Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-1162

fine grain security limitations

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Component/s: core
    • Labels:
      None
    • Environment:
      Platform: All, OS: All
    • Similar Issues:

      Description

      Using the new fine grain security to allows developers (Anonymous user) to
      trigger builds a few things are missing.

      • There appears to be no way for them to stop a build (the little red X that
        appears under the Build Executor Status list). This would be very handy.
      • When logged in as an Admin, there is a nice little build shortcut (clock.gif)
        next to each project on the main page. Again, the anonymous user does not get
        this. This forces them to navigate into a project and use the "Build Now" link
        on the left.

      Info on my config. I'm in the process of evaluating Hudson so forgive my if this
      is a miss-config.

      <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
      <permission>hudson.model.View.Delete:hudson</permission>
      <permission>hudson.model.Hudson.Read:anonymous</permission>
      <permission>hudson.model.Hudson.Read:hudson</permission>
      <permission>hudson.model.Run.Delete:hudson</permission>
      <permission>hudson.model.View.Create:hudson</permission>
      <permission>hudson.model.Item.Build:anonymous</permission>
      <permission>hudson.model.Item.Build:hudson</permission>
      <permission>hudson.model.Item.Configure:hudson</permission>
      <permission>hudson.model.Hudson.Administer:hudson</permission>
      <permission>hudson.model.Item.Delete:hudson</permission>
      <permission>hudson.model.Item.Create:hudson</permission>
      <permission>hudson.model.View.Configure:hudson</permission>
      <permission>hudson.model.Run.Update:anonymous</permission>
      <permission>hudson.model.Run.Update:hudson</permission>
      </authorizationStrategy>

      file.encoding UTF-8
      file.encoding.pkg sun.io
      file.separator /
      java.awt.graphicsenv sun.awt.X11GraphicsEnvironment
      java.awt.printerjob sun.print.PSPrinterJob
      java.class.path hudson.war
      java.class.version 50.0
      java.endorsed.dirs /usr/lib/j2sdk1.6-sun/jre/lib/endorsed
      java.ext.dirs /usr/lib/j2sdk1.6-sun/jre/lib/ext:/usr/java/packages/lib/ext
      java.home /usr/lib/j2sdk1.6-sun/jre
      java.io.tmpdir /tmp
      java.library.path
      /usr/lib/j2sdk1.6-sun/jre/lib/i386/server:/usr/lib/j2sdk1.6-sun/jre/lib/i386:/usr/lib/j2sdk1.6-sun/jre/../lib/i386:/usr/java/packages/lib/i386:/lib:/usr/lib
      java.protocol.handler.pkgs org.apache.axis.transport|
      java.runtime.name Java(TM) SE Runtime Environment
      java.runtime.version 1.6.0_03-b05
      java.specification.name Java Platform API Specification
      java.specification.vendor Sun Microsystems Inc.
      java.specification.version 1.6
      java.vendor Sun Microsystems Inc.
      java.vendor.url http://java.sun.com/
      java.vendor.url.bug http://java.sun.com/cgi-bin/bugreport.cgi
      java.version 1.6.0_03
      java.vm.info mixed mode
      java.vm.name Java HotSpot(TM) Server VM
      java.vm.specification.name Java Virtual Machine Specification
      java.vm.specification.vendor Sun Microsystems Inc.
      java.vm.specification.version 1.0
      java.vm.vendor Sun Microsystems Inc.
      java.vm.version 1.6.0_03-b05
      line.separator
      os.arch i386
      os.name Linux
      os.version 2.6.18-5-686
      path.separator :
      sun.arch.data.model 32
      sun.boot.class.path
      /usr/lib/j2sdk1.6-sun/jre/lib/resources.jar:/usr/lib/j2sdk1.6-sun/jre/lib/rt.jar:/usr/lib/j2sdk1.6-sun/jre/lib/sunrsasign.jar:/usr/lib/j2sdk1.6-sun/jre/lib/jsse.jar:/usr/lib/j2sdk1.6-sun/jre/lib/jce.jar:/usr/lib/j2sdk1.6-sun/jre/lib/charsets.jar:/usr/lib/j2sdk1.6-sun/jre/classes
      sun.boot.library.path /usr/lib/j2sdk1.6-sun/jre/lib/i386
      sun.cpu.endian little
      sun.cpu.isalist
      sun.io.unicode.encoding UnicodeLittle
      sun.java.launcher SUN_STANDARD
      sun.jnu.encoding UTF-8
      sun.management.compiler HotSpot Server Compiler
      sun.os.patch.level unknown
      svnkit.ssh2.persistent false
      svnkit.symlinks false
      user.country US
      user.dir /usr/local/lib/hudson
      user.home /home/hudson
      user.language en
      user.name hudson
      user.timezone US/Eastern

        Attachments

          Issue Links

            Activity

            Hide
            kohsuke Kohsuke Kawaguchi added a comment -

            Fixed in 1.169.

            Show
            kohsuke Kohsuke Kawaguchi added a comment - Fixed in 1.169.
            Hide
            kohsuke Kohsuke Kawaguchi added a comment -
                • Issue 1155 has been marked as a duplicate of this issue. ***
            Show
            kohsuke Kohsuke Kawaguchi added a comment - Issue 1155 has been marked as a duplicate of this issue. ***
            Hide
            kohsuke Kohsuke Kawaguchi added a comment -
                • Issue 1148 has been marked as a duplicate of this issue. ***
            Show
            kohsuke Kohsuke Kawaguchi added a comment - Issue 1148 has been marked as a duplicate of this issue. ***

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              jblumenthal jblumenthal
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: