Repository navigation
Conversation
Synced from CyberDrain/CIPP@47d79bf
…end/dev/eslint-config-next-16.3.5 chore(deps-dev): bump eslint-config-next from 16.3.4 to 16.3.5 in /frontend Synced from CyberDrain/CIPP@ae564fb
…end/dev/msw-storybook-addon-3.0.3 chore(deps-dev): bump msw-storybook-addon from 3.0.0 to 3.0.3 in /frontend Synced from CyberDrain/CIPP@265c57a
…end/dev/axios-1.20.0 chore(deps): bump axios from 1.18.1 to 1.20.0 in /frontend Synced from CyberDrain/CIPP@6b2d3b6
…nt-names Feat: Show Group Assignment Friendly Name on Windows Autopilot Profile Synced from CyberDrain/CIPP@a8392c5
…riables Feat: Add technician variables to JIT Admin templates Synced from CyberDrain/CIPP@37dae7f
Document and align ExecAccessChecks tenant behavior with the UI. Tenant access checks now treat single-tenant reads as cached by default, only force a refresh when SkipCache is set, and the Check Tenant action sends that flag so the requested tenant is rechecked explicitly. Synced from CyberDrain/CIPP@c268d3a
…butes Fix: user templates to retain custom attributes Synced from CyberDrain/CIPP@bcc5b10
Synced from CyberDrain/CIPP@190d76f
Replace MCP resource user_impersonation consent grants with resource pre-authorization so client setup works reliably even when user consent is disabled. Also split managed and custom redirect URIs into public vs web buckets across the API and UI, add the localhost callback, and cover the new auth flow with tests and OpenAPI updates. Synced from CyberDrain/CIPP@4ed7372
Add relatedQueryKeys to enable/disable feature actions so Features, featureFlags, and authmecipp queries refresh after toggling a feature. Synced from CyberDrain/CIPP@be4379c
…ing or scenario lists A tenant that fails the licence gate returned situations and excluded as a single null, which crashed the situations page reading .group. The endpoint now filters nulls and every simulator page drops null entries before rendering. Synced from CyberDrain/CIPP@0e90a6c
Replace full in-memory Intune and Defender TVM export processing with streaming aggregation so cache jobs and vulnerability endpoints handle large report datasets without excessive allocations. Add Pester coverage for the new export reader and the updated alert/cache/endpoint behavior, and stop persisting large log query caches to localStorage to avoid quota overruns and tab OOMs. Synced from CyberDrain/CIPP@99edfed
Fix: Hide inapplicable actions for roles and mailbox rules Synced from CyberDrain/CIPP@8ae07ff
Feat: Link Alerts and Tenant card headers to their management pages Synced from CyberDrain/CIPP@ad262c4
…brary sync Adds a Clone Template action to the Conditional Access template list and hides Edit Template on synced templates, matching the Intune template list. ExecCloneTemplate now also resets the GUID column (CA templates are looked up by it, so a clone previously resolved to its original) and clears Source, since community sync matches existing templates on displayName + Source and could otherwise overwrite the clone. Synced from CyberDrain/CIPP@790d863
feat(templates): sync GitHub push state for standards/baselines Synced from CyberDrain/CIPP@791350d
feat(bec): BEC case workflow with attacker IP analysis, blast radius and background containment Synced from CyberDrain/CIPP@fd9b7ea
feat(custom-tests): drive the cache explorer from the live _shape end… Synced from CyberDrain/CIPP@f4136b5
…dministration The BEC hub and case workspace now live at /identity/administration/bec and /identity/administration/bec/case, listed at the bottom of the Administration menu. Row actions, the user Compromise Remediation tab, the audit-log action URL rewrite, alert emails, the Hudu/NinjaOne sync links and the bulk-check queue link point at the new routes. The previous /identity/bec routes, the retired reports page and the old per-user bec tab redirect there, query kept. The docs move to match (identity/administration/bec/README.md and case.md), so the help link resolves from the page path and the nav docsPath override goes. Synced from CyberDrain/CIPP@a2d1833
…o date - Add a page for Settings > BEC Remediation Defaults: where the defaults apply (containment drawer, NewRiskyUsers auto-containment, ExecBECRemediate without actions), that the audit-log alert action is not affected, and the built-in six. Add its card to the General settings page docs and SUMMARY. - Rewrite the BEC hub page docs for Start investigation, the All runs / By user views, their columns and the renamed actions. - Case page: containment preselection follows the configurable defaults, add the phishing-sender and sharing-link actions, correct the legacy protocol default (SMTP AUTH is on), fix the bulk action name, the intro that said opening the page starts a run, and the self-anchors broken by the rename. - NewRiskyUsers alert description listed OneDrive sharing as a default action; the built-in set blocks legacy protocols, and it is configurable. Synced from CyberDrain/CIPP@e480e93
…folders - Added support for creating channels and folders in Teams sites during template deployment. - Updated the deployment logic to handle new parameters for channels and folders. - Introduced new functions for creating channels and folders in SharePoint. - Enhanced the frontend to accommodate channel and folder configurations in site templates. - Updated JSON schema to include definitions for channels and folders, ensuring proper validation. Synced from CyberDrain/CIPP@47de5ae
…ze links small - vulnerability items carry Id = CVE, so the lifecycle stops treating every CVE as new each run - snooze links carry only the field the snooze hashes, not the whole item - snooze link HTML is collected in a list instead of grown with += Synced from CyberDrain/CIPP@f854724
Fix: Default service health tabs to live data Synced from CyberDrain/CIPP@eb0b6e2
…history - AllTenants tenant view lists every tenant's alignment - standard drawer lists tenants with row and bulk actions and opens each tenant's deviation details - tenant view no longer reads run history per row; drawers load it on open - historic view pages server-side with standard, outcome, event type and time filters - tenant override resolves instance standards; bulk actions need every selected row to qualify Fixes #1009 Synced from CyberDrain/CIPP@b12f846
- standard trends cover the last 30 days - baseline trend charts use a date axis so labels no longer overlap Synced from CyberDrain/CIPP@6915b94
Add-HuduAssetLayoutField no longer forces an existing field back to its configured position; it now only enforces field_type and show_in_list, keeping the field wherever the partner moved it. New fields are still inserted in the configured order. Invoke-HuduExtensionSync's device layout check now only re-adds a field when its type differs, not its position. Tests updated to cover idempotency, ordering of newly added fields, and preservation of partner-moved fields. Closes #954 Synced from CyberDrain/CIPP@433fdf5
Adds support for granting/revoking Send As and Send on Behalf permissions on mail-enabled groups (Distribution List, Mail-Enabled Security, Microsoft 365). Backend: - Invoke-EditGroup builds EXO bulk requests for Add/Remove-RecipientPermission (Send As) and a single Set-DistributionGroup/Set-UnifiedGroup call per group for Send on Behalf changes, with friendlier error text when a target has no mailbox. - Invoke-ListGroups adds an opt-in sendPermissions query param that returns current Send As trustees and resolves Send on Behalf directory ids via a Graph bulk getByIds lookup, tolerating lookup failures. Frontend: - Edit group page requests sendPermissions and adds Add/Remove Send As and Send on Behalf fields, pre-filtered against current permissions. Adds matching Pester coverage for both endpoints. ref: #1014 Synced from CyberDrain/CIPP@ea4a67c
Add an "initiateOnDemandProactiveRemediation" action to Invoke-ExecDeviceAction that forwards only the selected scriptPolicyId to Graph, with Pester coverage. On the frontend, add a "Run Remediation Script" device action with a script picker, a new Remediations tab showing device health script states with a "Run Again" action, and an Action History card on the device overview tab. Closes #930 Synced from CyberDrain/CIPP@0f006a6
Add ListDevicePolicyStatus backend endpoint that queries Intune's configuration and compliance reports for a single device, matching what the Intune device page shows (settings catalog, admin templates, endpoint security). Supports report=all for both reports in one call with per-report error handling. Update the device details page to consume the new report instead of per-policy state collections, replacing per-policy cards with aggregated table cards, and add Pester tests for input validation and report row parsing. Synced from CyberDrain/CIPP@8c1e020
Synced from CyberDrain/CIPP@4dd6ed2
Synced from CyberDrain/CIPP@a898307
…s daily - 1d on usage report, Secure Score, MFA state, CIPP cache and domain analyser alerts - 1d on day-threshold alerts that scan whole tenants, and on expiry checks - 6h on low tenant alignment - drop a duplicate recommendedRunInterval on the vulnerabilities alert - the catalog test rejects repeated keys and minimums the alert form does not offer Synced from CyberDrain/CIPP@884418f
Synced from CyberDrain/CIPP@91d3dc4
…status Extends Invoke-ListDevicePolicyStatus with a new 'enrollment' report option covering enrollment configuration policies, including per-report column/orderBy overrides. report=all now returns configuration, compliance and enrollment together. Updates OpenAPI docs, tests and the MEM device page to display enrollment configurations alongside compliance and configuration policies. Synced from CyberDrain/CIPP@a797ae7
Adds a Release field to the BEC containment action catalog (Reverse/Keep/Manual) describing how each action should be undone, and a new ExecBECRelease endpoint backed by Invoke-CIPPBecRelease that reverses sign-in blocks, mailbox protocol restrictions, mobile device blocks, disabled registered devices and targeted Conditional Access policies for a case, while leaving attacker cleanup in place and flagging non-reversible actions for manual review. Invoke-CIPPBecContainment now records pre-change mailbox protocol settings and device block lists so a release can restore prior state accurately, and Set-CIPPMobileDevice clears the opposite allow/block list entry when toggling quarantine. Adds a "Release user" action to the BEC remediation history UI with a confirmation step requiring the user's UPN, plus corresponding Pester and endpoint tests. Closes #887 Synced from CyberDrain/CIPP@da477b3
…ng from the policy builder Synced from CyberDrain/CIPP@07d9174
…g bulk selections Synced from CyberDrain/CIPP@dc36e6e
…he cache is skipped Synced from CyberDrain/CIPP@2b47bcb
- Save to Azure, MCP registration and the auth warmup no longer skip clients stored with Enabled as 'True' - Get-CippApiClient returns Enabled as a bool so the unsaved-changes check matches Synced from CyberDrain/CIPP@0141702
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )