IsWritable

Indicates whether the group profile object in Active Directory is writable for the current user’s credentials.

Syntax

bool IsWritable {get;}

Property value

Returns true if the GroupUnixProfile object is writable, or false if the object is not writable.

Discussion

This property returns a value of true if the user accessing the group profile object in Active Directory has sufficient permissions to change the group profile object’s properties.

Example

The following code sample illustrates using IsWritable in a script:

...  
set objZone =
cims.GetZoneByPath("LDAP://CN=research,CN=zones,CN=centrify,CN=program
data,DC=sierra,DC=com")  
'Identify the Active Directory group  
Set objGroup =
cims.GetGroupByPath("LDAP://CN=testers,CN=groups,DC=sierra,DC=com”)   
'Get the UNIX profile for the group in the zone  
set objGroupUnixProfile = objGroupUnixProfiles.Find(objZone)  
'Check whether the object is writable  
if not objGroupUnixProfile.IsWritable then  
wScript.Echo "Denied write access. Exiting ...."  
wScript.Quit  
else  
wScript.Echo "Write permission granted. Continuing ...."  
wScript.Echo "Group Profile GID: " & objGroupUnixProfile.GID  
end if  
...