TMA-GITLAB-1.2.3
Ensure repository deletion is limited to specific users
Opis
Ensure only a limited number of trusted users can delete repositories. Restricting the ability to delete repositories protects the organization from intentional and unintentional data loss. This ensures that users cannot delete repositories or cause other potential damage — whether by accident or due to their account being hacked — unless they have the correct privileges.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Verify that only a limited number of trusted users can delete repositories by performing either of the following steps: - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - If there are minimum number of members with Owner/Maintainer role in the list, you are compliant.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Enforce repository deletion by a few trusted and responsible users only by performing either of the following steps: - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - Next to the project member you want to remove, select Remove member.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- devsecopsgitlab
- Referenca
- CIS GitLab Benchmark v1.0.1 - 1.2.3 Ensure repository deletion is limited to specific users