Update Function ES_V2_CHANGE_USER_PROFILE
This commit is contained in:
@@ -1 +1,199 @@
|
|||||||
牄禗袬蒨@\蚕謨@^@
|
SET PATH *LIBL ;
|
||||||
|
|
||||||
|
CREATE OR REPLACE FUNCTION SAILPOINT.ES_V2_CHANGE_USER_PROFILE (
|
||||||
|
AUTHORIZATIONNAME VARCHAR(10) ,
|
||||||
|
TEXTDESCRIPTION VARCHAR(50) DEFAULT NULL ,
|
||||||
|
USERCLASSNAME VARCHAR(10) DEFAULT NULL ,
|
||||||
|
STATUS VARCHAR(10) DEFAULT NULL ,
|
||||||
|
SETPASSWORDTOEXPIRE VARCHAR(10) DEFAULT NULL ,
|
||||||
|
USEROWNER VARCHAR(10) DEFAULT NULL ,
|
||||||
|
GROUPPROFILENAME VARCHAR(10) DEFAULT NULL ,
|
||||||
|
ACCOUNTINGCODE VARCHAR(20) DEFAULT NULL ,
|
||||||
|
JOBDESCRIPTIONNAME VARCHAR(10) DEFAULT NULL ,
|
||||||
|
OUTPUTQUEUENAME VARCHAR(21) DEFAULT NULL ,
|
||||||
|
MESSAGEQUEUENAME VARCHAR(21) DEFAULT NULL ,
|
||||||
|
LIMITCAPABILITIES VARCHAR(10) DEFAULT NULL ,
|
||||||
|
SPECIALAUTHORITIESJSON VARCHAR(1024) DEFAULT NULL ,
|
||||||
|
HOMEDIRECTORY VARCHAR(255) DEFAULT NULL )
|
||||||
|
RETURNS CLOB(2147483647)
|
||||||
|
LANGUAGE SQL
|
||||||
|
SPECIFIC SAILPOINT.V2_ESCHGUSR
|
||||||
|
NOT DETERMINISTIC
|
||||||
|
MODIFIES SQL DATA
|
||||||
|
CALLED ON NULL INPUT
|
||||||
|
NOT FENCED
|
||||||
|
SET OPTION ALWBLK = *ALLREAD ,
|
||||||
|
ALWCPYDTA = *OPTIMIZE ,
|
||||||
|
COMMIT = *NONE ,
|
||||||
|
DBGVIEW = *SOURCE ,
|
||||||
|
DECRESULT = (31, 31, 00) ,
|
||||||
|
DLYPRP = *NO ,
|
||||||
|
DYNDFTCOL = *NO ,
|
||||||
|
DYNUSRPRF = *OWNER ,
|
||||||
|
SRTSEQ = *HEX
|
||||||
|
BEGIN
|
||||||
|
DECLARE CMD_OUTPUT CLOB ( 64 K ) DEFAULT '' ;
|
||||||
|
DECLARE CMD_STMT VARCHAR ( 2048 ) DEFAULT '' ;
|
||||||
|
DECLARE ERROR_RESPONSE CLOB ( 2 G ) DEFAULT '' ;
|
||||||
|
DECLARE SPECIALAUTHS VARCHAR ( 1000 ) ;
|
||||||
|
-- Uniform error handler - returns pre-built error JSON
|
||||||
|
DECLARE CONTINUE HANDLER FOR SQLSTATE '38001' RETURN ERROR_RESPONSE ;
|
||||||
|
-- Handle QCMD exception (38501 = external routine error)
|
||||||
|
DECLARE EXIT HANDLER FOR SQLSTATE '38501'
|
||||||
|
RETURN JSON_OBJECT (
|
||||||
|
'data' : JSON_ARRAY ( ) ,
|
||||||
|
'errors' : JSON_ARRAY ( JSON_OBJECT (
|
||||||
|
'status' : 404 ,
|
||||||
|
'message' : 'User profile not found or command failed'
|
||||||
|
) )
|
||||||
|
) ;
|
||||||
|
-- Convert JSON array to space-separated list
|
||||||
|
IF SPECIALAUTHORITIESJSON IS NOT NULL THEN
|
||||||
|
SET SPECIALAUTHS = (
|
||||||
|
SELECT LISTAGG ( TRIM ( FRAGMENT ) , ' ' )
|
||||||
|
FROM TABLE (
|
||||||
|
CISTOOLS . SPLIT_STRING (
|
||||||
|
REGEXP_REPLACE (
|
||||||
|
CAST (
|
||||||
|
SPECIALAUTHORITIESJSON AS VARCHAR ( 1000 )
|
||||||
|
CCSID 37 ) , '[\[|\]|\{|\}|\""|\,|\s+]' ,
|
||||||
|
' ' ) , ' ' )
|
||||||
|
)
|
||||||
|
WHERE FRAGMENT <> ''
|
||||||
|
AND FRAGMENT IS NOT NULL ) ;
|
||||||
|
END IF ;
|
||||||
|
-- Build the command
|
||||||
|
SET CMD_STMT = 'CHGUSRPRF USRPRF(' || TRIM ( AUTHORIZATIONNAME ) || ')' ;
|
||||||
|
IF TEXTDESCRIPTION IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' TEXT(' ||
|
||||||
|
CISTOOLS . GET_QUOTED ( TEXTDESCRIPTION ) || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF USERCLASSNAME IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' USRCLS(' || USERCLASSNAME || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF STATUS IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' STATUS(' || STATUS || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF SETPASSWORDTOEXPIRE IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' PWDEXP(' || SETPASSWORDTOEXPIRE ||
|
||||||
|
')' ;
|
||||||
|
END IF ;
|
||||||
|
IF USEROWNER IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' OWNER(' || USEROWNER || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF GROUPPROFILENAME IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' GRPPRF(' || GROUPPROFILENAME || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF ACCOUNTINGCODE IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' ACGCDE(' || ACCOUNTINGCODE || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF JOBDESCRIPTIONNAME IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' JOBD(' || JOBDESCRIPTIONNAME || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF OUTPUTQUEUENAME IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' OUTQ(' || OUTPUTQUEUENAME || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF MESSAGEQUEUENAME IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' MSGQ(' || MESSAGEQUEUENAME || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF LIMITCAPABILITIES IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' LMTCPB(' || LIMITCAPABILITIES || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF HOMEDIRECTORY IS NOT NULL THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' HOMEDIR(' ||
|
||||||
|
CISTOOLS . GET_QUOTED ( HOMEDIRECTORY ) || ')' ;
|
||||||
|
END IF ;
|
||||||
|
IF SPECIALAUTHS IS NOT NULL
|
||||||
|
AND LENGTH ( TRIM ( SPECIALAUTHS ) ) > 0 THEN
|
||||||
|
SET CMD_STMT = CMD_STMT || ' SPCAUT(' || SPECIALAUTHS || ')' ;
|
||||||
|
END IF ;
|
||||||
|
-- Execute via QCMD and capture output
|
||||||
|
SET CMD_OUTPUT = CISTOOLS . QCMD ( CMD_STMT ) ;
|
||||||
|
-- Check if any CPF/CPD errors exist (CPF=failure, CPD=diagnostic, CPC=completio--n/success)
|
||||||
|
IF CMD_OUTPUT LIKE '%CPF%'
|
||||||
|
OR CMD_OUTPUT LIKE '%CPD%' THEN
|
||||||
|
-- Build errors array from all error lines in output
|
||||||
|
SET ERROR_RESPONSE = (
|
||||||
|
SELECT JSON_OBJECT (
|
||||||
|
'data' : JSON_ARRAY ( ) , 'errors' : JSON_ARRAYAGG (
|
||||||
|
JSON_OBJECT (
|
||||||
|
'status' :
|
||||||
|
CASE
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2204%' THEN 404
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2213%' THEN 403
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2217%' THEN 423
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2225%' THEN 403
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2203%' THEN 404
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2209%' THEN 404
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2292%' THEN 403
|
||||||
|
ELSE 500
|
||||||
|
END , 'message' :
|
||||||
|
CASE
|
||||||
|
WHEN
|
||||||
|
FRAGMENT LIKE '%CPF2204%'
|
||||||
|
THEN 'User profile not found'
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2213%' THEN
|
||||||
|
'Not authorized to change user profile'
|
||||||
|
WHEN
|
||||||
|
FRAGMENT LIKE '%CPF2217%'
|
||||||
|
THEN 'Not able to allocate user profile'
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2225%' THEN
|
||||||
|
'*SECADM required to create or change user profiles'
|
||||||
|
WHEN
|
||||||
|
FRAGMENT LIKE '%CPF2203%'
|
||||||
|
THEN 'Group profile not found'
|
||||||
|
WHEN
|
||||||
|
FRAGMENT LIKE '%CPF2209%'
|
||||||
|
THEN 'Library not found'
|
||||||
|
WHEN FRAGMENT LIKE '%CPF2292%' THEN
|
||||||
|
'User profile does not have all special authorities being granted'
|
||||||
|
ELSE TRIM ( FRAGMENT )
|
||||||
|
END
|
||||||
|
)
|
||||||
|
)
|
||||||
|
)
|
||||||
|
FROM TABLE (
|
||||||
|
CISTOOLS . SPLIT_STRING ( CMD_OUTPUT , X'25' )
|
||||||
|
) AS T
|
||||||
|
WHERE FRAGMENT LIKE '%CPF%'
|
||||||
|
OR FRAGMENT LIKE '%CPD%' ) ;
|
||||||
|
SIGNAL SQLSTATE '38001' ;
|
||||||
|
END IF ;
|
||||||
|
-- Success - return user info with specialAuthorities as array
|
||||||
|
RETURN
|
||||||
|
(
|
||||||
|
SELECT JSON_OBJECT (
|
||||||
|
'data' : JSON_ARRAY ( JSON_OBJECT (
|
||||||
|
'authorizationName' VALUE AUTHORIZATION_NAME ,
|
||||||
|
'textDescription' VALUE TEXT_DESCRIPTION ,
|
||||||
|
'userClassName' VALUE USER_CLASS_NAME ,
|
||||||
|
'status' VALUE STATUS ,
|
||||||
|
'groupProfileName' VALUE GROUP_PROFILE_NAME ,
|
||||||
|
'homeDirectory' VALUE HOME_DIRECTORY ,
|
||||||
|
'specialAuthorities' VALUE (
|
||||||
|
SELECT JSON_ARRAYAGG (
|
||||||
|
TRIM ( FRAGMENT )
|
||||||
|
)
|
||||||
|
FROM TABLE (
|
||||||
|
CISTOOLS . SPLIT_STRING (
|
||||||
|
TRIM (
|
||||||
|
CAST (
|
||||||
|
A . SPECIAL_AUTHORITIES AS VARCHAR (
|
||||||
|
528 ) CCSID 37 ) ) , ' ' )
|
||||||
|
)
|
||||||
|
WHERE TRIM ( FRAGMENT ) <> '' ) ,
|
||||||
|
'lastUsedTimestamp' VALUE LAST_USED_TIMESTAMP
|
||||||
|
) ) , 'errors' : JSON_ARRAY ( )
|
||||||
|
)
|
||||||
|
FROM QSYS2 . USER_INFO A
|
||||||
|
WHERE AUTHORIZATION_NAME = UPPER ( AUTHORIZATIONNAME ) ) ;
|
||||||
|
END ;
|
||||||
|
|
||||||
|
GRANT ALTER , EXECUTE
|
||||||
|
ON SPECIFIC FUNCTION SAILPOINT.V2_ESCHGUSR
|
||||||
|
TO AMAPICS WITH GRANT OPTION ;
|
||||||
|
|
||||||
|
GRANT EXECUTE
|
||||||
|
ON SPECIFIC FUNCTION SAILPOINT.V2_ESCHGUSR
|
||||||
|
TO PUBLIC ;
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user