#!powershell

# Copyright: (c) 2017, Ansible Project
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)

#Requires -Module Ansible.ModuleUtils.Legacy

$params = Parse-Args -arguments $args -supports_check_mode $true;
$check_mode = Get-AnsibleParam -obj $params -name "_ansible_check_mode" -type "bool" -default $false
$managers = Get-AnsibleParam -obj $params -name "permitted_managers"  -type "list" -default $null
$communities = Get-AnsibleParam -obj $params -name "community_strings"   -type "list" -default $null
$action_in = Get-AnsibleParam -obj $params -name "action"              -type "str"  -default "set" -ValidateSet @("set", "add", "remove")
$action = $action_in.ToLower()

$result = @{
    failed = $False
    changed = $False
    community_strings = [System.Collections.ArrayList]@()
    permitted_managers = [System.Collections.ArrayList]@()
}

# Make sure lists are modifyable
[System.Collections.ArrayList]$managers = $managers
[System.Collections.ArrayList]$communities = $communities
[System.Collections.ArrayList]$indexes = @()

# Type checking
# You would think that "$null -ne $managers" would work, but it doesn't.
# A proper type check is required. If a user provides an empty list then $managers
# is still of the correct type. If a user provides no option then $managers is $null.
If ($managers -Is [System.Collections.ArrayList] -And $managers.Count -gt 0 -And $managers[0] -IsNot [String]) {
    Fail-Json $result "Permitted managers must be an array of strings"
}

If ($communities -Is [System.Collections.ArrayList] -And $communities.Count -gt 0 -And $communities[0] -IsNot [String]) {
    Fail-Json $result "SNMP communities must be an array of strings"
}

$Managers_reg_key = "HKLM:\System\CurrentControlSet\services\SNMP\Parameters\PermittedManagers"
$Communities_reg_key = "HKLM:\System\CurrentControlSet\services\SNMP\Parameters\ValidCommunities"

ForEach ($idx in (Get-Item -LiteralPath $Managers_reg_key).Property) {
    $manager = (Get-ItemProperty -LiteralPath $Managers_reg_key).$idx
    If ($idx.ToLower() -eq '(default)') {
        continue
    }

    $remove = $False
    If ($managers -Is [System.Collections.ArrayList] -And $managers.Contains($manager)) {
        If ($action -eq "remove") {
            $remove = $True
        }
        Else {
            # Remove manager from list to add since it already exists
            $managers.Remove($manager)
        }
    }
    ElseIf ($action -eq "set" -And $managers -Is [System.Collections.ArrayList]) {
        # Will remove this manager since it is not in the set list
        $remove = $True
    }

    If ($remove) {
        $result.changed = $True
        Remove-ItemProperty -LiteralPath $Managers_reg_key -Name $idx -WhatIf:$check_mode
    }
    Else {
        # Remember that this index is in use
        $indexes.Add([int]$idx) | Out-Null
        $result.permitted_managers.Add($manager) | Out-Null
    }
}

ForEach ($community in (Get-Item -LiteralPath $Communities_reg_key).Property) {
    If ($community.ToLower() -eq '(default)') {
        continue
    }

    $remove = $False
    If ($communities -Is [System.Collections.ArrayList] -And $communities.Contains($community)) {
        If ($action -eq "remove") {
            $remove = $True
        }
        Else {
            # Remove community from list to add since it already exists
            $communities.Remove($community)
        }
    }
    ElseIf ($action -eq "set" -And $communities -Is [System.Collections.ArrayList]) {
        # Will remove this community since it is not in the set list
        $remove = $True
    }

    If ($remove) {
        $result.changed = $True
        Remove-ItemProperty -LiteralPath $Communities_reg_key -Name $community -WhatIf:$check_mode
    }
    Else {
        $result.community_strings.Add($community) | Out-Null
    }
}

If ($action -eq "remove") {
    Exit-Json $result
}

# Add managers that don't already exist
$next_index = 0
If ($managers -Is [System.Collections.ArrayList]) {
    ForEach ($manager in $managers) {
        While ($True) {
            $next_index = $next_index + 1
            If (-Not $indexes.Contains($next_index)) {
                $result.changed = $True
                New-ItemProperty -LiteralPath $Managers_reg_key -Name $next_index -Value "$manager" -WhatIf:$check_mode | Out-Null
                $result.permitted_managers.Add($manager) | Out-Null
                break
            }
        }
    }
}

# Add communities that don't already exist
If ($communities -Is [System.Collections.ArrayList]) {
    ForEach ($community in $communities) {
        $result.changed = $True
        New-ItemProperty -LiteralPath $Communities_reg_key -Name $community -PropertyType DWord -Value 4 -WhatIf:$check_mode | Out-Null
        $result.community_strings.Add($community) | Out-Null
    }
}

Exit-Json $result