mirror of https://github.com/raandree/NTFSSecurity
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
42 lines
1.8 KiB
42 lines
1.8 KiB
<#
|
|
Tests the cmdlets of the module built in NTFSSecurity\bin\Release on the root folder of the system drive. The tests
|
|
only read, so they need no sandbox.
|
|
#>
|
|
[Diagnostics.CodeAnalysis.SuppressMessageAttribute(
|
|
'PSUseDeclaredVarsMoreThanAssignments', '', Justification = 'Pester shares variables between blocks.'
|
|
)]
|
|
param ()
|
|
|
|
BeforeAll {
|
|
$modulePath = Join-Path -Path $PSScriptRoot -ChildPath '..\NTFSSecurity\bin\Release\NTFSSecurity.psd1'
|
|
Import-Module -Name $modulePath -Force -ErrorAction Stop
|
|
$root = [IO.Path]::GetPathRoot($env:SystemRoot)
|
|
$sidType = [System.Security.Principal.SecurityIdentifier]
|
|
$acl = Get-Acl -LiteralPath $root
|
|
}
|
|
|
|
AfterAll {
|
|
Remove-Module -Name NTFSSecurity -Force -ErrorAction SilentlyContinue
|
|
}
|
|
|
|
# Before 5.0.0-rc4, the cmdlets read the security descriptor of the drive, a device object, instead of that of its root
|
|
# folder, so they showed other entries than Explorer, icacls, and Get-Acl (#41).
|
|
Describe 'The root folder of a drive' {
|
|
It 'Get-NTFSAccess should return the access entries of the root folder' {
|
|
$expected = @($acl.GetAccessRules($true, $true, $sidType) | ForEach-Object -Process { $_.IdentityReference.Value } | Sort-Object)
|
|
|
|
$entries = @(Get-NTFSAccess -Path $root)
|
|
|
|
@($entries | ForEach-Object -Process { $_.Account.Sid } | Sort-Object) | Should -Be $expected
|
|
}
|
|
|
|
It 'Get-NTFSSecurityDescriptor should read the DACL of the root folder' {
|
|
$sd = Get-NTFSSecurityDescriptor -Path $root
|
|
|
|
$sd.SecurityDescriptor.GetSecurityDescriptorSddlForm('Access') | Should -Be $acl.GetSecurityDescriptorSddlForm('Access')
|
|
}
|
|
|
|
It 'Get-NTFSOwner should return the owner of the root folder' {
|
|
(Get-NTFSOwner -Path $root).Owner.Sid | Should -Be $acl.GetOwner($sidType).Value
|
|
}
|
|
}
|
|
|