xWebAdministration

1.7.0.0

DSCResources/MSFT_xIisFeatureDelegation/MSFT_xIisFeatureDelegation.psm1

######################################################################################
# DSC Resource for IIS Server level Feature Delegation
######################################################################################

data LocalizedData
{
    # culture="en-US"
    ConvertFrom-StringData @'
NoWebAdministrationModule=Please ensure that WebAdministration module is installed.
UnableToGetConfig=Unable to get configuration data for '{0}'
ChangedMessage=Changed overrideMode for '{0}' to {1}
'@
}

######################################################################################
# The Get-TargetResource cmdlet.
# This function will get the Mime type for a file extension
######################################################################################
function Get-TargetResource
{
  [OutputType([Hashtable])]
    param
    (        
        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [String]$SectionName,

        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [ValidateSet("Allow", "Deny")]
        [String]$OverrideMode
    )
    
    CheckIISPoshModule

    [string]$oMode = GetOverrideMode -section $SectionName

    if ($oMode -eq $null)
    {
        $ensureResult = "Absent";
    }
    else
    {        
        if ($oMode -eq $OverrideMode)
        {
            $ensureResult = "Present"
        }
        else
        {
            $ensureResult = "Absent";
        }
    }

    # in case the section has not been found, $oMode will be $null
    $getTargetResourceResult = @{SectionName = $SectionName
                                OverrideMode = $oMode
                                      Ensure = $ensureResult}

    
    return $getTargetResourceResult
}

######################################################################################
# The Set-TargetResource cmdlet.
# This function set the OverrideMode for a given section if not already correct
######################################################################################
function Set-TargetResource
{
    param
    (    
        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [String]$SectionName,

        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [ValidateSet("Allow", "Deny")]
        [String]$OverrideMode
    )

    CheckIISPoshModule
    [string]$oMode = GetOverrideMode -section $SectionName


    if ($oMode -eq "Allow" -and $OverrideMode -eq "Deny")
    {
         Set-webconfiguration -Location "" -Filter "/system.webServer/$SectionName" -PSPath "machine/webroot/apphost" -metadata overrideMode -value Deny
         Write-Verbose($($LocalizedData.ChangedMessage) -f $SectionName,"Deny")
    }
    elseif ($oMode -eq "Deny" -and $OverrideMode -eq "Allow")
    {
         Set-webconfiguration -Location "" -Filter "/system.webServer/$SectionName" -PSPath "machine/webroot/apphost" -metadata overrideMode -value Allow
         Write-Verbose($($LocalizedData.ChangedMessage) -f $SectionName,"Allow")
    }
}

######################################################################################
# The Test-TargetResource cmdlet.
# This will test if the given section has the required OverrideMode
######################################################################################
function Test-TargetResource
{
    [OutputType([System.Boolean])]
    param
    (    
        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [String]$SectionName,

        [Parameter(Mandatory)]
        [ValidateNotNullOrEmpty()]
        [ValidateSet("Allow", "Deny")]
        [String]$OverrideMode
    )

    CheckIISPoshModule

    [string]$oMode = GetOverrideMode -section $SectionName

    if ($oMode -eq $OverrideMode)
    {
        # in this case we have our desired state
        return $true
    }
    else
    {
        # state doesn't match or doesn't exist
        return $false
    }       
}

Function CheckIISPoshModule
{
    # Check if WebAdministration module is present for IIS cmdlets
    if(!(Get-Module -ListAvailable -Name WebAdministration))
    {
        Throw $LocalizedData.NoWebAdministrationModule
    }
}

Function GetOverrideMode([string]$section)
{
    $errorMessage = $($LocalizedData.UnableToGetConfig) -f $section
    if ((Get-WebConfiguration -Location "" -Filter /system.webServer/$section).count -eq 0)
    {        
        Throw $errorMessage;
    }

    [string]$oMode = ((Get-WebConfiguration -Location "" -Filter /system.webServer/$section -metadata).Metadata).effectiveOverrideMode

    # check for a single value.
    # if $oMode is anything but Allow or Deny, we have a problem with our get-webconfiguration call
    # or the ApplicationHost.config file is corrupted, I think its worth stopping here.
    if ($oMode -notmatch "^(Allow|Deny)$")
    {
        Throw $errorMessage
    }

    return $oMode 
}

# FUNCTIONS TO BE EXPORTED
Export-ModuleMember -function Get-TargetResource, Set-TargetResource, Test-TargetResource