Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26570

turn on "Mask passwords" to all jobs

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Now it's possible to turn on "mask passwords" in each job separately. It could be good to turn it on globally so it wouldn't be possible to turn it of if you don't have administrator privileges.

      e.g. I have properties file which contains password. It's possible to create job which do cat on this file. For now only solution is to fully remove others to configure and create new jobs.

        Attachments

          Activity

          Hide
          seuvitor Vitor Dantas added a comment -

          Same issue here.

          We would like to have some globally defined passwords to be used in jobs e.g. to deploy to a jboss instance. Those passwords should not be available to all jenkins users.

          However, as it turns out today, any user that can configure jobs might uncheck the option to mask passwords and then proceed to execute the job and read the password in plain text on the output log. For me this is a major blocker in security.

          Show
          seuvitor Vitor Dantas added a comment - Same issue here. We would like to have some globally defined passwords to be used in jobs e.g. to deploy to a jboss instance. Those passwords should not be available to all jenkins users. However, as it turns out today, any user that can configure jobs might uncheck the option to mask passwords and then proceed to execute the job and read the password in plain text on the output log. For me this is a major blocker in security.

            People

            Assignee:
            danielpetisme Daniel Petisme
            Reporter:
            mzulis Maris Zulis
            Votes:
            2 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated: