Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26570

turn on "Mask passwords" to all jobs

XMLWordPrintable

      Now it's possible to turn on "mask passwords" in each job separately. It could be good to turn it on globally so it wouldn't be possible to turn it of if you don't have administrator privileges.

      e.g. I have properties file which contains password. It's possible to create job which do cat on this file. For now only solution is to fully remove others to configure and create new jobs.

          [JENKINS-26570] turn on "Mask passwords" to all jobs

          Vitor Dantas added a comment -

          Same issue here.

          We would like to have some globally defined passwords to be used in jobs e.g. to deploy to a jboss instance. Those passwords should not be available to all jenkins users.

          However, as it turns out today, any user that can configure jobs might uncheck the option to mask passwords and then proceed to execute the job and read the password in plain text on the output log. For me this is a major blocker in security.

          Vitor Dantas added a comment - Same issue here. We would like to have some globally defined passwords to be used in jobs e.g. to deploy to a jboss instance. Those passwords should not be available to all jenkins users. However, as it turns out today, any user that can configure jobs might uncheck the option to mask passwords and then proceed to execute the job and read the password in plain text on the output log. For me this is a major blocker in security.

            danielpetisme Daniel Petisme
            mzulis Maris Zulis
            Votes:
            2 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: