Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-16956

Require authentication for build triggers

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Various build steps (or other code run during builds) ought to be checking permissions. For example, you should only be able to trigger a downstream build if "you" would otherwise have permission to schedule that job manually. Similarly for accessing artifacts, running on secure slave nodes, and so on.

      Unfortunately in Jenkins currently all builds run in SYSTEM, i.e. effectively having all permissions, and it is up to each build step to do its own checks. Worse, there is no clear authentication to associate with the build. If it was started manually by a particular user, you could use that authentication, but other causes do not lead to a clear user name.

      There should be some (probably extensible) system of associating an Authentication with a given Run, either based on its Cause or something else such as the last User to configure the Job.

        Attachments

          Issue Links

            Activity

            jglick Jesse Glick created issue -
            jglick Jesse Glick made changes -
            Field Original Value New Value
            Link This issue is blocking SECURITY-55 [ SECURITY-55 ]
            jglick Jesse Glick made changes -
            Link This issue is blocking JENKINS-13222 [ JENKINS-13222 ]
            jglick Jesse Glick made changes -
            Link This issue is blocking JENKINS-13502 [ JENKINS-13502 ]
            jglick Jesse Glick made changes -
            Link This issue is related to JENKINS-14992 [ JENKINS-14992 ]
            jglick Jesse Glick made changes -
            Link This issue depends on JENKINS-18285 [ JENKINS-18285 ]
            jglick Jesse Glick made changes -
            Link This issue is blocking JENKINS-14999 [ JENKINS-14999 ]
            jglick Jesse Glick made changes -
            Link This issue is related to JENKINS-22472 [ JENKINS-22472 ]
            jglick Jesse Glick made changes -
            Issue Type New Feature [ 2 ] Bug [ 1 ]
            Summary Authentication associated with a build Require authentication for build triggers
            jglick Jesse Glick made changes -
            Assignee Jesse Glick [ jglick ]
            jglick Jesse Glick made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            oleg_nenashev Oleg Nenashev made changes -
            Link This issue is blocking JENKINS-19922 [ JENKINS-19922 ]
            jglick Jesse Glick made changes -
            Link This issue depends on JENKINS-22397 [ JENKINS-22397 ]
            jglick Jesse Glick made changes -
            Link This issue is blocking JENKINS-19922 [ JENKINS-19922 ]
            jglick Jesse Glick made changes -
            Link This issue is duplicated by JENKINS-19922 [ JENKINS-19922 ]
            scm_issue_link SCM/JIRA link daemon made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Resolved [ 5 ]
            jglick Jesse Glick made changes -
            Link This issue depends on JENKINS-22949 [ JENKINS-22949 ]
            danielbeck Daniel Beck made changes -
            Link This issue is related to JENKINS-23191 [ JENKINS-23191 ]
            danielbeck Daniel Beck made changes -
            Link This issue is related to JENKINS-22821 [ JENKINS-22821 ]
            christianlangmann Christian Langmann made changes -
            Link This issue is related to JENKINS-23686 [ JENKINS-23686 ]
            sledz Steffen Sledz made changes -
            Link This issue is related to JENKINS-25758 [ JENKINS-25758 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 147786 ] JNJira + In-Review [ 192581 ]

              People

              Assignee:
              jglick Jesse Glick
              Reporter:
              jglick Jesse Glick
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: