint $baseUrl = Get-APIResourceUrl -Endpoint $Endpoint $uri = "$baseUrl$path`?$query" Write-Verbose "Request URI: $uri" # Get authorization service token $secureAccessToken = Get-AuthorizationServiceToken -Endpoint $Endpoint # Create and send the request $result = Send-RequestWithRetries -MaxRetries 1 -DelaySeconds 5 -RequestFactory { New-JsonRequestMessage -Uri $uri -AccessToken $secureAccessToken -Content $body -HttpMethod ([System.Net.Http.HttpMethod]::Post) } Assert-Result -Result $result $contentString = Get-AsyncResult -Task $result.Content.ReadAsStringAsync() if ($contentString) { return ($contentString | ConvertFrom-Json) } return $null } # SIG # Begin signature block # MIInSQYJKoZIhvcNAQcCoIInOjCCJzYCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCyfmAKSD6lEwBt # AVwfK899v1bOy2m5P+jLtvPEusBEDaCCDLowggX1MIID3aADAgECAhMzAAACHU0Z # yE7XD1dIAAAAAAIdMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQzWhcNMjcwNDE1MTg1 # OTQzWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDQvewXxx9gZZFC6Ys1WBay8BJ8kGA4JQnH5CMafqOASlTpK9H8 # o5ZXTXt0caVQTNMUPt445wXYD+dFtaKWTwDn1I52oUSrC9vJin1Gsqt+zyKJL5Dg # 3eQXbQNR61DmMy20GLTIO3SFed9Rfi/ophgCLGFLDR3r0KvHjwMb/jYWS0celV/4 # Lz27LfAekm8v9E5IXaeiXbAUYZKK090n4CVl3JBtbN+9DtI9SNu/yjvozW52/u7R # X/Ttpa/KDlpuokZ+Zcbvmtd9ur9gFLvZzh41o9MsE/clQtdaFWGvuo6Jua/ntpgk # ey3E5/vBFe+MJPG6phdnuo6r57ZudCudiI1bAgMBAAGjggGbMIIBlzAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFH6QuMwqcPG0hQlQ6c5jCtTTLrVeMEUGA1UdEQQ+MDykOjA4MR4wHAYDVQQL # ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xFjAUBgNVBAUTDTIzMDAxMis1MDc1NTkw # HwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEwYAYDVR0fBFkwVzBVoFOg # UYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0 # JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNybDBtBggrBgEFBQcBAQRh # MF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMv # Y2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # dDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBKTbYOjzwTG/DXGaz9 # s6+fQeaTtDcFmMY+5UyVFCyj7Pv+5i37qfX8lSL/tBIfYQfWsMuBQlfZurJD6r4H # VJ2CeH+1fgiq8dcHdVKoZ3Sa2qXoX3cq9iS8cVb06B7+5/XJ7I0OxHH9fDsvJ3T3 # w5V/ZtAIFmLrl+P0CtG+92uzRsn0nTbdFjOkLMLWPLAU3THohKRlSEMgFJpPkm5n # 5UAZ35xX6FWCrDLsSKb555bTifwa8mJBwdlof0bmfYidH+dxZ1FdDxvLnNl9zeKs # A4kejaaIqqIPguhwAti5Ql7BlTNoJNwxCvBmqW2MQLnCkYN/VVUsR3V2x/rcTNzo # Bf/Z/SpROvdaA2ZOOd1uioXJt3tdLQ7vHpqpib0KfWr/FWXW10q38VxfCnRQBqzb # SuztR7nEMuzX7Ck+B/XaPDXd1qh72+QYyB0Z2VzWmO9zsnb9Uq/dwu8LGeQqnyu6 # 7SDGACvnXii2fb9+US492VTnXSnFKyqwgzUyFMtZK1/sHYTv6bG4TtQUygQxTN+Z # V+aJIlKO2MqZ7bKrAnOzS9m6NgoTdWOq11bTOZwKlIEV/EhV9SWkDmdpR/hPPT2v # 6TEj4F8PT/zHjRezIU5c/DGlt/VhY/pK0XkJtEyMmmS1BMtjU/rqBZVMIm3dnxQs # /TBByr+Cf8Z1r7aifQVQ+WSqzjCCBr0wggSloAMCAQICEzMAAAA5O7Y3Gb8GHWcA # AAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoXDTM2MDMyMjIyMTMwNFow # VzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEo # MCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQQ0EgMjAyNDCCAiIwDQYJ # KoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeqlRYHNa265v4IY9fH8TKh # emHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo0dtS/EW6I/yEL/bLSY8h # KpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATvQVL4tcf03aTycsz8QeCd # M0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a1uv1zerOYMnsneRRwCbp # yW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1FyQfK0fVkaya8SmVHQ/t # Of23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfOGSWHIIV4YrTJTT6PNty5 # REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7ttOu1bVnXfHaqPYl2rPs # 20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJuz2MXMCt7iw7lFPG9LXK # Gjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxSCwyoGIq0PhaA7Y+VPct5 # pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOmVQop36wUVUYklUy++vDW # eEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3SkE/xIkgpfl22MM1itkZ # 35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8EBAMCAYYwEAYJKwYBBAGC # NxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPXLQaUEggxMBkGCSsGAQQB # gjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAU # ci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny # bC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAwTgYIKwYBBQUHMAKGQmh0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMvTWljUm9vQ2VyQXV0MjAx # MV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOCAgEAFJQfOChP7onn6fLI # MKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D5W4wMwYeLystcEqfkjz4 # NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBYnbu0+THSuVHTe0VTTPVh # ily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSIvgn0JksVBVMYVI5QFu/q # hnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6aR9y34aiM1qmxaxBi6OU # nyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4wPKC5OmHm1DQIt/MNokbb # H3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7RTX8AdBPo0I6OEojf39z # uFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK/fg8B2qjW88MT/WF5V5u # vZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSKYBv0VisCzfxgeU+dquXW # 9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkwYTu/9dLeH2pDqeJZAABV # DWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVTQl0v4q8J/AUmQN5W4n10 # 1cY2L4A7GTQG1h32HHAvfQESWP0xghnlMIIZ4QIBATBuMFcxCzAJBgNVBAYTAlVT # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jv # c29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIdTRnITtcPV0gAAAAAAh0w # DQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQwHAYK # KwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEIElsycnK # 1OtEs72W6SDi8lNaTAYOUPXdZwPAXsbxalZIMEIGCisGAQQBgjcCAQwxNDAyoBSA # EgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20w # DQYJKoZIhvcNAQEBBQAEggEAtAEbveK/gvUQLyC9hghGGsKYQtyFDDOWZeME/UpA # tlOm/G/HJlBcKjnxPzHQ7tKsurwCFs0YpSy7FN1jSlyFkx9KuRCoiq6yGa34LcSY # 2uFPy38QLZeO5E6SQN8F9WcFqcyAd2UziT0Po3BcySalTMEoHJcgjKJE3Dq52csb # QLYFlK/POUfaOsU6MIucA/TO7DeZxLvdPvnRSUXl7glGYp3ae5+oi+1VwcVi71BP # +h+OK5Hxu7gwK6mmMk3KOeQ3UEnPmJv1yqTObyNHlzfK/E7RpJHG2LNZVsHJ44ni # wlx+EUDeuYCBJUwwEXUigRCaiHwpJThR+BryVR0ZLb2kEqGCF5cwgheTBgorBgEE # AYI3AwMBMYIXgzCCF38GCSqGSIb3DQEHAqCCF3AwghdsAgEDMQ8wDQYJYIZIAWUD # BAIBBQAwggFSBgsqhkiG9w0BCRABBKCCAUEEggE9MIIBOQIBAQYKKwYBBAGEWQoD # ATAxMA0GCWCGSAFlAwQCAQUABCDIOyOF01kv1LtjHCPj5u7FwGwrU0pt6TjU4p50 # 0cU/kQIGaoSCff4iGBMyMDI2MDkwMzE5MTYxOS40MTZaMASAAgH0oIHRpIHOMIHL # MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVk # bW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxN # aWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRT # UyBFU046OTIwMC0wNUUwLUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0 # YW1wIFNlcnZpY2WgghHtMIIHIDCCBQigAwIBAgITMwAAAiNP2WAkU8/+KwABAAAC # IzANBgkqhkiG9w0BAQsFADB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu # Z3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBv # cmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMDAe # Fw0yNjAyMTkxOTM5NTdaFw0yNzA1MTcxOTM5NTdaMIHLMQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmlj # YSBPcGVyYXRpb25zMScwJQYDVQQLEx5uU2hpZWxkIFRTUyBFU046OTIwMC0wNUUw # LUQ5NDcxJTAjBgNVBAMTHE1pY3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2UwggIi # MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCK6Q2nk5WUdKzSCSafp+UjUARs # WxHKS63rJhFC/zSabFumTBuaJ0QNrmqevub5Db7fSj5qtwwKnjIO92+HXF67192f # ujL7DFot5WEj/AtEZ/XrzFHimKlN1h6gEQwP5I67wizaPW5ZzSBNpaLBg5oHvASP # OZtwdNUoZ+DQKF3hJl1KZuoIlVK+qi7cLjgak6s5oOZcRCMrKnuC3aoVa6wRDbYv # KUuj7rkFx9KO0PsHJ/k+LnZMggRheh4AVdawyh+oOzKPjlQGUNfSeWUgym2U9CLa # 8tt0mQX4DxDz6+ram50gj1oAfyQ6TQ7r96PADFOKBgaU7+cpHnaZG89dTegQ6ydB # RGIycOw1dRX2eKDRRzziK3cn0WaIm/7OeGsyQKjIzEQuUTDv0Jj/9zQ7truLOOpJ # D98BJVOK7je84Sz2hb3HvUST7j1j2N8peD6olkpFHR/1Z8Jz4F+mkrUF7MmPAirY # HRzunbIg3HrDMNwFYN7yBkDA4/VMo9CY0y9oGUoq2yjbCwTibz9VYl93nB3QQiTC # T9nW3M+TOWB+PMrZpExq1BSHmKPzIqehKqrUDoM33PK+dEKwpYLET6uXq4HuQRMX # WT//sPubUnQAaaUMfQhAZSy23HtxwtN3eK9+T4wCav2wQFt57eUOwUW5/DCzMF9t # ua5He1hNvgcAXaiG1wIDAQABo4IBSTCCAUUwHQYDVR0OBBYEFNbAh89v29nPY9bw # Qb1QYCzxVgeXMB8GA1UdIwQYMBaAFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMF8GA1Ud # HwRYMFYwVKBSoFCGTmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvY3Js # L01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAyMDEwKDEpLmNybDBsBggr # BgEFBQcBAQRgMF4wXAYIKwYBBQUHMAKGUGh0dHA6Ly93d3cubWljcm9zb2Z0LmNv # bS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwVGltZS1TdGFtcCUyMFBDQSUyMDIw # MTAoMSkuY3J0MAwGA1UdEwEB/wQCMAAwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgw # DgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQCHQwe7z5tp4NZwAf1c # B+4c9J4svw3P6WqGBMxtqznS6DdzUzStXHCaPZhM41g1iKHNnmcnLjwLujOEaNjh # SnUDiAZqQjW5ZapOBxgc7Egghh9k+r78qWAe3rJ4QohBbhSGdZtKivTRaeRqmnhy # 8+ThrKhzCeEwaarXJimZwSpdQQUDbheWHeyAxASqultd5KO0m/UFvO03tfepqGXA # 4tCg/WGECwKqOjJzpRAfPIB6y1HyVrk+vmL5rpEbTwwLOtX7WxFGG8+cYLk9HjaD # kxraA/HYlKQRx1sdza+w/gulLwgOnByRJKF2rr8M7FNIlwoi6ywFpaNc8A7HewaG # jgw/tfcE260I1XekGluANI9HnONOYWlI7BKBQbWE2teo6vsQ1Vg8B8rTZSePVdmX # L1PPqqs3KVdFKM5kYocPCDM+6VL32IV96sESf2T7DjxanpCg2D2UYj4Z1i7cy8U1 # LLDGg55KWs4af2RRBjH2MulHgAmW5obKxiZCDQjRaroJ2XElXUhigE9BzvhCFbT/ # HDY2vpVpl5HnSpcCSxmL5i5lIT/xbAQMI7Luh75Xrm+IslfFWOGOGMlCp+24qEJE # glXEP7xwsolNdBNndXihhyIefVGlI1DR7xGELiJrk8ifVWYo9XEbEXv/lbvp6F2R # 2UsnweWckvq0y1HWnLHDqH6dPjCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkA # AAAAABUwDQYJKoZIhvcNAQELBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpX # YXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQg # Q29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRl # IEF1dGhvcml0eSAyMDEwMB4XDTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVow # fDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1Jl # ZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMd # TWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUA # A4ICDwAwggIKAoICAQDk4aZM57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX # 9gF/bErg4r25PhdgM/9cT8dm95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1q # UoNEt6aORmsHFPPFdvWGUNzBRMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8d # q6z2Nr41JmTamDu6GnszrYBbfowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byN # pOORj7I5LFGc6XBpDco2LXCOMcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2k # rnopN6zL64NF50ZuyjLVwIYwXE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4d # Pf0gz3N9QZpGdc3EXzTdEonW/aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgS # Uei/BQOj0XOmTTd0lBw0gg/wEPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8 # QmguEOqEUUbi0b1qGFphAXPKZ6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6Cm # gyFdXzB0kZSU2LlQ+QuJYfM2BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzF # ER1y7435UsSFF5PAPBXbGjfHCBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQID # AQABo4IB3TCCAdkwEgYJKwYBBAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQU # KqdS/mTEmr6CkTxGNSnPEP8vBO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1 # GelyMFwGA1UdIARVMFMwUQYMKwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0 # dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0 # bTATBgNVHSUEDDAKBggrBgEFBQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMA # QTALBgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbL # j+iiXGJo0T2UkFvXzpoYxDBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1p # Y3Jvc29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0w # Ni0yMy5jcmwwWgYIKwYBBQUHAQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3 # Lm1pY3Jvc29mdC5jb20vcGtpL2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIz # LmNydDANBgkqhkiG9w0BAQsFAAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwU # tj5OR2R4sQaTlz0xM7U518JxNj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN # 3Zi6th542DYunKmCVgADsAW+iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU # 5HhTdSRXud2f8449xvNo32X2pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5 # KYnDvBewVIVCs/wMnosZiefwC2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGy # qVvfSaN0DLzskYDSPeZKPmY7T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB6 # 2FD+CljdQDzHVG2dY3RILLFORy3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltE # AY5aGZFrDZ+kKNxnGSgkujhLmm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFp # AUR+fKFhbHP+CrvsQWY9af3LwUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcd # FYmNcP7ntdAoGokLjzbaukz5m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRb # atGePu1+oDEzfbzL6Xu/OHBE0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQd # VTNYs6FwZvKhggNQMIICOAIBATCB+aGB0aSBzjCByzELMAkGA1UEBhMCVVMxEzAR # BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p # Y3Jvc29mdCBDb3Jwb3JhdGlvbjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2Eg # T3BlcmF0aW9uczEnMCUGA1UECxMeblNoaWVsZCBUU1MgRVNOOjkyMDAtMDVFMC1E # OTQ3MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNloiMKAQEw # BwYFKw4DAhoDFQA4RWFs+kTiZnoZiAj1BtYj8zCNaqCBgzCBgKR+MHwxCzAJBgNV # BAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4w # HAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29m # dCBUaW1lLVN0YW1wIFBDQSAyMDEwMA0GCSqGSIb3DQEBCwUAAgUA7kQWXTAiGA8y # MDI2MDkwMzE1NTMwMVoYDzIwMjYwOTA0MTU1MzAxWjB3MD0GCisGAQQBhFkKBAEx # LzAtMAoCBQDuRBZdAgEAMAoCAQACAjSrAgH/MAcCAQACAhY+MAoCBQDuRWfdAgEA # MDYGCisGAQQBhFkKBAIxKDAmMAwGCisGAQQBhFkKAwKgCjAIAgEAAgMHoSChCjAI # AgEAAgMBhqAwDQYJKoZIhvcNAQELBQADggEBACZK2N+VeCxZFoojFiIi5v3nQvgz # MKFcsay3q/Wp9U+kOhG9r1CL61GAk4PKpLbxBTs6JegF2rKif47m+b4SgoqEjVJC # yszQp/6ZAIfsyem/XZaudNLD+6WLB4kQUXeRAP1YbAMJZ6bqe4GIpdzwFzHIOCBg # 7OAhjxBA6fstZUcRYnkg7WodDmh/kOYGIIEUVkQ3EYRePGZKxZ+lwfmhrAu3QUAx # Qbc+XExBGWhhdsZnsVCgdMvREHa8lQ6cdUs7ICeHXWI/eagQavQtmoZdyc567d6J # H+kwiHLdrXu/VkRq4xVCYRpymZR8CUVBHdiuC3fRsWtR9+Ky4GUxlv6uy+0xggQN # MIIECQIBATCBkzB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQ # MA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u # MSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAxMAITMwAAAiNP # 2WAkU8/+KwABAAACIzANBglghkgBZQMEAgEFAKCCAUowGgYJKoZIhvcNAQkDMQ0G # CyqGSIb3DQEJEAEEMC8GCSqGSIb3DQEJBDEiBCCzhP5JP4DTVW5/A49nXbhWe90D # fYbUrJqXai+b69bXjDCB+gYLKoZIhvcNAQkQAi8xgeowgecwgeQwgb0EIJbwMywR # bvcGiynjnwjAqcaD47yYvebKZRAvtEAR5u6zMIGYMIGApH4wfDELMAkGA1UEBhMC # VVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNV # BAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRp # bWUtU3RhbXAgUENBIDIwMTACEzMAAAIjT9lgJFPP/isAAQAAAiMwIgQgrZYpgqQD # oJupdyoALitMkUV4TOyM2oiWbWaug+y0nmIwDQYJKoZIhvcNAQELBQAEggIAK2HV # oFvtWbRE5eTUm/PvuOlN/vXcZGonpJPOh2mwvSVYONPgY/QYTZet0rJSenJPObvh # Zb3+ehqffeTmNegcd4hUqlxq7g0ypuXRK/n1lkcHZ//JG5TuE66RgmwT4jzL7x1i # Q5tBnzgrd42j2XpPDmKF/ytieMx4aG3DF7GknzyB4rglIcF/Z1Pwl0c07iAmJr+L # oDyGEHVxqemUgK2AK2PUmL27C1Au3jrexYIrJszMRgYCaUFn75Bfbzhb8BgytJiB # TSjDH8ag145D4uDQDNwmjoj4sGWSwmHTxbDi0lf3epBcl2Mzkppll53viGY2QQSX # K2dgSA3MY97Hppfunl+AszOe/aSgp606GNUHg2ZgjC8WPwUEJgbrXMsb36aW8Sbb # ure420UY4Uy0wLcn0EzK2qVFB2whbYL7Cu1pvx5X/T+V50oIPgpTdyaZWrn2Ih6E # quOAxXkKgc9It95JGFz4je7W0d3U+DJ2iFVjjPxI0kiBSnUYW0v1Mc/JOGNLgmtu # w2Mfa7ugCxYd+E336iO5pQ8RxIKJ0CxKLxzcG3Z+mEJL5eVe3R35GpNfY9CEG2Pr # W5htxSmbUpfdG4YW+HLxtkpf58ydkqc9VWfgWGO/EZdEbvwq52Wr0/z/TAmCkBVD # ta+kdAddmWR9f8D60IhyTykPShHIeRJAFEh8tWQ= # SIG # End signature block |