Script Repository

$startDateParam = "param-AddToGroupDate" # TODO: modify me
$endDateParam = "param-RemoveFromGroupDate" # TODO: modify me
$groupsParam = "param-Groups" # TODO: modify me
$groupsParamSeparator = ";" # TODO: modify me
$memberListProperty = "adm-CustomAttributeTextMultiValue1" # TODO: modify me

# Get parameter values
$groupsToAdd = $Context.GetParameterValue($groupsParam)
$startDate = $Context.Arguments.GetParameterValueAsIs($startDateParam)
$endDate = $Context.Arguments.GetParameterValueAsIs($endDateParam)

# Check dates
$addToGroup = $False
$currentDate = [DateTime]::UtcNow
if ($currentDate -gt $endDate)
{
    $Context.LogMessage("The specified date for removing the users from groups has already expired.", "Warning")
    return
}
elseif ($startDate -gt $endDate)
{
    $Context.LogMessage("The specified date for adding the user to groups is invalid.", "Warning")
    return
}
elseif ($currentDate -gt $startDate)
{
    $startDate = $currentDate
    $addToGroup = $True
}

# Build user record
$userGuid = [Guid]"%objectGUID%"
$userPath = "Adaxes://<GUID=$userGuid>"
$userRecord = "$userPath " + $startDate.ToFileTimeUtc() + "-" + $endDate.ToFileTimeUtc()

# Update the groups
foreach ($dn in $groupsToAdd.Split($groupsParamSeparator))
{
    $group = $Context.BindToObjectByDN($dn)
    
    # Get group records
    try
    {
        $records = $group.GetEx($memberListProperty)
    }
    catch
    {
        $records = @()
    }

    # Check group records
    $addNewRecord = $True
    for ($i = 0; $i -lt $records.Length; $i++)
    {
        $record = $records[$i]
        $path = ($record | Select-String -Pattern "Adaxes\:\/\/\<GUID=.+\>").Matches[0].Value
        if ($path -ne $userPath)
        {
            continue
        }
        $record = $record.Replace($path, "").Trim()
        
        # The access to this group was already requested for this user, update dates
        $dates = $record.Split("-") | %%{[Datetime]::FromFileTimeUtc($_)}
        if ((($startDate -le $dates[0]) -and ($endDate -ge $dates[0])) -or
            (($startDate -ge $dates[0]) -and ($endDate -le $dates[1])) -or
            (($startDate -le $dates[1]) -and ($endDate -ge $dates[1])) -or
            (($startDate -le $dates[0]) -and ($endDate -ge $dates[1])))
        {
            # Update record
            $records[$i] = $userRecord
            $addNewRecord = $False
            break
        }
    }
    
    # Add a record for the user to the group
    if ($addNewRecord)
    {
        $records += $userRecord
    }

    # Update user records for the group
    $group.PutEx("ADS_PROPERTY_UPDATE", $memberListProperty, $records)
    $group.SetInfo()
    
    # Directly add to groups
    if ($addToGroup)
    {
        $group.Add($userPath)
    }
}

$memberListProperty = "adm-CustomAttributeTextMultiValue1" # TODO: modify me

function UpdateMembership($path, $operation)
{
    $isMember = $Context.TargetObject.IsMember($path)
    switch ($operation)
    {
        "Remove"
        {
            if ($isMember)
            {
                $Context.TargetObject.Remove($path)
                $objectName = $Context.GetDisplayNameFromAdsPath($path)
                $Context.LogMessage("Removed '$objectName' from group %name%", "Information")

            }
        }
        "Add"
        {
            if (-not($isMember))
            {
                $Context.TargetObject.Add($path)
                $objectName = $Context.GetDisplayNameFromAdsPath($path)
                $Context.LogMessage("Added '$objectName' to group %name%", "Information")

            }
        }
    }
}

# Get group records
try
{
    $records = $Context.TargetObject.GetEx($memberListProperty)
}
catch
{
    return # No members to add/remove
}

$currentDate = [DateTime]::UtcNow
$updateRecords = $False
for ($i = 0; $i -lt $records.Length; $i++)
{
    $record = $records[$i]
    $path = ($record | Select-String -Pattern "Adaxes\:\/\/\<GUID=.+\>").Matches[0].Value

    $record = $record.Replace($path, "").Trim()
    $dates = $record.Split("-") | %%{[Datetime]::FromFileTimeUtc($_)}
    if ($dates[1] -le $currentDate)
    {
        UpdateMembership $path "Remove"
        $records[$i] = $NULL
        $updateRecords = $True
    }
    elseif ($currentDate -ge $dates[0])
    {
        UpdateMembership $path "Add"
    }
}

if ($updateRecords)
{
    # Update records
    [System.String[]]$records = $records | ?{$_}
    $Context.TargetObject.PutEx("ADS_PROPERTY_UPDATE", $memberListProperty, $records)
    $Context.TargetObject.SetInfo()
}