mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-25 12:54:18 +00:00
refactor: rename entra_thirdparty_integrated_apps_not_allowed
This commit is contained in:
4 files changed
+15
-15
No files matched your search
File renamed without changes.
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"Provider": "microsoft365",
|
||||
"CheckID": "entra_thirdparty_integrated_apps_not_allowed",
|
||||
"CheckID": "entra_user_thirdparty_integrated_apps_not_allowed",
|
||||
"CheckTitle": "Ensure third party integrated applications are not allowed",
|
||||
"CheckType": [],
|
||||
"ServiceName": "entra",
|
||||
+1
-1
@@ -4,7 +4,7 @@ from prowler.lib.check.models import Check, CheckReportMicrosoft365
|
||||
from prowler.providers.microsoft365.services.entra.entra_client import entra_client
|
||||
|
||||
|
||||
class entra_thirdparty_integrated_apps_not_allowed(Check):
|
||||
class entra_user_thirdparty_integrated_apps_not_allowed(Check):
|
||||
"""Check if third-party integrated apps are not allowed for non-admin users in Entra.
|
||||
|
||||
This check verifies that non-admin users are not allowed to create third-party apps.
|
||||
+13
-13
@@ -10,7 +10,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
|
||||
)
|
||||
|
||||
|
||||
class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
class Test_entra_user_thirdparty_integrated_apps_not_allowed:
|
||||
def test_entra_no_authorization_policy(self):
|
||||
entra_client = mock.MagicMock
|
||||
entra_client.audited_tenant = "audited_tenant"
|
||||
@@ -21,17 +21,17 @@ class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
return_value=set_mocked_microsoft365_provider(),
|
||||
),
|
||||
mock.patch(
|
||||
"prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
new=entra_client,
|
||||
),
|
||||
):
|
||||
from prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_thirdparty_integrated_apps_not_allowed,
|
||||
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_user_thirdparty_integrated_apps_not_allowed,
|
||||
)
|
||||
|
||||
entra_client.authorization_policy = None
|
||||
|
||||
check = entra_thirdparty_integrated_apps_not_allowed()
|
||||
check = entra_user_thirdparty_integrated_apps_not_allowed()
|
||||
result = check.execute()
|
||||
assert len(result) == 0
|
||||
|
||||
@@ -47,15 +47,15 @@ class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
return_value=set_mocked_microsoft365_provider(),
|
||||
),
|
||||
mock.patch(
|
||||
"prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
new=entra_client,
|
||||
),
|
||||
):
|
||||
from prowler.providers.microsoft365.services.entra.entra_service import (
|
||||
AuthorizationPolicy,
|
||||
)
|
||||
from prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_thirdparty_integrated_apps_not_allowed,
|
||||
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_user_thirdparty_integrated_apps_not_allowed,
|
||||
)
|
||||
|
||||
role_permissions = DefaultUserRolePermissions(allowed_to_create_apps=False)
|
||||
@@ -66,7 +66,7 @@ class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
default_user_role_permissions=role_permissions,
|
||||
)
|
||||
|
||||
check = entra_thirdparty_integrated_apps_not_allowed()
|
||||
check = entra_user_thirdparty_integrated_apps_not_allowed()
|
||||
result = check.execute()
|
||||
assert len(result) == 1
|
||||
assert result[0].status == "PASS"
|
||||
@@ -91,15 +91,15 @@ class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
return_value=set_mocked_microsoft365_provider(),
|
||||
),
|
||||
mock.patch(
|
||||
"prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
|
||||
new=entra_client,
|
||||
),
|
||||
):
|
||||
from prowler.providers.microsoft365.services.entra.entra_service import (
|
||||
AuthorizationPolicy,
|
||||
)
|
||||
from prowler.providers.microsoft365.services.entra.entra_thirdparty_integrated_apps_not_allowed.entra_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_thirdparty_integrated_apps_not_allowed,
|
||||
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
|
||||
entra_user_thirdparty_integrated_apps_not_allowed,
|
||||
)
|
||||
|
||||
role_permissions = DefaultUserRolePermissions(allowed_to_create_apps=True)
|
||||
@@ -110,7 +110,7 @@ class Test_entra_thirdparty_integrated_apps_not_allowed:
|
||||
default_user_role_permissions=role_permissions,
|
||||
)
|
||||
|
||||
check = entra_thirdparty_integrated_apps_not_allowed()
|
||||
check = entra_user_thirdparty_integrated_apps_not_allowed()
|
||||
result = check.execute()
|
||||
assert len(result) == 1
|
||||
assert result[0].status == "FAIL"
|
||||
Reference in new issue
Block a user