Update Function ES_V2_CHANGE_USER_PROFILE
This commit is contained in:
@@ -1 +1,199 @@
|
||||
牄禗袬蒨@\蚕謨@^@
|
||||
SET PATH *LIBL ;
|
||||
|
||||
CREATE OR REPLACE FUNCTION SAILPOINT.ES_V2_CHANGE_USER_PROFILE (
|
||||
AUTHORIZATIONNAME VARCHAR(10) ,
|
||||
TEXTDESCRIPTION VARCHAR(50) DEFAULT NULL ,
|
||||
USERCLASSNAME VARCHAR(10) DEFAULT NULL ,
|
||||
STATUS VARCHAR(10) DEFAULT NULL ,
|
||||
SETPASSWORDTOEXPIRE VARCHAR(10) DEFAULT NULL ,
|
||||
USEROWNER VARCHAR(10) DEFAULT NULL ,
|
||||
GROUPPROFILENAME VARCHAR(10) DEFAULT NULL ,
|
||||
ACCOUNTINGCODE VARCHAR(20) DEFAULT NULL ,
|
||||
JOBDESCRIPTIONNAME VARCHAR(10) DEFAULT NULL ,
|
||||
OUTPUTQUEUENAME VARCHAR(21) DEFAULT NULL ,
|
||||
MESSAGEQUEUENAME VARCHAR(21) DEFAULT NULL ,
|
||||
LIMITCAPABILITIES VARCHAR(10) DEFAULT NULL ,
|
||||
SPECIALAUTHORITIESJSON VARCHAR(1024) DEFAULT NULL ,
|
||||
HOMEDIRECTORY VARCHAR(255) DEFAULT NULL )
|
||||
RETURNS CLOB(2147483647)
|
||||
LANGUAGE SQL
|
||||
SPECIFIC SAILPOINT.V2_ESCHGUSR
|
||||
NOT DETERMINISTIC
|
||||
MODIFIES SQL DATA
|
||||
CALLED ON NULL INPUT
|
||||
NOT FENCED
|
||||
SET OPTION ALWBLK = *ALLREAD ,
|
||||
ALWCPYDTA = *OPTIMIZE ,
|
||||
COMMIT = *NONE ,
|
||||
DBGVIEW = *SOURCE ,
|
||||
DECRESULT = (31, 31, 00) ,
|
||||
DLYPRP = *NO ,
|
||||
DYNDFTCOL = *NO ,
|
||||
DYNUSRPRF = *OWNER ,
|
||||
SRTSEQ = *HEX
|
||||
BEGIN
|
||||
DECLARE CMD_OUTPUT CLOB ( 64 K ) DEFAULT '' ;
|
||||
DECLARE CMD_STMT VARCHAR ( 2048 ) DEFAULT '' ;
|
||||
DECLARE ERROR_RESPONSE CLOB ( 2 G ) DEFAULT '' ;
|
||||
DECLARE SPECIALAUTHS VARCHAR ( 1000 ) ;
|
||||
-- Uniform error handler - returns pre-built error JSON
|
||||
DECLARE CONTINUE HANDLER FOR SQLSTATE '38001' RETURN ERROR_RESPONSE ;
|
||||
-- Handle QCMD exception (38501 = external routine error)
|
||||
DECLARE EXIT HANDLER FOR SQLSTATE '38501'
|
||||
RETURN JSON_OBJECT (
|
||||
'data' : JSON_ARRAY ( ) ,
|
||||
'errors' : JSON_ARRAY ( JSON_OBJECT (
|
||||
'status' : 404 ,
|
||||
'message' : 'User profile not found or command failed'
|
||||
) )
|
||||
) ;
|
||||
-- Convert JSON array to space-separated list
|
||||
IF SPECIALAUTHORITIESJSON IS NOT NULL THEN
|
||||
SET SPECIALAUTHS = (
|
||||
SELECT LISTAGG ( TRIM ( FRAGMENT ) , ' ' )
|
||||
FROM TABLE (
|
||||
CISTOOLS . SPLIT_STRING (
|
||||
REGEXP_REPLACE (
|
||||
CAST (
|
||||
SPECIALAUTHORITIESJSON AS VARCHAR ( 1000 )
|
||||
CCSID 37 ) , '[\[|\]|\{|\}|\""|\,|\s+]' ,
|
||||
' ' ) , ' ' )
|
||||
)
|
||||
WHERE FRAGMENT <> ''
|
||||
AND FRAGMENT IS NOT NULL ) ;
|
||||
END IF ;
|
||||
-- Build the command
|
||||
SET CMD_STMT = 'CHGUSRPRF USRPRF(' || TRIM ( AUTHORIZATIONNAME ) || ')' ;
|
||||
IF TEXTDESCRIPTION IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' TEXT(' ||
|
||||
CISTOOLS . GET_QUOTED ( TEXTDESCRIPTION ) || ')' ;
|
||||
END IF ;
|
||||
IF USERCLASSNAME IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' USRCLS(' || USERCLASSNAME || ')' ;
|
||||
END IF ;
|
||||
IF STATUS IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' STATUS(' || STATUS || ')' ;
|
||||
END IF ;
|
||||
IF SETPASSWORDTOEXPIRE IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' PWDEXP(' || SETPASSWORDTOEXPIRE ||
|
||||
')' ;
|
||||
END IF ;
|
||||
IF USEROWNER IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' OWNER(' || USEROWNER || ')' ;
|
||||
END IF ;
|
||||
IF GROUPPROFILENAME IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' GRPPRF(' || GROUPPROFILENAME || ')' ;
|
||||
END IF ;
|
||||
IF ACCOUNTINGCODE IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' ACGCDE(' || ACCOUNTINGCODE || ')' ;
|
||||
END IF ;
|
||||
IF JOBDESCRIPTIONNAME IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' JOBD(' || JOBDESCRIPTIONNAME || ')' ;
|
||||
END IF ;
|
||||
IF OUTPUTQUEUENAME IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' OUTQ(' || OUTPUTQUEUENAME || ')' ;
|
||||
END IF ;
|
||||
IF MESSAGEQUEUENAME IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' MSGQ(' || MESSAGEQUEUENAME || ')' ;
|
||||
END IF ;
|
||||
IF LIMITCAPABILITIES IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' LMTCPB(' || LIMITCAPABILITIES || ')' ;
|
||||
END IF ;
|
||||
IF HOMEDIRECTORY IS NOT NULL THEN
|
||||
SET CMD_STMT = CMD_STMT || ' HOMEDIR(' ||
|
||||
CISTOOLS . GET_QUOTED ( HOMEDIRECTORY ) || ')' ;
|
||||
END IF ;
|
||||
IF SPECIALAUTHS IS NOT NULL
|
||||
AND LENGTH ( TRIM ( SPECIALAUTHS ) ) > 0 THEN
|
||||
SET CMD_STMT = CMD_STMT || ' SPCAUT(' || SPECIALAUTHS || ')' ;
|
||||
END IF ;
|
||||
-- Execute via QCMD and capture output
|
||||
SET CMD_OUTPUT = CISTOOLS . QCMD ( CMD_STMT ) ;
|
||||
-- Check if any CPF/CPD errors exist (CPF=failure, CPD=diagnostic, CPC=completio--n/success)
|
||||
IF CMD_OUTPUT LIKE '%CPF%'
|
||||
OR CMD_OUTPUT LIKE '%CPD%' THEN
|
||||
-- Build errors array from all error lines in output
|
||||
SET ERROR_RESPONSE = (
|
||||
SELECT JSON_OBJECT (
|
||||
'data' : JSON_ARRAY ( ) , 'errors' : JSON_ARRAYAGG (
|
||||
JSON_OBJECT (
|
||||
'status' :
|
||||
CASE
|
||||
WHEN FRAGMENT LIKE '%CPF2204%' THEN 404
|
||||
WHEN FRAGMENT LIKE '%CPF2213%' THEN 403
|
||||
WHEN FRAGMENT LIKE '%CPF2217%' THEN 423
|
||||
WHEN FRAGMENT LIKE '%CPF2225%' THEN 403
|
||||
WHEN FRAGMENT LIKE '%CPF2203%' THEN 404
|
||||
WHEN FRAGMENT LIKE '%CPF2209%' THEN 404
|
||||
WHEN FRAGMENT LIKE '%CPF2292%' THEN 403
|
||||
ELSE 500
|
||||
END , 'message' :
|
||||
CASE
|
||||
WHEN
|
||||
FRAGMENT LIKE '%CPF2204%'
|
||||
THEN 'User profile not found'
|
||||
WHEN FRAGMENT LIKE '%CPF2213%' THEN
|
||||
'Not authorized to change user profile'
|
||||
WHEN
|
||||
FRAGMENT LIKE '%CPF2217%'
|
||||
THEN 'Not able to allocate user profile'
|
||||
WHEN FRAGMENT LIKE '%CPF2225%' THEN
|
||||
'*SECADM required to create or change user profiles'
|
||||
WHEN
|
||||
FRAGMENT LIKE '%CPF2203%'
|
||||
THEN 'Group profile not found'
|
||||
WHEN
|
||||
FRAGMENT LIKE '%CPF2209%'
|
||||
THEN 'Library not found'
|
||||
WHEN FRAGMENT LIKE '%CPF2292%' THEN
|
||||
'User profile does not have all special authorities being granted'
|
||||
ELSE TRIM ( FRAGMENT )
|
||||
END
|
||||
)
|
||||
)
|
||||
)
|
||||
FROM TABLE (
|
||||
CISTOOLS . SPLIT_STRING ( CMD_OUTPUT , X'25' )
|
||||
) AS T
|
||||
WHERE FRAGMENT LIKE '%CPF%'
|
||||
OR FRAGMENT LIKE '%CPD%' ) ;
|
||||
SIGNAL SQLSTATE '38001' ;
|
||||
END IF ;
|
||||
-- Success - return user info with specialAuthorities as array
|
||||
RETURN
|
||||
(
|
||||
SELECT JSON_OBJECT (
|
||||
'data' : JSON_ARRAY ( JSON_OBJECT (
|
||||
'authorizationName' VALUE AUTHORIZATION_NAME ,
|
||||
'textDescription' VALUE TEXT_DESCRIPTION ,
|
||||
'userClassName' VALUE USER_CLASS_NAME ,
|
||||
'status' VALUE STATUS ,
|
||||
'groupProfileName' VALUE GROUP_PROFILE_NAME ,
|
||||
'homeDirectory' VALUE HOME_DIRECTORY ,
|
||||
'specialAuthorities' VALUE (
|
||||
SELECT JSON_ARRAYAGG (
|
||||
TRIM ( FRAGMENT )
|
||||
)
|
||||
FROM TABLE (
|
||||
CISTOOLS . SPLIT_STRING (
|
||||
TRIM (
|
||||
CAST (
|
||||
A . SPECIAL_AUTHORITIES AS VARCHAR (
|
||||
528 ) CCSID 37 ) ) , ' ' )
|
||||
)
|
||||
WHERE TRIM ( FRAGMENT ) <> '' ) ,
|
||||
'lastUsedTimestamp' VALUE LAST_USED_TIMESTAMP
|
||||
) ) , 'errors' : JSON_ARRAY ( )
|
||||
)
|
||||
FROM QSYS2 . USER_INFO A
|
||||
WHERE AUTHORIZATION_NAME = UPPER ( AUTHORIZATIONNAME ) ) ;
|
||||
END ;
|
||||
|
||||
GRANT ALTER , EXECUTE
|
||||
ON SPECIFIC FUNCTION SAILPOINT.V2_ESCHGUSR
|
||||
TO AMAPICS WITH GRANT OPTION ;
|
||||
|
||||
GRANT EXECUTE
|
||||
ON SPECIFIC FUNCTION SAILPOINT.V2_ESCHGUSR
|
||||
TO PUBLIC ;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user