IsWritable

Indicates whether the group profile object in Active Directory is writable for the current user’s credentials.

Syntax

bool IsWritable {get;}

Property value

Returns true if the GroupUnixProfile object is writable, or false if the object is not writable.

Discussion

This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to change the group profile object’s properties.

Example

The following code sample illustrates using IsWritable in a script:

...
set objZone = cims.GetZoneByPath("LDAP://CN=research,CN=zones,CN=centrify,CN=program data,DC=sierra,DC=com")
'Identify the Active Directory group
Set objGroup = cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”) 
'Get the UNIX profile for the group in the zone
set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone)
'Check whether the object is writable
if not objGroupUnixProfile.IsWritable then
   wScript.Echo "Denied write access. Exiting ...."
   wScript.Quit
else
   wScript.Echo "Write permission granted. Continuing ...."
   wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID
end if
...