fine grain security limitations

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      Using the new fine grain security to allows developers (Anonymous user) to
      trigger builds a few things are missing.

      • There appears to be no way for them to stop a build (the little red X that
        appears under the Build Executor Status list). This would be very handy.
      • When logged in as an Admin, there is a nice little build shortcut (clock.gif)
        next to each project on the main page. Again, the anonymous user does not get
        this. This forces them to navigate into a project and use the "Build Now" link
        on the left.

      Info on my config. I'm in the process of evaluating Hudson so forgive my if this
      is a miss-config.

      <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
      <permission>hudson.model.View.Delete:hudson</permission>
      <permission>hudson.model.Hudson.Read:anonymous</permission>
      <permission>hudson.model.Hudson.Read:hudson</permission>
      <permission>hudson.model.Run.Delete:hudson</permission>
      <permission>hudson.model.View.Create:hudson</permission>
      <permission>hudson.model.Item.Build:anonymous</permission>
      <permission>hudson.model.Item.Build:hudson</permission>
      <permission>hudson.model.Item.Configure:hudson</permission>
      <permission>hudson.model.Hudson.Administer:hudson</permission>
      <permission>hudson.model.Item.Delete:hudson</permission>
      <permission>hudson.model.Item.Create:hudson</permission>
      <permission>hudson.model.View.Configure:hudson</permission>
      <permission>hudson.model.Run.Update:anonymous</permission>
      <permission>hudson.model.Run.Update:hudson</permission>
      </authorizationStrategy>

      file.encoding UTF-8
      file.encoding.pkg sun.io
      file.separator /
      java.awt.graphicsenv sun.awt.X11GraphicsEnvironment
      java.awt.printerjob sun.print.PSPrinterJob
      java.class.path hudson.war
      java.class.version 50.0
      java.endorsed.dirs /usr/lib/j2sdk1.6-sun/jre/lib/endorsed
      java.ext.dirs /usr/lib/j2sdk1.6-sun/jre/lib/ext:/usr/java/packages/lib/ext
      java.home /usr/lib/j2sdk1.6-sun/jre
      java.io.tmpdir /tmp
      java.library.path
      /usr/lib/j2sdk1.6-sun/jre/lib/i386/server:/usr/lib/j2sdk1.6-sun/jre/lib/i386:/usr/lib/j2sdk1.6-sun/jre/../lib/i386:/usr/java/packages/lib/i386:/lib:/usr/lib
      java.protocol.handler.pkgs org.apache.axis.transport|
      java.runtime.name Java(TM) SE Runtime Environment
      java.runtime.version 1.6.0_03-b05
      java.specification.name Java Platform API Specification
      java.specification.vendor Sun Microsystems Inc.
      java.specification.version 1.6
      java.vendor Sun Microsystems Inc.
      java.vendor.url http://java.sun.com/
      java.vendor.url.bug http://java.sun.com/cgi-bin/bugreport.cgi
      java.version 1.6.0_03
      java.vm.info mixed mode
      java.vm.name Java HotSpot(TM) Server VM
      java.vm.specification.name Java Virtual Machine Specification
      java.vm.specification.vendor Sun Microsystems Inc.
      java.vm.specification.version 1.0
      java.vm.vendor Sun Microsystems Inc.
      java.vm.version 1.6.0_03-b05
      line.separator
      os.arch i386
      os.name Linux
      os.version 2.6.18-5-686
      path.separator :
      sun.arch.data.model 32
      sun.boot.class.path
      /usr/lib/j2sdk1.6-sun/jre/lib/resources.jar:/usr/lib/j2sdk1.6-sun/jre/lib/rt.jar:/usr/lib/j2sdk1.6-sun/jre/lib/sunrsasign.jar:/usr/lib/j2sdk1.6-sun/jre/lib/jsse.jar:/usr/lib/j2sdk1.6-sun/jre/lib/jce.jar:/usr/lib/j2sdk1.6-sun/jre/lib/charsets.jar:/usr/lib/j2sdk1.6-sun/jre/classes
      sun.boot.library.path /usr/lib/j2sdk1.6-sun/jre/lib/i386
      sun.cpu.endian little
      sun.cpu.isalist
      sun.io.unicode.encoding UnicodeLittle
      sun.java.launcher SUN_STANDARD
      sun.jnu.encoding UTF-8
      sun.management.compiler HotSpot Server Compiler
      sun.os.patch.level unknown
      svnkit.ssh2.persistent false
      svnkit.symlinks false
      user.country US
      user.dir /usr/local/lib/hudson
      user.home /home/hudson
      user.language en
      user.name hudson
      user.timezone US/Eastern

            Assignee:
            Unassigned
            Reporter:
            jblumenthal
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: