setup_ldap_users_from_list.groovy

import groovy.json.JsonOutput
import org.sonatype.nexus.security.role.RoleIdentifier;
import org.sonatype.nexus.security.user.User;
import org.sonatype.nexus.security.user.UserManager;
import org.sonatype.nexus.security.user.UserNotFoundException
import groovy.json.JsonSlurper

parsed_args = new JsonSlurper().parseText(args)

List<Map<String, String>> actionDetails = []
Map scriptResults = [changed: false, error: false]
scriptResults.put('action_details', actionDetails)

parsed_args.each { currentUserDef ->

    state = currentUserDef.get('state', 'present')
    Map<String, String> currentResult = [username: currentUserDef.username, state: state, roles: currentUserDef.roles.join(', ')]

    try {
        User user = security.getSecuritySystem().getUser(currentUserDef.username,"LDAP")
        authManager = security.getSecuritySystem().getAuthorizationManager(UserManager.DEFAULT_SOURCE)
        currentResult.put('status', 'roles unchanged')
        currentUserDef.roles.each { role ->
            log.info("RoleID : " + authManager.getRole(role).roleId.toString())
            Set<RoleIdentifier> existingRoles = user.getRoles()
            RoleIdentifier newRole = new RoleIdentifier("default", authManager.getRole(role).roleId);
            if (state == 'absent' && newRole in existingRoles) {
                user.removeRole(newRole)
                log.info("Role {} removed from user {}", authManager.getRole(role).roleId.toString(), user.getUserId() )
                currentResult.put('status', 'roles removed')
                scriptResults['changed'] = true
            } else if (state == 'present' && !(newRole in existingRoles)) {
                user.addRole(newRole)
                log.info("Role {} added to user {}", authManager.getRole(role).roleId.toString(), user.getUserId() )
                currentResult.put('status', 'roles updated')
                scriptResults['changed'] = true
            }
        }
        security.securitySystem.setUsersRoles(user.getUserId(), "LDAP", user.getRoles());
    } catch(UserNotFoundException e) {
        if (state == 'absent') {
            currentResult.put('status', 'absent')
        } else {
            currentResult.put('status', 'error')
            currentResult.put('error_msg', "User could not be found")
            scriptResults['error'] = true
        }
    } catch (Exception e) {
        currentResult.put('status', 'error')
        currentResult.put('error_msg', e.toString())
        scriptResults['error'] = true
    }
    scriptResults['action_details'].add(currentResult)
}

return JsonOutput.toJson(scriptResults)