Detections
Analytics

MS.SHAREPOINT.3.2v1 - The allowable file and folder permissions for links SHALL be set to view only.

Information

Unauthorized changes to files can be made if permissions allow editing by anyone. By restricting permissions on links to **View** only, administrators prevent anonymous file changes.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Scroll to the section Choose expiration and permissions options for Anyone links.

4. Set the configuration items in the section These links can give these permissions.

5. Set the Files option to View.

6. Set the Folders option to View.

7. Select Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: microsoft_azure

Control ID: 6922a4ec263e4bf0935a7a4b703ed0a7f769da20af9e0b76e93ec7f73b5ddd6a