Document Details

Threat Modeling Tool Authorization
Home / Scan #48 / Threat Modeling Tool Authorization
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
windows_first
windows_tools
powershell_heavy
missing_linux_example
Summary
The documentation demonstrates a Windows bias primarily through the use of Windows-centric technologies (e.g., WCF, ASP.NET, UseWindowsGroups), configuration examples referencing Windows roles and groups, and a lack of Linux/Unix-specific examples or tools. While some recommendations are generic, the only concrete implementation details and code samples are for Windows/.NET environments, with no equivalent Linux or cross-platform examples provided.
Recommendations
  • Provide equivalent Linux/Unix examples for access control (e.g., using chmod, chown, setfacl for ACLs, and Linux user/group management).
  • Include cross-platform or Linux-specific code/configuration samples alongside Windows/.NET examples, especially for authorization and role management.
  • Mention Linux/Unix tools and patterns (e.g., sudoers, PAM, systemd service permissions) where relevant, not just Windows tools like UseWindowsGroups.
  • For sections referencing user-profile directories, clarify the Linux equivalent (e.g., /home/username) and provide examples for both platforms.
  • When discussing web application and database security, include references to open-source stacks (e.g., Node.js, Django, PostgreSQL) and their authorization mechanisms.
  • Balance the order of presentation so that Linux/Unix approaches are mentioned alongside or before Windows-specific ones, where applicable.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2026-01-14 00:00 #250 in_progress Clean Clean
2026-01-13 00:00 #246 completed Biased Biased
2026-01-11 00:00 #240 completed Biased Biased
2026-01-10 00:00 #237 completed Biased Biased
2026-01-09 00:34 #234 completed Biased Biased
2026-01-08 00:53 #231 completed Biased Biased
2026-01-06 18:15 #225 cancelled Clean Clean
2025-08-17 00:01 #83 cancelled Clean Clean
2025-07-13 21:37 #48 completed Biased Biased
2025-07-12 23:44 #41 cancelled Biased Biased

Flagged Code Snippets

<behaviors>
    <serviceBehaviors>
        <behavior>
            ...
            <serviceAuthorization principalPermissionMode=""None"" />
        </behavior>
    </serviceBehaviors>
</behaviors>