87 lines
3.3 KiB
PowerShell
87 lines
3.3 KiB
PowerShell
|
[CmdletBinding()]
|
||
|
|
param (
|
||
|
|
[string]
|
||
|
|
$ProjectName,
|
||
|
|
[string]
|
||
|
|
$Server
|
||
|
|
)
|
||
|
|
|
||
|
|
. .\Variables.ps1
|
||
|
|
|
||
|
|
$ret=$null
|
||
|
|
$acls=$null
|
||
|
|
$rs=$null
|
||
|
|
|
||
|
|
$projPath=$BaseDirectory+$ProjectName
|
||
|
|
Write-Host $projPath
|
||
|
|
$testFolder = Test-Path -Path $projPath -PathType Container
|
||
|
|
|
||
|
|
if($testFolder){
|
||
|
|
throw "Directory already exists. Not creating Folder or Share"
|
||
|
|
}
|
||
|
|
|
||
|
|
if($PSBoundParameters.ContainsKey("ProjectName")){
|
||
|
|
if($PSBoundParameters.ContainsKey("Server")){
|
||
|
|
$ret = New-ADGroup -Path $Projects -Server $Server -Name $ProjectName -GroupCategory Security -GroupScope Global -PassThru
|
||
|
|
#$ret = Get-ADGroup $ProjectName -SearchBase $Projects -Server $Server
|
||
|
|
$acls = . .\AddProjectACL.ps1 -ProjectName $ProjectName -Server $Server
|
||
|
|
$rs = . .\AddProjectRoles.ps1 -ProjectName $ProjectName -Server $Server
|
||
|
|
#$ret | Add-ADGroupMember -Members $acl,$r
|
||
|
|
$acls | ForEach-Object {add-ADGroupMember -Identity $ret -Members $_ -Server $Server}
|
||
|
|
$rs | ForEach-Object {Add-ADGroupMember -Identity $ret -Members $_ -Server $Server}
|
||
|
|
} else {
|
||
|
|
$ret = New-ADGroup -Path $Projects -Name $ProjectName -GroupCategory Security -GroupScope Global -PassThru
|
||
|
|
#$ret = Get-ADGroup $ProjectName -SearchBase $Projects
|
||
|
|
$acls = . .\AddProjectACL.ps1 -ProjectName $ProjectName
|
||
|
|
$rs = . .\AddProjectRoles.ps1 -ProjectName $ProjectName
|
||
|
|
#$ret | Add-ADGroupMember -Members $acl,$r
|
||
|
|
$acls | ForEach-Object {Add-ADGroupMember -Identity $ret -Members $_}
|
||
|
|
$rs | ForEach-Object {Add-ADGroupMember -Identity $ret -Members $_}
|
||
|
|
}
|
||
|
|
|
||
|
|
if($PSBoundParameters.ContainsKey("Server")){
|
||
|
|
$target = $acls | Where-Object Name -Match ".*-RW"
|
||
|
|
$member = $rs | Where-Object Name -Match ".*-RW"
|
||
|
|
Add-ADGroupMember -Identity $target -Members $member -Server $Server
|
||
|
|
$target = $acls | Where-Object Name -Match ".*-RO"
|
||
|
|
$member = $rs | Where-Object Name -Match ".*-RO"
|
||
|
|
Add-ADGroupMember -Identity $target -Members $member -Server $Server
|
||
|
|
} else {
|
||
|
|
$target = $acls | Where-Object Name -Match ".*-RW"
|
||
|
|
$member = $rs | Where-Object Name -Match ".*-RW"
|
||
|
|
Add-ADGroupMember -Identity $target -Members $member
|
||
|
|
$target = $acls | Where-Object Name -Match ".*-RO"
|
||
|
|
$member = $rs | Where-Object Name -Match ".*-RO"
|
||
|
|
Add-ADGroupMember -Identity $target -Members $member
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
$folder = New-Item -Path $projPath -ItemType Directory
|
||
|
|
|
||
|
|
$ReadTarget = $acls | Where-Object Name -Match ".*-RO"
|
||
|
|
$WriteTarget = $acls | Where-Object Name -Match ".*-RW"
|
||
|
|
Write-Host $ReadTarget.Name
|
||
|
|
Write-Host $WriteTarget.Name
|
||
|
|
|
||
|
|
$FolderACL= Get-Acl -Path $folder
|
||
|
|
|
||
|
|
$rid = $ReadTarget.Name
|
||
|
|
$wid = $WriteTarget.Name
|
||
|
|
$fsrr = "Read"
|
||
|
|
$fsrr = "Write"
|
||
|
|
$type = "Allow"
|
||
|
|
$fsarar = $rid,$fsrr,$type
|
||
|
|
$fsaraw = $wid,$fsrw,$type
|
||
|
|
|
||
|
|
$fileSystemAccessRuleR = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $fileSystemAccessRuleArgumentList
|
||
|
|
$fileSystemAccessRuleW = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $fileSystemAccessRuleArgumentList
|
||
|
|
|
||
|
|
$FolderACL.SetAccessRule($fileSystemAccessRuleR)
|
||
|
|
$FolderACL.SetAccessRule($fileSystemAccessRuleW)
|
||
|
|
|
||
|
|
return $ret
|
||
|
|
}
|
||
|
|
|
||
|
|
throw "ProjectName parameter needs to be set"
|
||
|
|
|