Method: Inspec::Resources::WindowsUser#identity

Defined in:

lib/resources/user.rb

#identity(username) ⇒ Object

# File 'lib/resources/user.rb', line 416

def identity(username)
  # extract domain/user information
  account, domain = parse_windows_account(username)

  # TODO: escape content
  if !domain.nil?
    filter = "Name = '#{account}' and Domain = '#{domain}'"
  else
    filter = "Name = '#{account}' and LocalAccount = true"
  end

  script = <<-EOH
    # find user
    $user = Get-WmiObject Win32_UserAccount -filter "#{filter}"
    # get related groups
    $groups = $user.GetRelated('Win32_Group') | Select-Object -Property Caption, Domain, Name, LocalAccount, SID, SIDType, Status
    # filter user information
    $user = $user | Select-Object -Property Caption, Description, Domain, Name, LocalAccount, Lockout, PasswordChangeable, PasswordExpires, PasswordRequired, SID, SIDType, Status
    # build response object
    New-Object -Type PSObject | `
    Add-Member -MemberType NoteProperty -Name User -Value ($user) -PassThru | `
    Add-Member -MemberType NoteProperty -Name Groups -Value ($groups) -PassThru | `
    ConvertTo-Json
  EOH

  cmd = inspec.script(script)

  # cannot rely on exit code for now, successful command returns exit code 1
  # return nil if cmd.exit_status != 0, try to parse json
  begin
    params = JSON.parse(cmd.stdout)
  rescue JSON::ParserError => _e
    return nil
  end

  user = params['User']['Caption'] unless params['User'].nil?
  groups = params['Groups']
  # if groups is no array, generate one
  groups = [groups] if !groups.is_a?(Array)
  groups = groups.map { |grp| grp['Caption'] } unless params['Groups'].nil?

  {
    uid: nil,
    user: user,
    gid: nil,
    group: nil,
    groups: groups,
  }
end