Ensure the access granted to each installed application is limited to the least privilege needed

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Verify that each installed integration and application has the least privilege needed. For each Project and each Group, perform the following: - Navigate to the project or group homepage - In the sidebar, select Settings > Integrations - Next to every integration, select 'Configure' - Review the integration's configuration and verify that it is limited to the least privilege needed For each Group, perform the following: - Navigate to the project or group homepage - In the sidebar, select Settings > Applications o Next to every Application, select Edit o Review the Applications configuration and verify that it is limited to the least privilege needed As an administrator, perform the following: - Navigate to the Admin Area - In the sidebar, select Applications o Next to every Application, select Edit o Review the Applications configuration and verify that it is limited to the least privilege needed - In the sidebar, select Settings > Integrations o Next to every integration, select 'Configure' o Review the integration's configuration and verify that it is limited to the least privilege needed - In the sidebar, select Overview > Users o Select each user's first name o On the users...

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Grant permissions to applications by the "least privilege" principle, meaning the lowest possible permission necessary. For any Integrations identified during the audit as needing modification: - Next to the integration, select Configure. - Edit the permissions or settings so that they grant the least possible privileges. For example, restrict the branches it can access, or the features that are enabled. - (Optionally) Select 'Test settings' - Select 'Save changes'. For any Applications identified during the audit as needing modification: - Next to the application, select 'Edit'. - Edit the permissions or settings so that they grant the least possible privileges. For example, restrict the API scopes it can use. - Select 'Save application'. If any user authorized applications were identified during the audit as having overly permissive scopes, as an administrator perform the following: - Navigate to the Admin Area - In the sidebar, select Overview > Users o Select the user's first name o On the users detail page, select 'Impersonate' o Navigate to their Preferences page o In the sidebar, select Applications o Under 'Authorized applications', re-identify the overly permissive appl...