NTFSSecurity/Tests/Coverage/Quality-Gate-Test-Round-2026-10-20-ParameterSets.csv

1	Group	Cmdlet	ParameterSet	StatusBefore	StatusAfter	NewTestCount	NewTests	LeftKind	Left
2	access	Add-NTFSAccess	PathComplex	Partly	Closed	2	ParameterSets.Access.Tests.ps1:288 Should add an explicit allow entry for each of several accounts bound positionally, with the default scope | ParameterSets.Access.Tests.ps1:306 Should write a Deny entry through -Path with exactly the requested rights and no Synchronize
3	access	Add-NTFSAccess	PathSimple	Partly	Closed	3	ParameterSets.Access.Tests.ps1:329 Should report AddAceError by category and target for a denied write scoped by -AppliesTo, and leave the item unchanged | ParameterSets.Access.Tests.ps1:345 Should write an AddAceError for a Deny entry without rights through the PathSimple set, and change nothing | ParameterSets.Access.Tests.ps1:358 Should write a Deny entry scoped by -AppliesTo with exactly the requested rights and no Synchronize
4	access	Add-NTFSAccess	SDSimple	MaintainerDecision	MaintainerDecision	1	ParameterSets.Access.Tests.ps1:374 Should add an entry with the scope <Name> to each of several descriptors bound through the pipeline, read back with .NET, and leave the items unchanged on disk	MaintainerDecision	MaintainerDecision: the terminating error of a failing change (a deny entry without rights) is not pinned
5	access	Add-NTFSAccess	SDComplex	MaintainerDecision	MaintainerDecision	1	ParameterSets.Access.Tests.ps1:396 Should add the entry to each of several descriptors bound through the pipeline, read back with .NET, and leave the items unchanged on disk	MaintainerDecision	MaintainerDecision: the terminating error of a failing descriptor is not pinned
6	access	Remove-NTFSAccess	PathComplex	Partly	Closed	2	ParameterSets.Access.Tests.ps1:539 Should return exactly the surviving entries with -PassThru for each of several paths bound through the pipeline in one call | ParameterSets.Access.Tests.ps1:567 Should remove the entries of several accounts bound positionally, leaving another account untouched
7	access	Remove-NTFSAccess	PathSimple	Partly	Closed	2	ParameterSets.Access.Tests.ps1:592 Should take only the requested rights from a Deny entry scoped by -AppliesTo without -RemoveSpecific, and keep its flags | ParameterSets.Access.Tests.ps1:608 Should report a missing path's and a denied path's errors by category and target, and still scope the surviving paths' entries, all bound through the pipeline
8	access	Remove-NTFSAccess	SDSimple	MaintainerDecision	MaintainerDecision	2	ParameterSets.Access.Tests.ps1:644 Should take only the requested rights from an entry scoped by -AppliesTo on a descriptor without -RemoveSpecific, keep its flags, and leave the item on disk unchanged until Set-NTFSSecurityDescriptor | ParameterSets.Access.Tests.ps1:669 Should remove the matching entry from each of several descriptors bound through the pipeline for the Simple parameter set, leaving the items unchanged on disk	MaintainerDecision	MaintainerDecision: the terminating error of a failing removal is not pinned
9	access	Remove-NTFSAccess	SDComplex	MaintainerDecision	MaintainerDecision	2	ParameterSets.Access.Tests.ps1:693 Should remove an on-disk entry from a descriptor in memory only, and write the change through only when Set-NTFSSecurityDescriptor runs | ParameterSets.Access.Tests.ps1:711 Should remove the matching entry from each of several descriptors bound through the pipeline for the Complex parameter set, leaving the items unchanged on disk	MaintainerDecision	MaintainerDecision: the terminating error of a failing removal is not pinned
10	access	Clear-NTFSAccess	Path	Closed	Closed	0
11	access	Clear-NTFSAccess	SD	Closed	Closed	0
12	access	Get-NTFSAccess	Path	Partly	Partly	1	ParameterSets.Access.Tests.ps1:865 Should return the entries of the current location as actual Security2.FileSystemAccessRule2 objects when -Path is omitted	would-pin	would-pin: the category of the ReadSecurityError after a failed ownership retry (WriteError there, OpenError from the generic catch) is not asserted, so as not to cement the inconsistency
13	access	Get-NTFSAccess	SD	Partly	Partly	0		Limit	no failing descriptor is tested for this set (no per-item handler)
14	access	Get-NTFSOrphanedAccess	Path	Partly	Partly	1	ParameterSets.Access.Tests.ps1:977 Should write a ReadSecurityError categorized as ReadError after a failed ownership retry, and still return the next path's orphaned entry	would-pin	would-pin: the choice of a warning, not an error, for a read failure other than access denied
15	access	Get-NTFSOrphanedAccess	SD	Partly	Closed	1	ParameterSets.Access.Tests.ps1:1021 Should return the explicit entry with -ExcludeInherited and still report an entry added to the descriptor only in memory
16	access	Get-NTFSSimpleAccess	Path	Partly	Closed	1	ParameterSets.Access.Tests.ps1:1077 Should report a missing path's error by category and target and still report the next folder's entries
17	access	Get-NTFSSimpleAccess	SD	Partly	Partly	0		Limit	no failing descriptor is tested for this set (no per-item handler)
18	access	Get-NTFSEffectiveAccess	Path	Partly	Partly	1	ParameterSets.Access.Tests.ps1:1149 Should write nothing for a missing path and only the succeeding path's result in the same call	Limit	Limit: the ReadEffectivePermissionError handler is unreachable (the library records the failure); remote and group-based results need the lab (the live tests cover them)
19	access	Get-NTFSEffectiveAccess	SecurityDescriptor	Partly	Partly	0		Limit	a mix of a failing and a succeeding descriptor in one call
20	audit	Add-NTFSAudit	PathComplex	Partly	Partly	1	ParameterSets.Audit.Tests.ps1:163 Should add one audit entry for each account that the piped object names, with the AuditFlags it also names	Limit	Limit: the owner retry after access denied needs a lab or a remote server
21	audit	Add-NTFSAudit	PathSimple	Closed	Closed	0
22	audit	Add-NTFSAudit	SDSimple	Partly	Partly	0		MaintainerDecision	exceptions from the change itself (open item 1)
23	audit	Add-NTFSAudit	SDComplex	Partly	Partly	0		MaintainerDecision	exceptions from the change itself (open item 1)
24	audit	Remove-NTFSAudit	PathComplex	Partly	Partly	2	ParameterSets.Audit.Tests.ps1:501 Should remove the audit entry of each account that -Account names in one call, and leave another account alone | ParameterSets.Audit.Tests.ps1:524 Should leave the empty Audit SDDL and the DACL unchanged	Limit	Limit: the owner retry after access denied needs a lab or a remote server
25	audit	Remove-NTFSAudit	PathSimple	Closed	Closed	0
26	audit	Remove-NTFSAudit	SDSimple	Partly	Closed	1	ParameterSets.Audit.Tests.ps1:577 Should remove the entry from the <Set> descriptor only in memory, until Set-NTFSSecurityDescriptor writes it, and return audit rule objects with -PassThru
27	audit	Remove-NTFSAudit	SDComplex	Partly	MaintainerDecision	1	ParameterSets.Audit.Tests.ps1:577 Should remove the entry from the <Set> descriptor only in memory, until Set-NTFSSecurityDescriptor writes it, and return audit rule objects with -PassThru	MaintainerDecision	MaintainerDecision: exceptions from the change itself (open item 1 of the report of Handoff 5)
28	audit	Clear-NTFSAudit	Path	Partly	Partly	1	ParameterSets.Audit.Tests.ps1:626 Should clear the audit entries of the path that follows a missing one, and write only a ReadFileError for the missing one	Limit	Limit: the owner retry after access denied needs a lab or a remote server
29	audit	Clear-NTFSAudit	SD	Closed	Closed	0
30	audit	Get-NTFSAudit	Path	Partly	Partly	0		Limit	the PermissionDenied category branch of ReadSecurityError
31	audit	Get-NTFSAudit	SD	Partly	Closed	1	ParameterSets.Audit.Tests.ps1:777 Should return the entries of a security descriptor with the expected type, account, rights, flags, and inherited state
32	audit	Get-NTFSOrphanedAudit	Path	Partly	Closed	2	ParameterSets.Audit.Tests.ps1:823 Should write a ReadSecurityError with category OpenError and the path as target | ParameterSets.Audit.Tests.ps1:837 Should return only the inherited orphaned entry with -ExcludeExplicit
33	audit	Get-NTFSOrphanedAudit	SD	Partly	Closed	1	ParameterSets.Audit.Tests.ps1:895 Should filter the orphaned entries of a piped descriptor by -Account, -ExcludeExplicit, and -ExcludeInherited
34	inheritance	Disable-NTFSAccessInheritance	Path	Partly	Closed	2	ParameterSets.Inheritance.Tests.ps1:804 <Command> should do nothing without -Path, not even to the current location | ParameterSets.Inheritance.Tests.ps1:880 <Command> should report ReadFileError with category OpenError for a path that does not exist, and continue with the next path
35	inheritance	Disable-NTFSAccessInheritance	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:897 Disable-NTFSAccessInheritance -SecurityDescriptor should leave the owner unchanged once Set-NTFSSecurityDescriptor writes the protected DACL
36	inheritance	Enable-NTFSAccessInheritance	Path	Partly	Closed	2	ParameterSets.Inheritance.Tests.ps1:804 <Command> should do nothing without -Path, not even to the current location | ParameterSets.Inheritance.Tests.ps1:880 <Command> should report ReadFileError with category OpenError for a path that does not exist, and continue with the next path
37	inheritance	Enable-NTFSAccessInheritance	SecurityDescriptor	Closed	Closed	0
38	inheritance	Disable-NTFSAuditInheritance	Path	Partly	Partly	1	ParameterSets.Inheritance.Tests.ps1:804 <Command> should do nothing without -Path, not even to the current location	Limit	Limit: a successful ownership retry or RestoreOwnerError of a SACL write needs a lab or a remote server
39	inheritance	Disable-NTFSAuditInheritance	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:940 <Command> -SecurityDescriptor should change the in-memory audit entries per -<SwitchName>:<Remove>, applied to the item only after Set-NTFSSecurityDescriptor writes it, leaving the owner and DACL unchanged
40	inheritance	Enable-NTFSAuditInheritance	Path	Partly	Partly	1	ParameterSets.Inheritance.Tests.ps1:804 <Command> should do nothing without -Path, not even to the current location	Limit	Limit: a successful ownership retry or RestoreOwnerError of a SACL write needs a lab or a remote server
41	inheritance	Enable-NTFSAuditInheritance	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:940 <Command> -SecurityDescriptor should change the in-memory audit entries per -<SwitchName>:<Remove>, applied to the item only after Set-NTFSSecurityDescriptor writes it, leaving the owner and DACL unchanged
42	inheritance	Get-NTFSInheritance	Path	Partly	Partly	2	ParameterSets.Inheritance.Tests.ps1:860 <Command> should report the current location when no -Path is given, not an empty result | ParameterSets.Inheritance.Tests.ps1:982 Get-NTFSInheritance should name the item in the Name property and report a DACL protected without the module	Limit	Limit: a successful ownership-retry read needs a lab or a remote server
43	inheritance	Get-NTFSInheritance	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:993 Get-NTFSInheritance -SecurityDescriptor should return a typed object for a descriptor protected without the module
44	inheritance	Set-NTFSInheritance	Path	Partly	Closed	3	ParameterSets.Inheritance.Tests.ps1:804 <Command> should do nothing without -Path, not even to the current location | ParameterSets.Inheritance.Tests.ps1:880 <Command> should report ReadFileError with category OpenError for a path that does not exist, and continue with the next path | ParameterSets.Inheritance.Tests.ps1:914 Set-NTFSInheritance should set the SACL protected flag and audit-rule counts for enabled=<Enable>, read independently with Get-Acl -Audit
45	inheritance	Set-NTFSInheritance	SecurityDescriptor	Closed	Closed	0
46	inheritance	Get-NTFSOwner	Path	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:846 Get-NTFSOwner should return nothing without -Path, not even for the current location
47	inheritance	Get-NTFSOwner	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:1004 Get-NTFSOwner -SecurityDescriptor should return the real owner of a descriptor that was read without its Owner section
48	inheritance	Set-NTFSOwner	Path	Partly	Closed	2	ParameterSets.Inheritance.Tests.ps1:829 Set-NTFSOwner should do nothing without -Path, not even to the current location | ParameterSets.Inheritance.Tests.ps1:1019 Set-NTFSOwner should leave the SACL unchanged after it changes the owner
49	inheritance	Set-NTFSOwner	SecurityDescriptor	Partly	Closed	1	ParameterSets.Inheritance.Tests.ps1:1035 Set-NTFSOwner -SecurityDescriptor should change only the owner on disk once Set-NTFSSecurityDescriptor writes it, leaving the DACL unchanged, and -PassThru should return a FileSystemOwner object
50	inheritance	Get-NTFSSecurityDescriptor	__AllParameterSets	Partly	Partly	1	ParameterSets.Inheritance.Tests.ps1:860 <Command> should report the current location when no -Path is given, not an empty result	Limit	Limit: a successful ownership-retry read needs a lab or a remote server
51	inheritance	Set-NTFSSecurityDescriptor	__AllParameterSets	None	Partly	2	ParameterSets.Inheritance.Tests.ps1:1061 Should take a descriptor by property name through the pipeline, not only by value | ParameterSets.Inheritance.Tests.ps1:1082 Should report the PassThru ReadSecurityError with category ReadError and the item as target	would-pin	would-pin: positional binding at Position 2 (the sibling cmdlets use Position 1), an undecided inconsistency
52	items	Copy-Item2	__AllParameterSets	Partly	Closed	6	ParameterSets.Items.Tests.ps1:604 <Command> should treat a path with brackets in the name as a literal file name | ParameterSets.Items.Tests.ps1:747 Copy-Item2 should copy the file to a short destination and leave the source in place | ParameterSets.Items.Tests.ps1:811 Copy-Item2 should copy a file to the root of the mapped drive | ParameterSets.Items.Tests.ps1:963 Should replace an existing file directly with -Force, with PassThru=<_> | ParameterSets.Items.Tests.ps1:987 Should write DestinationFileAlreadyExists with its category and target for a file that exists at the destination | ParameterSets.Items.Tests.ps1:1003 -PassThru should return the output type for a file and for a folder, and write nothing without -PassThru
53	items	Get-ChildItem2	__AllParameterSets	Partly	Closed	9	ParameterSets.Items.Tests.ps1:728 Get-ChildItem2 should list the content of the folder | ParameterSets.Items.Tests.ps1:801 Get-ChildItem2 should list the content at the root of the mapped drive | ParameterSets.Items.Tests.ps1:857 Get-ChildItem2 should list the content of the current location | ParameterSets.Items.Tests.ps1:895 Should resolve a relative -Path against the current location | ParameterSets.Items.Tests.ps1:908 Should return only the folder when -Directory and -File are given together | ParameterSets.Items.Tests.ps1:919 Should return the same matches for -Attributes <AttributesValue> regardless of -Force, -Hidden, -System, and -ReadOnly (<Case>) | ParameterSets.Items.Tests.ps1:932 Should have no effect without -Recurse | ParameterSets.Items.Tests.ps1:940 Should list the same items through the dir2 alias | ParameterSets.Items.Tests.ps1:946 Should write AttributesEmpty with its category and target for an empty -Attributes value
54	items	Get-Item2	__AllParameterSets	Partly	Closed	4	ParameterSets.Items.Tests.ps1:604 <Command> should treat a path with brackets in the name as a literal file name | ParameterSets.Items.Tests.ps1:717 Get-Item2 should return the file and its folder | ParameterSets.Items.Tests.ps1:794 Get-Item2 should return a DirectoryInfo object for the root of the mapped drive | ParameterSets.Items.Tests.ps1:844 Get-Item2 should return the folder of the current location
55	items	Move-Item2	__AllParameterSets	Partly	Closed	7	ParameterSets.Items.Tests.ps1:604 <Command> should treat a path with brackets in the name as a literal file name | ParameterSets.Items.Tests.ps1:657 <Command> should not expand an asterisk in a path as a wildcard and should report FileNotFound | ParameterSets.Items.Tests.ps1:759 Move-Item2 should move the file to a short destination and remove the source | ParameterSets.Items.Tests.ps1:823 Move-Item2 should move a file to the root of the mapped drive | ParameterSets.Items.Tests.ps1:1021 Should move a non-empty folder tree to a new destination | ParameterSets.Items.Tests.ps1:1041 Should rename an item in place on the same volume | ParameterSets.Items.Tests.ps1:1060 Should replace an existing folder outright with -Force, not merge it, and write no error
56	items	Remove-Item2	__AllParameterSets	Partly	Closed	7	ParameterSets.Items.Tests.ps1:604 <Command> should treat a path with brackets in the name as a literal file name | ParameterSets.Items.Tests.ps1:657 <Command> should not expand an asterisk in a path as a wildcard and should report FileNotFound | ParameterSets.Items.Tests.ps1:1085 Should do nothing when -Path is omitted | ParameterSets.Items.Tests.ps1:1105 Should remove the file through the <Alias> alias | ParameterSets.Items.Tests.ps1:1116 Should write FileNotFound with its category and target for a path that does not exist | ParameterSets.Items.Tests.ps1:1127 Should write nothing for a successful removal without -PassThru | ParameterSets.Items.Tests.ps1:1143 Should write DeleteError with category NotSpecified when a Deny ACE refuses the delete
57	items	Test-Path2	__AllParameterSets	Open	Closed	4	ParameterSets.Items.Tests.ps1:807 Test-Path2 should find the root of the mapped drive as a container | ParameterSets.Items.Tests.ps1:1163 Should accept several piped objects and bind -PathType by property name for each | ParameterSets.Items.Tests.ps1:1177 Should find an item whose name contains brackets | ParameterSets.Items.Tests.ps1:1185 Should find an item through a UNC path of the administrative share
58	items	Get-FileHash2	__AllParameterSets	Partly	Partly	2	ParameterSets.Items.Tests.ps1:737 Get-FileHash2 should hash the file and match an independent SHA256 read through AlphaFS | ParameterSets.Items.Tests.ps1:1194 Should hash with the algorithm bound by property name from the pipeline	Limit	Limit: the success path of the ownership retry (elevated only; the set-up of a DACL and an owner that gives it is not buildable in a sandbox)
59	items	Get-DiskSpace	__AllParameterSets	Partly	Closed	2	ParameterSets.Items.Tests.ps1:1210 Should report free-space values close to an independent .NET read for the system drive | ParameterSets.Items.Tests.ps1:1228 Should write the validation error for a bad -DriveLetter with its category, and no target object
60	items	New-NTFSHardLink	__AllParameterSets	Partly	Closed	3	ParameterSets.Items.Tests.ps1:1245 Should bind -Path and -Target positionally | ParameterSets.Items.Tests.ps1:1261 Should accept a FileInfo object piped by value for -Target | ParameterSets.Items.Tests.ps1:1275 -PassThru should write GetHardLinkError with category ReadError and the link path as target on a network share
61	items	Get-NTFSHardLink	__AllParameterSets	Partly	Partly	1	ParameterSets.Items.Tests.ps1:1295 Should write GetHardLinkError with category ReadError for a file on a network share	Limit	Limit: the UnauthorizedAccessException handler is structurally unreachable (Windows lists hard-link names without opening the file)
62	items	New-NTFSSymbolicLink	__AllParameterSets	Partly	Closed	2	ParameterSets.Items.Tests.ps1:1309 Should bind -Path and -Target positionally | ParameterSets.Items.Tests.ps1:1323 Should set LinkType and the resolved target for a link to a folder
63	items	Enable-Privileges	__AllParameterSets	Partly	Closed	1	ParameterSets.Items.Tests.ps1:1344 Should report Enabled for TakeOwnership, Restore, Backup, and Security in -PassThru, matching whoami /priv
64	items	Disable-Privileges	__AllParameterSets	Partly	Partly	1	ParameterSets.Items.Tests.ps1:1364 Should report Disabled for TakeOwnership, Restore, and Backup in -PassThru after a successful disable	Limit	Limit: the warning when a privilege cannot be disabled needs a race with another command
65	items	Get-Privileges	__AllParameterSets	Partly	Partly	0		Limit	Limit: the Removed value of PrivilegeState is unreachable: a removed privilege leaves the list of the token instead of showing the value (a probe before and after confirmed it)