001_0005 - MxAdminNotUsed

Mendix Admin userid not allowed to be MxAdmin

Rename the mendix admin userid

Metadata

authors:
- Andre Luijkx
category: Security
input: Security$ProjectSecurity.yaml
rulename: MxAdminNotUsed
rulenumber: '001_0005'
scope: package
severity: HIGH

Description

Check the mendix admin userid and should not be default value (MxAdmin)

Remediation

Rename the mendix admin userid

Test cases

package app.mendix.project_settings.mxadmin_userid
import rego.v1

# Test cases
test_allow if {
    allow with input as {"AdminUserName": "SystemAdmin"}
}
test_no_allow if {
    not allow with input as {"AdminUserName": "MxAdmin"}
}