vagrant-clone 0.0.1 → 0.0.3

data/cookbooks/windows/resources/pagefile.rb

@@ -0,0 +1,152 @@
+#
+# Author:: Kevin Moser (<kevin.moser@nordstrom.com>)
+# Cookbook:: windows
+# Resource:: pagefile
+#
+# Copyright:: 2012-2017, Nordstrom, Inc.
+# Copyright:: 2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :name, String, name_property: true
+property :system_managed, [true, false]
+property :automatic_managed, [true, false], default: false
+property :initial_size, Integer
+property :maximum_size, Integer
+
+include Chef::Mixin::ShellOut
+include Windows::Helper
+
+action :set do
+  pagefile = new_resource.name
+  initial_size = new_resource.initial_size
+  maximum_size = new_resource.maximum_size
+  system_managed = new_resource.system_managed
+  automatic_managed = new_resource.automatic_managed
+
+  if automatic_managed
+    set_automatic_managed unless automatic_managed?
+  else
+    unset_automatic_managed if automatic_managed?
+
+    # Check that the resource is not just trying to unset automatic managed, if it is do nothing more
+    if (initial_size && maximum_size) || system_managed
+      validate_name
+      create(pagefile) unless exists?(pagefile)
+
+      if system_managed
+        set_system_managed(pagefile) unless max_and_min_set?(pagefile, 0, 0)
+      else
+        unless max_and_min_set?(pagefile, initial_size, maximum_size)
+          set_custom_size(pagefile, initial_size, maximum_size)
+        end
+      end
+    end
+  end
+end
+
+action :delete do
+  validate_name
+  pagefile = new_resource.name
+  delete(pagefile) if exists?(pagefile)
+end
+
+action_class do
+  def validate_name
+    return if /^.:.*.sys/ =~ new_resource.name
+    raise "#{new_resource.name} does not match the format DRIVE:\\path\\file.sys for pagefiles. Example: C:\\pagefile.sys"
+  end
+
+  def exists?(pagefile)
+    @exists ||= begin
+      Chef::Log.debug("Checking if #{pagefile} exists")
+      cmd = shell_out("#{wmic} pagefileset where SettingID=\"#{get_setting_id(pagefile)}\" list /format:list", returns: [0])
+      cmd.stderr.empty? && (cmd.stdout =~ /SettingID=#{get_setting_id(pagefile)}/i)
+    end
+  end
+
+  def max_and_min_set?(pagefile, min, max)
+    @max_and_min_set ||= begin
+      Chef::Log.debug("Checking if #{pagefile} min: #{min} and max #{max} are set")
+      cmd = shell_out("#{wmic} pagefileset where SettingID=\"#{get_setting_id(pagefile)}\" list /format:list", returns: [0])
+      cmd.stderr.empty? && (cmd.stdout =~ /InitialSize=#{min}/i) && (cmd.stdout =~ /MaximumSize=#{max}/i)
+    end
+  end
+
+  def create(pagefile)
+    converge_by("create pagefile #{pagefile}") do
+      cmd = shell_out("#{wmic} pagefileset create name=\"#{win_friendly_path(pagefile)}\"")
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def delete(pagefile)
+    converge_by("remove pagefile #{pagefile}") do
+      cmd = shell_out("#{wmic} pagefileset where SettingID=\"#{get_setting_id(pagefile)}\" delete")
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def automatic_managed?
+    @automatic_managed ||= begin
+      Chef::Log.debug('Checking if pagefiles are automatically managed')
+      cmd = shell_out("#{wmic} computersystem where name=\"%computername%\" get AutomaticManagedPagefile /format:list")
+      cmd.stderr.empty? && (cmd.stdout =~ /AutomaticManagedPagefile=TRUE/i)
+    end
+  end
+
+  def set_automatic_managed
+    converge_by('set pagefile to Automatic Managed') do
+      cmd = shell_out("#{wmic} computersystem where name=\"%computername%\" set AutomaticManagedPagefile=True")
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def unset_automatic_managed
+    converge_by('set pagefile to User Managed') do
+      cmd = shell_out("#{wmic} computersystem where name=\"%computername%\" set AutomaticManagedPagefile=False")
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def set_custom_size(pagefile, min, max)
+    converge_by("set #{pagefile} to InitialSize=#{min} & MaximumSize=#{max}") do
+      cmd = shell_out("#{wmic} pagefileset where SettingID=\"#{get_setting_id(pagefile)}\" set InitialSize=#{min},MaximumSize=#{max}", returns: [0])
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def set_system_managed(pagefile) # rubocop: disable Style/AccessorMethodName
+    converge_by("set #{pagefile} to System Managed") do
+      cmd = shell_out("#{wmic} pagefileset where SettingID=\"#{get_setting_id(pagefile)}\" set InitialSize=0,MaximumSize=0", returns: [0])
+      check_for_errors(cmd.stderr)
+    end
+  end
+
+  def get_setting_id(pagefile)
+    pagefile = win_friendly_path(pagefile)
+    pagefile = pagefile.split('\\')
+    "#{pagefile[1]} @ #{pagefile[0]}"
+  end
+
+  def check_for_errors(stderr)
+    Chef::Log.fatal(stderr) unless stderr.empty?
+  end
+
+  def wmic
+    @wmic ||= begin
+      locate_sysnative_cmd('wmic.exe')
+    end
+  end
+end

data/cookbooks/windows/resources/path.rb

@@ -0,0 +1,54 @@
+#
+# Author:: Paul Morton (<pmorton@biaprotect.com>)
+# Cookbook:: windows
+# Resource:: path
+#
+# Copyright:: 2011-2017, Business Intelligence Associates, Inc
+# Copyright:: 2017, Chef Software, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :path, String, name_property: true
+
+include Windows::Helper
+
+action :add do
+  env 'path' do
+    action :modify
+    delim ::File::PATH_SEPARATOR
+    value new_resource.path.tr('/', '\\')
+    notifies :run, "ruby_block[fix ruby ENV['PATH']]", :immediately
+  end
+
+  # The windows Env provider does not correctly expand variables in
+  # the PATH environment variable. Ruby expects these to be expanded.
+  # This is a temporary fix for that.
+  #
+  # Follow at https://github.com/chef/chef/pull/1876
+  #
+  ruby_block "fix ruby ENV['PATH']" do
+    block do
+      ENV['PATH'] = expand_env_vars(ENV['PATH'])
+    end
+    action :nothing
+  end
+end
+
+action :remove do
+  env 'path' do
+    action :delete
+    delim ::File::PATH_SEPARATOR
+    value new_resource.path.tr('/', '\\')
+  end
+end

data/cookbooks/windows/resources/printer.rb

@@ -0,0 +1,103 @@
+#
+# Author:: Doug Ireton (<doug.ireton@nordstrom.com>)
+# Cookbook:: windows
+# Resource:: printer
+#
+# Copyright:: 2012-2017, Nordstrom, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# See here for more info:
+# http://msdn.microsoft.com/en-us/library/windows/desktop/aa394492(v=vs.85).aspx
+
+require 'resolv'
+
+property :device_id, String, name_property: true, required: true
+property :comment, String
+property :default, [true, false], default: false
+property :driver_name, String, required: true
+property :location, String
+property :shared, [true, false], default: false
+property :share_name, String
+property :ipv4_address, String, regex: Resolv::IPv4::Regex
+property :exists, [true, false], desired_state: true
+
+PRINTERS_REG_KEY = 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers\\'.freeze unless defined?(PRINTERS_REG_KEY)
+
+def printer_exists?(name)
+  printer_reg_key = PRINTERS_REG_KEY + name
+  Chef::Log.debug "Checking to see if this reg key exists: '#{printer_reg_key}'"
+  Registry.key_exists?(printer_reg_key)
+end
+
+load_current_value do |desired|
+  name desired.name
+  exists printer_exists?(desired.name)
+  # TODO: Set @current_resource printer properties from registry
+end
+
+action :create do
+  if @current_resource.exists
+    Chef::Log.info "#{@new_resource} already exists - nothing to do."
+  else
+    converge_by("Create #{@new_resource}") do
+      create_printer
+    end
+  end
+end
+
+action :delete do
+  if @current_resource.exists
+    converge_by("Delete #{@new_resource}") do
+      delete_printer
+    end
+  else
+    Chef::Log.info "#{@current_resource} doesn't exist - can't delete."
+  end
+end
+
+action_class do
+  def create_printer
+    # Create the printer port first
+    windows_printer_port new_resource.ipv4_address do
+    end
+
+    port_name = "IP_#{new_resource.ipv4_address}"
+
+    powershell_script "Creating printer: #{new_resource.name}" do
+      code <<-EOH
+
+        Set-WmiInstance -class Win32_Printer `
+          -EnableAllPrivileges `
+          -Argument @{ DeviceID   = "#{new_resource.device_id}";
+                      Comment    = "#{new_resource.comment}";
+                      Default    = "$#{new_resource.default}";
+                      DriverName = "#{new_resource.driver_name}";
+                      Location   = "#{new_resource.location}";
+                      PortName   = "#{port_name}";
+                      Shared     = "$#{new_resource.shared}";
+                      ShareName  = "#{new_resource.share_name}";
+                    }
+      EOH
+    end
+  end
+
+  def delete_printer
+    powershell_script "Deleting printer: #{new_resource.name}" do
+      code <<-EOH
+        $printer = Get-WMIObject -class Win32_Printer -EnableAllPrivileges -Filter "name = '#{new_resource.name}'"
+        $printer.Delete()
+      EOH
+    end
+  end
+end

data/cookbooks/windows/resources/printer_port.rb

@@ -0,0 +1,101 @@
+#
+# Author:: Doug Ireton (<doug.ireton@nordstrom.com>)
+# Cookbook:: windows
+# Resource:: printer_port
+#
+# Copyright:: 2012-2017, Nordstrom, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# See here for more info:
+# http://msdn.microsoft.com/en-us/library/windows/desktop/aa394492(v=vs.85).aspx
+
+require 'resolv'
+
+property :ipv4_address, String, name_attribute: true, required: true, regex: Resolv::IPv4::Regex
+property :port_name, String
+property :port_number, Integer, default: 9100
+property :port_description, String
+property :snmp_enabled, [true, false], default: false
+property :port_protocol, Integer, default: 1, equal_to: [1, 2]
+property :exists, [true, false], desired_state: true
+
+PORTS_REG_KEY = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port\Ports\\'.freeze unless defined?(PORTS_REG_KEY)
+
+def port_exists?(name)
+  port_reg_key = PORTS_REG_KEY + name
+
+  Chef::Log.debug "Checking to see if this reg key exists: '#{port_reg_key}'"
+  Registry.key_exists?(port_reg_key)
+end
+
+load_current_value do |desired|
+  name desired.name
+  ipv4_address desired.ipv4_address
+  port_name desired.port_name || "IP_#{@new_resource.ipv4_address}"
+  exists port_exists?(desired.port_name)
+  # TODO: Set @current_resource port properties from registry
+end
+
+action :create do
+  if current_resource.exists
+    Chef::Log.info "#{@new_resource} already exists - nothing to do."
+  else
+    converge_by("Create #{@new_resource}") do
+      create_printer_port
+    end
+  end
+end
+
+action :delete do
+  if current_resource.exists
+    converge_by("Delete #{@new_resource}") do
+      delete_printer_port
+    end
+  else
+    Chef::Log.info "#{@current_resource} doesn't exist - can't delete."
+  end
+end
+
+action_class do
+  def create_printer_port
+    port_name = new_resource.port_name || "IP_#{new_resource.ipv4_address}"
+
+    # create the printer port using PowerShell
+    powershell_script "Creating printer port #{new_resource.port_name}" do
+      code <<-EOH
+
+        Set-WmiInstance -class Win32_TCPIPPrinterPort `
+          -EnableAllPrivileges `
+          -Argument @{ HostAddress = "#{new_resource.ipv4_address}";
+                      Name        = "#{port_name}";
+                      Description = "#{new_resource.port_description}";
+                      PortNumber  = "#{new_resource.port_number}";
+                      Protocol    = "#{new_resource.port_protocol}";
+                      SNMPEnabled = "$#{new_resource.snmp_enabled}";
+                    }
+      EOH
+    end
+  end
+
+  def delete_printer_port
+    port_name = new_resource.port_name || "IP_#{new_resource.ipv4_address}"
+
+    powershell_script "Deleting printer port: #{new_resource.port_name}" do
+      code <<-EOH
+        $port = Get-WMIObject -class Win32_TCPIPPrinterPort -EnableAllPrivileges -Filter "name = '#{port_name}'"
+        $port.Delete()
+      EOH
+    end
+  end
+end

data/cookbooks/windows/resources/share.rb

@@ -0,0 +1,291 @@
+# -*- coding: utf-8 -*-
+#
+# Author:: Sölvi Páll Ásgeirsson (<solvip@gmail.com>), Richard Lavey (richard.lavey@calastone.com)
+# Cookbook:: windows
+# Resource:: share
+#
+# Copyright:: 2014-2017, Sölvi Páll Ásgeirsson.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+property :share_name, String, name_property: true
+property :path, String
+property :description, String, default: ''
+property :full_users, Array, default: []
+property :change_users, Array, default: []
+property :read_users, Array, default: []
+
+include Windows::Helper
+include Chef::Mixin::PowershellOut
+
+require 'win32ole' if RUBY_PLATFORM =~ /mswin|mingw32|windows/
+
+ACCESS_FULL = 2_032_127
+ACCESS_CHANGE = 1_245_631
+ACCESS_READ = 1_179_817
+
+action :create do
+  raise 'No path property set' unless new_resource.path
+
+  if different_path?
+    unless current_resource.path.nil? || current_resource.path.empty?
+      converge_by('Removing previous share') do
+        delete_share
+      end
+    end
+    converge_by("Creating share #{current_resource.share_name}") do
+      create_share
+    end
+  end
+
+  if different_members?(:full_users) ||
+     different_members?(:change_users) ||
+     different_members?(:read_users) ||
+     different_description?
+    converge_by("Setting permissions and description for #{new_resource.share_name}") do
+      set_share_permissions
+    end
+  end
+end
+
+action :delete do
+  if !current_resource.path.nil? && !current_resource.path.empty?
+    converge_by("Deleting #{current_resource.share_name}") do
+      delete_share
+    end
+  else
+    Chef::Log.debug("#{current_resource.share_name} does not exist - nothing to do")
+  end
+end
+
+load_current_value do |desired|
+  wmi = WIN32OLE.connect('winmgmts://')
+  shares = wmi.ExecQuery("SELECT * FROM Win32_Share WHERE name = '#{desired.share_name}'")
+  existing_share = shares.Count == 0 ? nil : shares.ItemIndex(0)
+
+  description ''
+  unless existing_share.nil?
+    path existing_share.Path
+    description existing_share.Description
+  end
+
+  perms = share_permissions name
+  unless perms.nil?
+    full_users perms[:full_users]
+    change_users perms[:change_users]
+    read_users perms[:read_users]
+  end
+end
+
+def share_permissions(name)
+  wmi = WIN32OLE.connect('winmgmts://')
+  shares = wmi.ExecQuery("SELECT * FROM Win32_LogicalShareSecuritySetting WHERE name = '#{name}'")
+
+  # The security descriptor is an output parameter
+  sd = nil
+  begin
+    shares.ItemIndex(0).GetSecurityDescriptor(sd)
+    sd = WIN32OLE::ARGV[0]
+  rescue WIN32OLERuntimeError
+    Chef::Log.warn('Failed to retrieve any security information about the share.')
+  end
+
+  read = []
+  change = []
+  full = []
+
+  unless sd.nil?
+    sd.DACL.each do |dacl|
+      trustee = "#{dacl.Trustee.Domain}\\#{dacl.Trustee.Name}".downcase
+      case dacl.AccessMask
+      when ACCESS_FULL
+        full.push(trustee)
+      when ACCESS_CHANGE
+        change.push(trustee)
+      when ACCESS_READ
+        read.push(trustee)
+      else
+        Chef::Log.warn "Unknown access mask #{dacl.AccessMask} for user #{trustee}. This will be lost if permissions are updated"
+      end
+    end
+  end
+
+  {
+    full_users: full,
+    change_users: change,
+    read_users: read,
+  }
+end
+
+action_class do
+  def description_exists?(resource)
+    !resource.description.nil?
+  end
+
+  def different_description?
+    if description_exists?(new_resource) && description_exists?(current_resource)
+      new_resource.description.casecmp(current_resource.description) != 0
+    else
+      description_exists?(new_resource) || description_exists?(current_resource)
+    end
+  end
+
+  def different_path?
+    return true if current_resource.path.nil?
+    win_friendly_path(new_resource.path).casecmp(win_friendly_path(current_resource.path)) != 0
+  end
+
+  def different_members?(permission_type)
+    !(current_resource.send(permission_type.to_sym) - new_resource.send(permission_type.to_sym).map(&:downcase)).empty? &&
+      !(new_resource.send(permission_type.to_sym).map(&:downcase) - current_resource.send(permission_type.to_sym)).empty?
+  end
+
+  def find_share_by_name(name)
+    wmi = WIN32OLE.connect('winmgmts://')
+    shares = wmi.ExecQuery("SELECT * FROM Win32_Share WHERE name = '#{name}'")
+    shares.Count == 0 ? nil : shares.ItemIndex(0)
+  end
+
+  def delete_share
+    find_share_by_name(new_resource.share_name).delete
+  end
+
+  def create_share
+    raise "#{new_resource.path} is missing or not a directory" unless ::File.directory? new_resource.path
+    new_share_script = <<-EOH
+      $share = [wmiclass]"\\\\#{ENV['COMPUTERNAME']}\\root\\CimV2:Win32_Share"
+      $result=$share.Create('#{new_resource.path}',
+                            '#{new_resource.share_name}',
+                            0,
+                            16777216,
+                            '#{new_resource.description}',
+                            $null,
+                            $null)
+      exit $result.returnValue
+    EOH
+    r = powershell_out new_share_script
+    message = case r.exitstatus
+              when 2
+                '2 : Access Denied'
+              when 8
+                '8 : Unknown Failure'
+              when 9
+                '9 : Invalid Name'
+              when 10
+                '10 : Invalid Level'
+              when 21
+                '21 : Invalid Parameter'
+              when 22
+                '22 : Duplicate Share'
+              when 23
+                '23 : Redirected Path'
+              when 24
+                '24 : Unknown Device or Directory'
+              when 25
+                '25 : Net Name Not Found'
+              else
+                r.exitstatus.to_s
+              end
+
+    raise "Could not create share.  Win32_Share.create returned #{message}" if r.error?
+  end
+
+  # set_share_permissions - Enforce the share permissions as dictated by the resource attributes
+  def set_share_permissions
+    share_permissions_script = <<-EOH
+      Function New-SecurityDescriptor
+      {
+        param (
+          [array]$ACEs
+        )
+        #Create SeCDesc object
+        $SecDesc = ([WMIClass] "\\\\$env:ComputerName\\root\\cimv2:Win32_SecurityDescriptor").CreateInstance()
+
+        foreach ($ACE in $ACEs )
+        {
+          $SecDesc.DACL += $ACE.psobject.baseobject
+        }
+
+        #Return the security Descriptor
+        return $SecDesc
+      }
+
+      Function New-ACE
+      {
+        param  (
+          [string] $Name,
+          [string] $Domain,
+          [string] $Permission = "Read"
+        )
+        #Create the Trusteee Object
+        $Trustee = ([WMIClass] "\\\\$env:computername\\root\\cimv2:Win32_Trustee").CreateInstance()
+        $account = get-wmiobject Win32_Account -filter "Name like '$Name' and Domain like '$Domain'"
+        $accountSID = [WMI] "\\\\$env:ComputerName\\root\\cimv2:Win32_SID.SID='$($account.sid)'"
+
+        $Trustee.Domain = $Domain
+        $Trustee.Name = $Name
+        $Trustee.SID = $accountSID.BinaryRepresentation
+
+        #Create ACE (Access Control List) object.
+        $ACE = ([WMIClass] "\\\\$env:ComputerName\\root\\cimv2:Win32_ACE").CreateInstance()
+        switch ($Permission)
+        {
+          "Read" 		 { $ACE.AccessMask = 1179817 }
+          "Change"  {	$ACE.AccessMask = 1245631 }
+          "Full"		   { $ACE.AccessMask = 2032127 }
+          default { throw "$Permission is not a supported permission value. Possible values are 'Read','Change','Full'" }
+        }
+
+        $ACE.AceFlags = 3
+        $ACE.AceType = 0
+        $ACE.Trustee = $Trustee
+
+        $ACE
+      }
+
+      $dacl_array = @()
+
+    EOH
+    new_resource.full_users.each do |user|
+      share_permissions_script += user_to_ace(user, 'Full')
+    end
+
+    new_resource.change_users.each do |user|
+      share_permissions_script += user_to_ace(user, 'Change')
+    end
+
+    new_resource.read_users.each do |user|
+      share_permissions_script += user_to_ace(user, 'Read')
+    end
+
+    share_permissions_script += <<-EOH
+
+      $dacl = New-SecurityDescriptor -Aces $dacl_array
+
+      $share = get-wmiobject win32_share -filter 'Name like "#{new_resource.share_name}"'
+      $return = $share.SetShareInfo($null, '#{new_resource.description}', $dacl)
+      exit $return.returnValue
+    EOH
+    r = powershell_out(share_permissions_script)
+    raise "Could not set share permissions.  Win32_Share.SedtShareInfo returned #{r.exitstatus}" if r.error?
+  end
+
+  def user_to_ace(fully_qualified_user_name, access)
+    domain, user = fully_qualified_user_name.split('\\')
+    unless domain && user
+      raise "Invalid user entry #{fully_qualified_user_name}.  The user names must be specified as 'DOMAIN\\user'"
+    end
+    "\n$dacl_array += new-ace -Name '#{user}' -domain '#{domain}' -permission '#{access}'"
+  end
+end