assets_guardian.plugins.dolibarr.compliance

Classes

DolibarrDeactivatedUsersRule(**kwargs)	Lists disabled user accounts in Dolibarr.
DolibarrUnknownMailComplianceRule(**kwargs)	Detects Dolibarr mailboxes that do not match any employee in employees.json.

class assets_guardian.plugins.dolibarr.compliance.DolibarrDeactivatedUsersRule(**kwargs: Any)

Bases: IComplianceRule

Lists disabled user accounts in Dolibarr.

An account is considered disabled if its statut field is “0” in the Dolibarr API, which is mapped to IdentityState.INACTIVE during collection.

evaluate(entries: Iterable[Identity], config: dict[Any, Any] | None = None) → Iterable[Finding]

Inspects a list of entries to detect non-conformities.

Parameters:

• entries – List of entries (identities OR accesses) to analyze.

• config – Optional parameters (thresholds, network IPs, etc.) from YAML.

Returns:

List of detected non-conformities.

Return type:

Iterable[Finding]

property description: str

Description of the rule.

property name: str

Name of the rule.

property rule_category: RuleCategory

COMPLIANCE (compliance rules).

Type:

Rule category

property severity: SeverityType

Severity level of the rule.

property target_entity: str

Entity targeted by the rule.

class assets_guardian.plugins.dolibarr.compliance.DolibarrUnknownMailComplianceRule(**kwargs: Any)

Bases: IComplianceRule

Detects Dolibarr mailboxes that do not match any employee in employees.json.

evaluate(entries: Iterable[Identity], config: dict[str, Any] | None = None) → Iterable[Finding]

Reports each Dolibarr user whose email has no matching employee entry.

Yields:

Finding – One finding per unknown employee email detected.

property description: str

Description of the rule.

property name: str

Name of the rule.

property severity: SeverityType

Severity level of the rule.

property target_entity: str

Entity targeted by the rule.