Minor For the github-oauth-plugin people want to use the existing GlobalMatrixAuthorizationStrategy and enable things like the github-webhook callback. Currently I have my own AuthorizationStrategy that supports these extra callback URL's but I want to be able to transparently support them without caring which specific AuthorizationStrategy is being used.
My solution is to add a new extension point into Jenkins that is invoked at the base ACL class that checks if any ACLPermissionOverride extensions want to grant the permission before the ACL checks its own authorization logic.
For the github-oauth-plugin it means that I can add in these extra URL's allow options into my SecurityRealm and then get them applied before the GlobalMatrixAuthorizationStrategy's ACL logic is used.
- is related to
-
JENKINS-35081 Separate authorization configuration page
-
- Closed
-
- relates to
-
-
- Open
-
[JENKINS-13190] Add ACLPermissionOverride Extension Point to grant additional permissions to an ACL regardless of the AuthorizationStrategy being used
Michael O'Cleirigh
created issue -
ikedam
made changes -
| Link |
New:
This issue blocks |
ikedam
made changes -
| Assignee | New: ikedam [ ikedam ] |
| Workflow | Original: JNJira [ 143654 ] | New: JNJira + In-Review [ 175966 ] |
ikedam
made changes -
| Link |
Original:
This issue blocks |
ikedam
made changes -
| Link |
New:
This issue is related to |
| Link | New: This issue relates to JENKINS-32596 [ JENKINS-32596 ] |
ikedam
made changes -
| Assignee | Original: ikedam [ ikedam ] |