193 lines
5.7 KiB
SQL
193 lines
5.7 KiB
SQL
SET PATH *LIBL ;
|
|
|
|
CREATE OR REPLACE FUNCTION SAILPOINT.ES_CREATE_MAPICS_USER_RECORD (
|
|
ENVID CHAR(2) ,
|
|
USERNAME VARCHAR(10) ,
|
|
USERROLES VARCHAR(1000) DEFAULT NULL ,
|
|
USERDEPT VARCHAR(10) DEFAULT '' ,
|
|
USEREMPNO VARCHAR(8) DEFAULT '' )
|
|
RETURNS CLOB(2147483647)
|
|
LANGUAGE SQL
|
|
SPECIFIC SAILPOINT.ESCRTMUSR
|
|
NOT DETERMINISTIC
|
|
MODIFIES SQL DATA
|
|
CALLED ON NULL INPUT
|
|
NOT FENCED
|
|
SET OPTION ALWBLK = *ALLREAD ,
|
|
ALWCPYDTA = *OPTIMIZE ,
|
|
COMMIT = *NONE ,
|
|
DECRESULT = (31, 31, 00) ,
|
|
DYNDFTCOL = *NO ,
|
|
DYNUSRPRF = *OWNER ,
|
|
SRTSEQ = *HEX
|
|
BEGIN
|
|
DECLARE LIBL VARCHAR ( 1024 ) DEFAULT '' ;
|
|
DECLARE CUR_USR VARCHAR ( 10 ) DEFAULT '' ;
|
|
DECLARE USER_ROLES VARCHAR ( 1000 ) DEFAULT '' ;
|
|
DECLARE RTNCODE CHAR ( 1 ) DEFAULT '' ;
|
|
DECLARE HEXSTAMP CHAR ( 2 ) FOR BIT DATA DEFAULT '' ;
|
|
DECLARE CONTINUE HANDLER FOR SQLEXCEPTION
|
|
BEGIN
|
|
DECLARE V_SQLSTATE CHAR ( 5 ) ;
|
|
DECLARE V_DB2_RETURN_CODE INT ;
|
|
DECLARE V_DB2_MESSAGE_ID CHAR ( 7 ) ;
|
|
DECLARE V_ERROR_MESSAGE CLOB ( 2048 ) ;
|
|
-- Capture diagnostic info
|
|
GET DIAGNOSTICS CONDITION 1
|
|
V_DB2_RETURN_CODE = DB2_RETURNED_SQLCODE ,
|
|
V_SQLSTATE = RETURNED_SQLSTATE ,
|
|
V_ERROR_MESSAGE = MESSAGE_TEXT ,
|
|
V_DB2_MESSAGE_ID = DB2_MESSAGE_ID ;
|
|
RETURN
|
|
(
|
|
VALUES JSON_OBJECT (
|
|
'success' VALUE 'false' , 'SQLInfo' VALUE JSON_OBJECT (
|
|
'SQLState' VALUE V_SQLSTATE ,
|
|
'SQLCode' VALUE V_DB2_RETURN_CODE ,
|
|
'messageID' VALUE V_DB2_MESSAGE_ID ,
|
|
'message' VALUE V_ERROR_MESSAGE ,
|
|
'currentTimestamp' VALUE CURRENT_TIMESTAMP
|
|
)
|
|
) ) ;
|
|
END ;
|
|
SET CISTOOLS . LIBL = CISTOOLS . SET_LIBRARY_LIST ( ENVID ) ;
|
|
SET CUR_USR = CURRENT_USER ;
|
|
SET HEXSTAMP = RIGHT ( GENERATE_UNIQUE ( ) , 2 ) ;
|
|
-- Mzf0rep MERGE (this one looks correct):
|
|
MERGE INTO MZF0REP AS TARGET USING (
|
|
SELECT AUTHORIZATION_NAME AS F0BUCD ,
|
|
IFNULL ( TEXT , AUTHORIZATION_NAME ) AS F0H1TX
|
|
FROM USER_INFO
|
|
WHERE AUTHORIZATION_NAME = USERNAME
|
|
) AS SOURCE
|
|
ON TARGET . F0BUCD = SOURCE . F0BUCD
|
|
WHEN MATCHED THEN UPDATE SET F0H1TX = SOURCE . F0H1TX
|
|
WHEN NOT MATCHED THEN INSERT ( F0BUCD , F0H1TX ) VALUES (
|
|
SOURCE . F0BUCD , SOURCE . F0H1TX ) ;
|
|
MERGE INTO MZGUCPP AS TARGET USING (
|
|
SELECT *
|
|
FROM TABLE (
|
|
VALUES USERNAME
|
|
) S ( GUBUCD )
|
|
) AS SOURCE
|
|
ON TARGET . GUBUCD = SOURCE . GUBUCD
|
|
WHEN MATCHED THEN UPDATE SET ( GUAAHR , GUAMDT , GUACTM , GUAHVN ,
|
|
GUAIVN ) =
|
|
( HEXSTAMP , CISTOOLS . TO_CYMD ( ) , ZONED ( CURRENT_TIME ) , CUR_USR ,
|
|
'ESCRTMUSR' )
|
|
WHEN NOT MATCHED THEN INSERT ( GUBUCD , GUAAHR , GUALDT , GUABTM ,
|
|
GUAFVN , GUAGVN ) VALUES ( SOURCE . GUBUCD , HEXSTAMP ,
|
|
CISTOOLS . TO_CYMD ( ) , ZONED ( CURRENT_TIME ) , CUR_USR ,
|
|
'ESCRTMUSR' ) ;
|
|
MERGE INTO MZBRREP AS TARGET USING (
|
|
SELECT USERNAME AS BRBUCD , 'ACCMAPICS' AS BRSKXX , '' AS BRBTXX ,
|
|
HEXSTAMP AS BRAAHR , CISTOOLS . TO_CYMD ( ) AS BRALDT ,
|
|
ZONED ( CURRENT_TIME ) AS BRABTM , CURRENT_USER AS BRAFVN ,
|
|
'ESCRTMUSR' AS BRAGVN
|
|
FROM SYSIBM . SYSDUMMY1
|
|
) AS SOURCE
|
|
ON TARGET . BRBUCD = SOURCE . BRBUCD
|
|
AND TARGET . BRSKXX = SOURCE . BRSKXX
|
|
WHEN MATCHED THEN UPDATE SET BRBTXX = SOURCE . BRBTXX , BRAAHR =
|
|
SOURCE . BRAAHR , BRALDT =
|
|
SOURCE . BRALDT , BRABTM =
|
|
SOURCE . BRABTM , BRAFVN =
|
|
SOURCE . BRAFVN , BRAGVN =
|
|
SOURCE . BRAGVN
|
|
WHEN NOT MATCHED THEN INSERT ( BRBUCD , BRSKXX , BRBTXX , BRAAHR ,
|
|
BRALDT , BRABTM , BRAFVN , BRAGVN ) VALUES ( SOURCE . BRBUCD ,
|
|
SOURCE . BRSKXX , SOURCE . BRBTXX , SOURCE . BRAAHR , SOURCE . BRALDT ,
|
|
SOURCE . BRABTM , SOURCE . BRAFVN , SOURCE . BRAGVN ) ;
|
|
-- Esuexp MERGE
|
|
MERGE INTO ESUEXP AS TARGET USING (
|
|
VALUES ( USERNAME , USERDEPT , 'A' , '1' , USEREMPNO )
|
|
) AS SOURCE ( EXUSER , EXDEPT , EXSTAT , EXFLG1 , EXT08A )
|
|
ON TARGET . EXUSER = SOURCE . EXUSER
|
|
WHEN MATCHED THEN UPDATE SET EXDEPT = SOURCE . EXDEPT , EXSTAT =
|
|
SOURCE . EXSTAT , EXFLG1 =
|
|
SOURCE . EXFLG1 , EXT08A =
|
|
SOURCE . EXT08A
|
|
WHEN NOT MATCHED THEN INSERT ( EXUSER , EXDEPT , EXSTAT , EXFLG1 ,
|
|
EXT08A ) VALUES ( SOURCE . EXUSER , SOURCE . EXDEPT , SOURCE . EXSTAT ,
|
|
SOURCE . EXFLG1 , SOURCE . EXT08A ) ;
|
|
IF ( SELECT
|
|
CASE
|
|
WHEN COUNT ( * ) > 0 THEN '1'
|
|
ELSE '0'
|
|
END
|
|
FROM ESUSRP
|
|
WHERE EUUSER = USERNAME ) = '0' THEN
|
|
CALL SAILPOINT . CREATE_ES_USER_RECORD ( 'ADD' , 'U' , USERNAME , CUR_USR
|
|
) ;
|
|
END IF ;
|
|
|
|
IF USERROLES IS NOT NULL
|
|
AND TRIM ( USERROLES ) <> '' THEN
|
|
SET USER_ROLES = USERROLES ;
|
|
ELSE
|
|
SET USER_ROLES = 'ALUSR' ;
|
|
END IF ;
|
|
FOR SELECT DISTINCT FRAGMENT
|
|
FROM TABLE (
|
|
SELECT FRAGMENT
|
|
FROM TABLE (
|
|
CISTOOLS . SPLIT_STRING (
|
|
REGEXP_REPLACE (
|
|
CAST ( USER_ROLES AS VARCHAR ( 1000 ) CCSID 37 ) ,
|
|
'[\\\[|\]|\{|\}|\"|\,|\s+]' , ' ' ) , ' ' )
|
|
)
|
|
WHERE FRAGMENT <> ''
|
|
AND FRAGMENT IS NOT NULL
|
|
UNION ALL
|
|
SELECT *
|
|
FROM TABLE (
|
|
VALUES 'ALUSR'
|
|
)
|
|
)
|
|
DO
|
|
CALL SAILPOINT . ASSIGN_ES_USER_TO_ROLE ( CUR_USR , 'G' , FRAGMENT ,
|
|
USERNAME ) ; -- assign default
|
|
END FOR ;
|
|
RETURN
|
|
COALESCE (
|
|
JSON_OBJECT (
|
|
'success' : 'true' , 'data' VALUE (
|
|
SELECT
|
|
JSON_ARRAYAGG (
|
|
JSON_OBJECT (
|
|
'userId' VALUE RTRIM (
|
|
CAST ( EUUSER AS VARCHAR ( 10 ) CCSID 37 ) ) ,
|
|
'roles' VALUE JSON_ARRAY ( ROLESJSON FORMAT JSON )
|
|
) FORMAT JSON
|
|
) AS FINALJSON
|
|
FROM TABLE (
|
|
SELECT EUUSER ,
|
|
JSON_OBJECTAGG ( RTRIM (
|
|
CAST ( EUROLE AS VARCHAR ( 10 ) CCSID 37 ) )
|
|
VALUE RTRIM (
|
|
CAST ( EUDESC AS VARCHAR ( 50 ) CCSID 37 ) ) )
|
|
AS ROLESJSON
|
|
FROM ESUSRP
|
|
JOIN ESROLP
|
|
USING ( EUROLE )
|
|
WHERE EUUSER = USERNAME
|
|
GROUP BY EUUSER
|
|
) ) FORMAT JSON
|
|
) , JSON_OBJECT (
|
|
'success' : 'false' , 'SQLInfo' VALUE JSON_OBJECT (
|
|
'messageID' : 'SQL02000' ,
|
|
'message' : 'Requested result not found ' ,
|
|
'currentTimestamp' : CURRENT_TIMESTAMP
|
|
)
|
|
) ) ;
|
|
END ;
|
|
|
|
GRANT ALTER , EXECUTE
|
|
ON SPECIFIC FUNCTION SAILPOINT.ESCRTMUSR
|
|
TO AMAPICS WITH GRANT OPTION ;
|
|
|
|
GRANT EXECUTE
|
|
ON SPECIFIC FUNCTION SAILPOINT.ESCRTMUSR
|
|
TO PUBLIC ;
|
|
|