fix: Intune policy template tweaks

Disable edit template for library synced templates
Edit name/description will create a new template if synced
Add clone template function
Preserve package on edit template name

Author: JohnDuprey

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecCloneTemplate.ps1

@@ -0,0 +1,63 @@
+function Invoke-ExecCloneTemplate {
+    <#
+    .FUNCTIONALITY
+        Entrypoint,AnyTenant
+    .ROLE
+        CIPP.Core.ReadWrite
+    #>
+    param(
+        $Request,
+        $TriggerMetadata
+    )
+
+    $GUID = $Request.Query.GUID ?? $Request.Body.GUID
+    $Type = $Request.Query.Type ?? $Request.Body.Type
+
+    if ($GUID -and $Type) {
+        $Table = Get-CIPPTable -tablename templates
+        $Template = Get-CIPPAzDataTableEntity @Table -Filter "PartitionKey eq '$Type' and RowKey eq '$GUID'"
+
+        if ($Template) {
+            $NewGuid = [guid]::NewGuid().ToString()
+            $Template.RowKey = $NewGuid
+            $Template.JSON = $Template.JSON -replace $GUID, $NewGuid
+            $Template.Package = $null
+            $Template.SHA = $null
+            try {
+                Add-CIPPAzDataTableEntity @Table -Entity $Template
+                $body = @{
+                    Results = @{
+                        state      = 'success'
+                        resultText = 'Template cloned successfully'
+                    }
+                }
+            } catch {
+                $body = @{
+                    Results = @{
+                        state      = 'error'
+                        resultText = 'Failed to clone template'
+                        details    = Get-CIPPException -Exception $_
+                    }
+                }
+            }
+        } else {
+            $body = @{
+                Results = @{
+                    state      = 'error'
+                    resultText = 'Template not found'
+                }
+            }
+        }
+    } else {
+        $body = @{
+            Results = @{
+                state      = 'error'
+                resultText = 'GUID or Type not provided'
+            }
+        }
+    }
+    return ([HttpResponseContext]@{
+            StatusCode = [HttpStatusCode]::OK
+            Body       = $body
+        })
+}

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecEditTemplate.ps1

@@ -17,15 +17,30 @@ function Invoke-ExecEditTemplate {
 
         if ($Type -eq 'IntuneTemplate') {
             Write-Host 'Intune Template'
-            $OriginalTemplate = Get-CIPPAzDataTableEntity @Table -Filter "PartitionKey eq 'IntuneTemplate' and RowKey eq '$GUID'"
-            $OriginalJSON = $OriginalTemplate.JSON
-            $OriginalTemplate = ($OriginalJSON | ConvertFrom-Json -Depth 100)
+            $Template = Get-CIPPAzDataTableEntity @Table -Filter "PartitionKey eq 'IntuneTemplate' and RowKey eq '$GUID'"
+            $OriginalJSON = $Template.JSON
+
+            if ($Template.SHA) {
+                $NewGuid = [guid]::NewGuid().ToString()
+            } else {
+                $NewGuid = $GUID
+            }
             if ($Request.Body.parsedRAWJson) {
                 $RawJSON = ConvertTo-Json -Compress -Depth 100 -InputObject $Request.Body.parsedRAWJson
             } else {
                 $RawJSON = $OriginalJSON
             }
-            Set-CIPPIntuneTemplate -RawJSON $RawJSON -GUID $GUID -DisplayName $Request.Body.displayName -Description $Request.Body.description -templateType $OriginalTemplate.Type -Headers $Request.Headers
+
+            $IntuneTemplate = @{
+                GUID         = $NewGuid
+                RawJson      = $RawJSON
+                DisplayName  = $Request.Body.displayName
+                Description  = $Request.Body.description
+                templateType = $Template.Type
+                Package      = $Template.Package
+                Headers      = $Request.Headers
+            }
+            Set-CIPPIntuneTemplate @IntuneTemplate
         } else {
             $Table.Force = $true
             Add-CIPPAzDataTableEntity @Table -Entity @{

Modules/CIPPCore/Public/Set-CIPPIntuneTemplate.ps1

@@ -6,6 +6,7 @@ function Set-CIPPIntuneTemplate {
         $DisplayName,
         $Description,
         $templateType,
+        $Package,
         $Headers
     )
     Write-Host "Received $DisplayName, $Description, $RawJSON, $templateType"
@@ -25,6 +26,7 @@ function Set-CIPPIntuneTemplate {
         JSON         = "$object"
         RowKey       = "$GUID"
         GUID         = "$GUID"
+        Package      = "$Package"
         PartitionKey = 'IntuneTemplate'
     }
     Write-LogMessage -Headers $Headers -API $APINAME -message "Created intune policy template named $($Request.body.displayname) with GUID $GUID" -Sev 'Debug'