Public/Add-RabbitMQPermission.ps1
|
<# .Synopsis Adds permissions to virtual host for a user. .DESCRIPTION The Add-RabbitMQPermission cmdlet allows to add user permissions to virtual host. To add permissions to remote server you need to provide -HostName. The cmdlet is using REST Api provided by RabbitMQ Management Plugin. For more information go to: https://www.rabbitmq.com/management.html To support requests using default virtual host (/), the cmdlet will temporarily disable UnEscapeDotsAndSlashes flag on UriParser. For more information check get-help about_UnEsapingDotsAndSlashes. .EXAMPLE Add-RabbitMQPermission -VirtualHost '/' -User Admin -Configure .* -Read .* -Write .* Add configure, read and write permissions for user Admin to default virtual host (/). .EXAMPLE Add-RabbitMQPermission -HostName rabbitmq.server.com '/' Admin .* .* .* Add configure, read and write permissions for user Admin to default virtual host (/) on server rabbitmq.server.com. This command uses positional parameters. .INPUTS You can pipe VirtualHost, User, Configure, Read, Write and HostName to this cmdlet. .LINK https://www.rabbitmq.com/management.html - information about RabbitMQ management plugin. #> function Add-RabbitMQPermission { [CmdletBinding(SupportsShouldProcess=$true, ConfirmImpact="Medium")] Param ( # Virtual host to set permission for. [parameter(Mandatory=$false, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=0)] [Alias("vhost", "vh")] [string]$VirtualHost = $defaultVirtualhost, # Name of user to set permission for. [parameter(Mandatory=$true, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=1)] [string]$User, # Configure permission regexp. [parameter(Mandatory=$true, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=2)] [string]$Configure, # Read permission regexp. [parameter(Mandatory=$true, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=3)] [string]$Read, # Write permission regexp. [parameter(Mandatory=$true, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=4)] [string]$Write, # Name of the computer hosting RabbitMQ server. Defalut value is localhost. [parameter(ValueFromPipelineByPropertyName=$true)] [Alias("HostName", "hn", "cn")] [string]$BaseUri = $defaultComputerName, # Credentials to use when logging to RabbitMQ server. [Parameter(Mandatory=$false)] [PSCredential]$Credentials = $defaultCredentials ) Begin { $p = Get-RabbitMQPermission -BaseUri $BaseUri -Credentials $Credentials -VirtualHost $VirtualHost -User $User if ($p) { throw "Permissions to virtual host $VirtualHost for user $User already exist. To change permissions use Set-RabbitMQPermission cmdlet." } $cnt = 0 } Process { if ($pscmdlet.ShouldProcess("server: $BaseUri", "Create permission to virtual host $VirtualHost for user $User : $Configure, $Read $Write")) { $url = Join-Parts $BaseUri "/api/permissions/$([System.Web.HttpUtility]::UrlEncode($VirtualHost))/$([System.Web.HttpUtility]::UrlEncode($User))" $body = @{ 'configure' = $Configure 'read' = $Read 'write' = $Write } | ConvertTo-Json $result = Invoke-RestMethod $url -Credential $Credentials -AllowEscapedDotsAndSlashes -DisableKeepAlive -ErrorAction Continue -Method Put -ContentType "application/json" -Body $body Write-Verbose "Created permission to $VirtualHost for $User : $Configure, $Read, $Write" $cnt++ } } End { if ($cnt -gt 1) { Write-Verbose "Created $cnt permissions." } } } |