feat: final renames and add aliases

This commit is contained in:
HugoPBrito committed 2025-03-17 11:04:44 +01:00
1 parent 2d10e4023a
commit d6dc91062c
36 files changed
+169 -124

No files matched your search

@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_admin_portals_role_limited_access",
"CheckTitle": "Ensure that only administrative roles have access to Microsoft Admin Portals",
"CheckAliases": [
"entra_admin_portals_role_limited_access"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_admin_users_sign_in_frequency_enabled",
"CheckTitle": "Ensure Sign-in frequency periodic reauthentication is enabled and properly configured.",
"CheckAliases": [
"entra_admin_users_sign_in_frequency_enabled"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_administrative_roles_have_mfa_enabled",
"CheckTitle": "Ensure multifactor authentication is enabled for all users in administrative roles.",
"CheckAliases": [
"entra_admin_mfa_enabled_for_administrative_roles"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_ensure_default_user_cannot_create_tenants",
"CheckTitle": "Ensure that 'Restrict non-admin users from creating tenants' is set to 'Yes'",
"CheckAliases": [
"entra_ensure_default_user_cannot_create_tenants"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_identity_protection_sign_in_risk_enabled",
"CheckTitle": "Ensure that Identity Protection sign-in risk policies are enabled",
"CheckAliases": [
"entra_identity_protection_sign_in_risk_enabled"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_identity_protection_user_risk_enabled",
"CheckTitle": "Ensure that Identity Protection user risk policies are enabled",
"CheckAliases": [
"entra_identity_protection_user_risk_enabled"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_capolicy_managed_device_required_for_authentication",
"CheckTitle": "Ensure that only managed devices are required for authentication",
"CheckAliases": [
"entra_managed_device_required_for_authentication"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "entra_enterpriseapp_admin_consent_workflow_enabled",
"CheckID": "entra_enterpriseapps_admin_consent_workflow_enabled",
"CheckTitle": "Ensure the admin consent workflow is enabled.",
"CheckAliases": [
"entra_admin_consent_workflow_enabled"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -4,7 +4,7 @@ from prowler.lib.check.models import Check, CheckReportMicrosoft365
from prowler.providers.microsoft365.services.entra.entra_client import entra_client
class entra_enterpriseapp_admin_consent_workflow_enabled(Check):
class entra_enterpriseapps_admin_consent_workflow_enabled(Check):
"""
Ensure the admin consent workflow is enabled in Microsoft Entra.
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "entra_dynamicgroup_for_guests_created",
"CheckID": "entra_groups_dynamicgroup_for_guests_created",
"CheckTitle": "Ensure a dynamic group for guest users is created.",
"CheckAliases": [
"entra_dynamicgroup_for_guests_created"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -4,7 +4,7 @@ from prowler.lib.check.models import Check, CheckReportMicrosoft365
from prowler.providers.microsoft365.services.entra.entra_client import entra_client
class entra_dynamicgroup_for_guests_created(Check):
class entra_groups_dynamicgroup_for_guests_created(Check):
"""
Check if a dynamic group for guest users is created in Microsoft Entra.
@@ -2,6 +2,9 @@
"Provider": "microsoft365",
"CheckID": "entra_organization_password_hash_sync_enabled",
"CheckTitle": "Ensure that password hash sync is enabled for hybrid deployments.",
"CheckAliases": [
"entra_password_hash_sync_enabled"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "entra_user_thirdparty_integrated_apps_not_allowed",
"CheckTitle": "Ensure third party integrated applications are not allowed",
"CheckID": "entra_users_thirdparty_integrated_apps_not_allowed",
"CheckTitle": "Ensure only administrators or appropriately delegated users can register third-party applications.",
"CheckAliases": [
"entra_thirdparty_integrated_apps_not_allowed"
],
"CheckType": [],
"ServiceName": "entra",
"SubServiceName": "",
@@ -4,7 +4,7 @@ from prowler.lib.check.models import Check, CheckReportMicrosoft365
from prowler.providers.microsoft365.services.entra.entra_client import entra_client
class entra_user_thirdparty_integrated_apps_not_allowed(Check):
class entra_users_thirdparty_integrated_apps_not_allowed(Check):
"""Check if third-party integrated apps are not allowed for non-admin users in Entra.
This check verifies that non-admin users are not allowed to create third-party apps.
@@ -1,6 +1,9 @@
{
"Provider": "microsoft365",
"CheckID": "sharepoint_external_sharing_managed",
"CheckID": "sharepoint_settings_external_sharing_managed",
"CheckAliases": [
"sharepoint_external_sharing_managed"
],
"CheckTitle": "Ensure SharePoint external sharing is managed through domain whitelists/blacklists.",
"CheckType": [],
"ServiceName": "sharepoint",
@@ -6,7 +6,7 @@ from prowler.providers.microsoft365.services.sharepoint.sharepoint_client import
)
class sharepoint_external_sharing_managed(Check):
class sharepoint_settings_external_sharing_managed(Check):
"""
Check if Microsoft 365 SharePoint external sharing is managed through domain whitelists/blacklists.
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "sharepoint_external_sharing_restricted",
"CheckID": "sharepoint_settings_external_sharing_restricted",
"CheckTitle": "Ensure external content sharing is restricted.",
"CheckAliases": [
"sharepoint_external_sharing_restricted"
],
"CheckType": [],
"ServiceName": "sharepoint",
"SubServiceName": "",
@@ -6,7 +6,7 @@ from prowler.providers.microsoft365.services.sharepoint.sharepoint_client import
)
class sharepoint_external_sharing_restricted(Check):
class sharepoint_settings_external_sharing_restricted(Check):
"""
Check if Microsoft 365 SharePoint restricts external sharing at organization level.
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "sharepoint_guest_sharing_restricted",
"CheckID": "sharepoint_settings_guest_sharing_restricted",
"CheckTitle": "Ensure that SharePoint guest users cannot share items they don't own.",
"CheckAliases": [
"sharepoint_guest_sharing_restricted"
],
"CheckType": [],
"ServiceName": "sharepoint",
"SubServiceName": "",
@@ -6,7 +6,7 @@ from prowler.providers.microsoft365.services.sharepoint.sharepoint_client import
)
class sharepoint_guest_sharing_restricted(Check):
class sharepoint_settings_guest_sharing_restricted(Check):
"""
Check if Microsoft 365 SharePoint guest sharing is restricted.
@@ -1,7 +1,10 @@
{
"Provider": "microsoft365",
"CheckID": "sharepoint_modern_authentication_required",
"CheckID": "sharepoint_settings_modern_authentication_required",
"CheckTitle": "Ensure modern authentication for SharePoint applications is required.",
"CheckAliases": [
"sharepoint_modern_authentication_required"
],
"CheckType": [],
"ServiceName": "sharepoint",
"SubServiceName": "",
@@ -6,7 +6,7 @@ from prowler.providers.microsoft365.services.sharepoint.sharepoint_client import
)
class sharepoint_modern_authentication_required(Check):
class sharepoint_settings_modern_authentication_required(Check):
"""
Check if Microsoft 365 SharePoint requires modern authentication.
@@ -9,7 +9,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
class Test_entra_enterpriseapps_admin_consent_workflow_enabled:
def test_admin_consent_enabled(self):
"""
Test when admin_consent_enabled is True:
@@ -23,12 +23,12 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled import (
entra_enterpriseapp_admin_consent_workflow_enabled,
from prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled import (
entra_enterpriseapps_admin_consent_workflow_enabled,
)
entra_client.admin_consent_policy = AdminConsentPolicy(
@@ -39,7 +39,7 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
)
entra_client.tenant_domain = DOMAIN
check = entra_enterpriseapp_admin_consent_workflow_enabled()
check = entra_enterpriseapps_admin_consent_workflow_enabled()
result = check.execute()
assert len(result) == 1
@@ -65,12 +65,12 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled import (
entra_enterpriseapp_admin_consent_workflow_enabled,
from prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled import (
entra_enterpriseapps_admin_consent_workflow_enabled,
)
entra_client.admin_consent_policy = AdminConsentPolicy(
@@ -81,7 +81,7 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
)
entra_client.tenant_domain = DOMAIN
check = entra_enterpriseapp_admin_consent_workflow_enabled()
check = entra_enterpriseapps_admin_consent_workflow_enabled()
result = check.execute()
assert len(result) == 1
@@ -107,12 +107,12 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled import (
entra_enterpriseapp_admin_consent_workflow_enabled,
from prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled import (
entra_enterpriseapps_admin_consent_workflow_enabled,
)
entra_client.admin_consent_policy = AdminConsentPolicy(
@@ -123,7 +123,7 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
)
entra_client.tenant_domain = DOMAIN
check = entra_enterpriseapp_admin_consent_workflow_enabled()
check = entra_enterpriseapps_admin_consent_workflow_enabled()
result = check.execute()
assert len(result) == 1
@@ -151,15 +151,15 @@ class Test_entra_enterpriseapp_admin_consent_workflow_enabled:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled.entra_client",
"prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_enterpriseapp_admin_consent_workflow_enabled.entra_enterpriseapp_admin_consent_workflow_enabled import (
entra_enterpriseapp_admin_consent_workflow_enabled,
from prowler.providers.microsoft365.services.entra.entra_enterpriseapps_admin_consent_workflow_enabled.entra_enterpriseapps_admin_consent_workflow_enabled import (
entra_enterpriseapps_admin_consent_workflow_enabled,
)
check = entra_enterpriseapp_admin_consent_workflow_enabled()
check = entra_enterpriseapps_admin_consent_workflow_enabled()
result = check.execute()
assert len(result) == 0
@@ -6,7 +6,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_entra_dynamicgroup_for_guests_created:
class Test_entra_groups_dynamicgroup_for_guests_created:
def test_no_groups(self):
"""
Test when no groups exist:
@@ -21,15 +21,15 @@ class Test_entra_dynamicgroup_for_guests_created:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created.entra_client",
"prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created import (
entra_dynamicgroup_for_guests_created,
from prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created import (
entra_groups_dynamicgroup_for_guests_created,
)
check = entra_dynamicgroup_for_guests_created()
check = entra_groups_dynamicgroup_for_guests_created()
result = check.execute()
assert len(result) == 0
@@ -46,7 +46,7 @@ class Test_entra_dynamicgroup_for_guests_created:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created.entra_client",
"prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created.entra_client",
new=entra_client,
),
):
@@ -59,11 +59,11 @@ class Test_entra_dynamicgroup_for_guests_created:
)
]
from prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created import (
entra_dynamicgroup_for_guests_created,
from prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created import (
entra_groups_dynamicgroup_for_guests_created,
)
check = entra_dynamicgroup_for_guests_created()
check = entra_groups_dynamicgroup_for_guests_created()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -88,7 +88,7 @@ class Test_entra_dynamicgroup_for_guests_created:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created.entra_client",
"prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created.entra_client",
new=entra_client,
),
):
@@ -101,11 +101,11 @@ class Test_entra_dynamicgroup_for_guests_created:
)
]
from prowler.providers.microsoft365.services.entra.entra_dynamicgroup_for_guests_created.entra_dynamicgroup_for_guests_created import (
entra_dynamicgroup_for_guests_created,
from prowler.providers.microsoft365.services.entra.entra_groups_dynamicgroup_for_guests_created.entra_groups_dynamicgroup_for_guests_created import (
entra_groups_dynamicgroup_for_guests_created,
)
check = entra_dynamicgroup_for_guests_created()
check = entra_groups_dynamicgroup_for_guests_created()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"
@@ -10,7 +10,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_entra_user_thirdparty_integrated_apps_not_allowed:
class Test_entra_users_thirdparty_integrated_apps_not_allowed:
def test_entra_no_authorization_policy(self):
entra_client = mock.MagicMock
entra_client.audited_tenant = "audited_tenant"
@@ -21,17 +21,17 @@ class Test_entra_user_thirdparty_integrated_apps_not_allowed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
"prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
entra_user_thirdparty_integrated_apps_not_allowed,
from prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed import (
entra_users_thirdparty_integrated_apps_not_allowed,
)
entra_client.authorization_policy = None
check = entra_user_thirdparty_integrated_apps_not_allowed()
check = entra_users_thirdparty_integrated_apps_not_allowed()
result = check.execute()
assert len(result) == 0
@@ -47,15 +47,15 @@ class Test_entra_user_thirdparty_integrated_apps_not_allowed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
"prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_service import (
AuthorizationPolicy,
)
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
entra_user_thirdparty_integrated_apps_not_allowed,
from prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed import (
entra_users_thirdparty_integrated_apps_not_allowed,
)
role_permissions = DefaultUserRolePermissions(allowed_to_create_apps=False)
@@ -66,7 +66,7 @@ class Test_entra_user_thirdparty_integrated_apps_not_allowed:
default_user_role_permissions=role_permissions,
)
check = entra_user_thirdparty_integrated_apps_not_allowed()
check = entra_users_thirdparty_integrated_apps_not_allowed()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"
@@ -91,15 +91,15 @@ class Test_entra_user_thirdparty_integrated_apps_not_allowed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed.entra_client",
"prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed.entra_client",
new=entra_client,
),
):
from prowler.providers.microsoft365.services.entra.entra_service import (
AuthorizationPolicy,
)
from prowler.providers.microsoft365.services.entra.entra_user_thirdparty_integrated_apps_not_allowed.entra_user_thirdparty_integrated_apps_not_allowed import (
entra_user_thirdparty_integrated_apps_not_allowed,
from prowler.providers.microsoft365.services.entra.entra_users_thirdparty_integrated_apps_not_allowed.entra_users_thirdparty_integrated_apps_not_allowed import (
entra_users_thirdparty_integrated_apps_not_allowed,
)
role_permissions = DefaultUserRolePermissions(allowed_to_create_apps=True)
@@ -110,7 +110,7 @@ class Test_entra_user_thirdparty_integrated_apps_not_allowed:
default_user_role_permissions=role_permissions,
)
check = entra_user_thirdparty_integrated_apps_not_allowed()
check = entra_users_thirdparty_integrated_apps_not_allowed()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -9,7 +9,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_sharepoint_external_sharing_managed:
class Test_sharepoint_settings_external_sharing_managed:
def test_external_sharing_invalid_mode(self):
"""
Test when sharingDomainRestrictionMode is set to an invalid value (not "allowList" ni "blockList"):
@@ -23,12 +23,12 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
sharepoint_client.settings = SharePointSettings(
@@ -41,7 +41,7 @@ class Test_sharepoint_external_sharing_managed:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 1
@@ -68,12 +68,12 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
sharepoint_client.settings = SharePointSettings(
@@ -86,7 +86,7 @@ class Test_sharepoint_external_sharing_managed:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 1
@@ -113,12 +113,12 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
sharepoint_client.settings = SharePointSettings(
@@ -131,7 +131,7 @@ class Test_sharepoint_external_sharing_managed:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 1
@@ -158,12 +158,12 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
sharepoint_client.settings = SharePointSettings(
@@ -176,7 +176,7 @@ class Test_sharepoint_external_sharing_managed:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 1
@@ -203,12 +203,12 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
sharepoint_client.settings = SharePointSettings(
@@ -221,7 +221,7 @@ class Test_sharepoint_external_sharing_managed:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 1
@@ -250,14 +250,14 @@ class Test_sharepoint_external_sharing_managed:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_managed.sharepoint_external_sharing_managed import (
sharepoint_external_sharing_managed,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_managed.sharepoint_settings_external_sharing_managed import (
sharepoint_settings_external_sharing_managed,
)
check = sharepoint_external_sharing_managed()
check = sharepoint_settings_external_sharing_managed()
result = check.execute()
assert len(result) == 0
@@ -9,7 +9,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_sharepoint_external_sharing_restricted:
class Test_sharepoint_settings_external_sharing_restricted:
def test_external_sharing_restricted(self):
"""
Test when sharingCapability is set to an allowed value (e.g. "ExternalUserSharingOnly"):
@@ -23,12 +23,12 @@ class Test_sharepoint_external_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted import (
sharepoint_external_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted import (
sharepoint_settings_external_sharing_restricted,
)
sharepoint_client.settings = SharePointSettings(
@@ -41,7 +41,7 @@ class Test_sharepoint_external_sharing_restricted:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_restricted()
check = sharepoint_settings_external_sharing_restricted()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"
@@ -66,12 +66,12 @@ class Test_sharepoint_external_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted import (
sharepoint_external_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted import (
sharepoint_settings_external_sharing_restricted,
)
sharepoint_client.settings = SharePointSettings(
@@ -84,7 +84,7 @@ class Test_sharepoint_external_sharing_restricted:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_external_sharing_restricted()
check = sharepoint_settings_external_sharing_restricted()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -111,14 +111,14 @@ class Test_sharepoint_external_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_external_sharing_restricted.sharepoint_external_sharing_restricted import (
sharepoint_external_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_external_sharing_restricted.sharepoint_settings_external_sharing_restricted import (
sharepoint_settings_external_sharing_restricted,
)
check = sharepoint_external_sharing_restricted()
check = sharepoint_settings_external_sharing_restricted()
result = check.execute()
assert len(result) == 0
@@ -9,7 +9,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_sharepoint_guest_sharing_restricted:
class Test_sharepoint_settings_guest_sharing_restricted:
def test_guest_sharing_restricted(self):
"""
Test when resharingEnabled is False:
@@ -23,12 +23,12 @@ class Test_sharepoint_guest_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted import (
sharepoint_guest_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted import (
sharepoint_settings_guest_sharing_restricted,
)
sharepoint_client.settings = SharePointSettings(
@@ -41,7 +41,7 @@ class Test_sharepoint_guest_sharing_restricted:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_guest_sharing_restricted()
check = sharepoint_settings_guest_sharing_restricted()
result = check.execute()
assert len(result) == 1
@@ -67,12 +67,12 @@ class Test_sharepoint_guest_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted import (
sharepoint_guest_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted import (
sharepoint_settings_guest_sharing_restricted,
)
sharepoint_client.settings = SharePointSettings(
@@ -85,7 +85,7 @@ class Test_sharepoint_guest_sharing_restricted:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_guest_sharing_restricted()
check = sharepoint_settings_guest_sharing_restricted()
result = check.execute()
assert len(result) == 1
@@ -113,15 +113,15 @@ class Test_sharepoint_guest_sharing_restricted:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_guest_sharing_restricted.sharepoint_guest_sharing_restricted import (
sharepoint_guest_sharing_restricted,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_guest_sharing_restricted.sharepoint_settings_guest_sharing_restricted import (
sharepoint_settings_guest_sharing_restricted,
)
check = sharepoint_guest_sharing_restricted()
check = sharepoint_settings_guest_sharing_restricted()
result = check.execute()
assert len(result) == 0
@@ -6,7 +6,7 @@ from tests.providers.microsoft365.microsoft365_fixtures import (
)
class Test_sharepoint_modern_authentication_required:
class Test_sharepoint_settings_modern_authentication_required:
def test_sharepoint_modern_authentication_disabled(self):
"""
Test when legacyAuth is False:
@@ -20,16 +20,16 @@ class Test_sharepoint_modern_authentication_required:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required import (
sharepoint_modern_authentication_required,
)
from prowler.providers.microsoft365.services.sharepoint.sharepoint_service import (
SharePointSettings,
)
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required import (
sharepoint_settings_modern_authentication_required,
)
sharepoint_client.settings = SharePointSettings(
sharingCapability="ExternalUserAndGuestSharing",
@@ -41,7 +41,7 @@ class Test_sharepoint_modern_authentication_required:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_modern_authentication_required()
check = sharepoint_settings_modern_authentication_required()
result = check.execute()
assert len(result) == 1
assert result[0].status == "PASS"
@@ -66,16 +66,16 @@ class Test_sharepoint_modern_authentication_required:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required import (
sharepoint_modern_authentication_required,
)
from prowler.providers.microsoft365.services.sharepoint.sharepoint_service import (
SharePointSettings,
)
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required import (
sharepoint_settings_modern_authentication_required,
)
sharepoint_client.settings = SharePointSettings(
sharingCapability="ExternalUserAndGuestSharing",
@@ -87,7 +87,7 @@ class Test_sharepoint_modern_authentication_required:
)
sharepoint_client.tenant_domain = DOMAIN
check = sharepoint_modern_authentication_required()
check = sharepoint_settings_modern_authentication_required()
result = check.execute()
assert len(result) == 1
assert result[0].status == "FAIL"
@@ -114,14 +114,14 @@ class Test_sharepoint_modern_authentication_required:
return_value=set_mocked_microsoft365_provider(),
),
mock.patch(
"prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required.sharepoint_client",
"prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required.sharepoint_client",
new=sharepoint_client,
),
):
from prowler.providers.microsoft365.services.sharepoint.sharepoint_modern_authentication_required.sharepoint_modern_authentication_required import (
sharepoint_modern_authentication_required,
from prowler.providers.microsoft365.services.sharepoint.sharepoint_settings_modern_authentication_required.sharepoint_settings_modern_authentication_required import (
sharepoint_settings_modern_authentication_required,
)
check = sharepoint_modern_authentication_required()
check = sharepoint_settings_modern_authentication_required()
result = check.execute()
assert len(result) == 0