Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-32770

Provide a mechanism to run specific projects as ACL.SYSTEM

      Follow-up to JENKINS-32769

      There is no way to configure a job to run as ACL.SYSTEM.

      If you are migrating a large system to using the authorize projects plugin, there may be some jobs that need to run as SYSTEM (e.g. until plugins used by the job have been upgraded, until the credentials required by the job have been migrated to the appropriate user accounts, etc).

      Prior to JENKINS-30574 this was not as big of an issue, as if there was no strategy set then it would fall back to SYSTEM... but as JENKINS-22949 points out, that behaviour may not be ideal... you do not want users having to opt-in to authentication... they will go with the default of opt-out... with JENKINS-30574 providing a means to set the default for an installation, we now need a way to mark the specific jobs that are not ready (and indeed may never be ready) to run as a user other than SYSTEM as running as SYSTEM.

      Thus we need an Authorization Strategy that will allow an admin to configure the job for running as SYSTEM.

          [JENKINS-32770] Provide a mechanism to run specific projects as ACL.SYSTEM

          ikedam added a comment -

          ikedam added a comment - https://github.com/jenkinsci/authorize-project-plugin/pull/16

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html
          src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml
          http://jenkins-ci.org/commit/authorize-project-plugin/5550847cc7aaf09f48bfadd609768ccbf15d1624
          Log:
          [FIXED JENKINS-32770] Provide a mechanism to run specific projects as ACL.SYSTEM

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml http://jenkins-ci.org/commit/authorize-project-plugin/5550847cc7aaf09f48bfadd609768ccbf15d1624 Log: [FIXED JENKINS-32770] Provide a mechanism to run specific projects as ACL.SYSTEM

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
          http://jenkins-ci.org/commit/authorize-project-plugin/77cd5e8403be19bc3017cd8c78660b85d725f15e
          Log:
          JENKINS-32770 Fix compilation error

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java http://jenkins-ci.org/commit/authorize-project-plugin/77cd5e8403be19bc3017cd8c78660b85d725f15e Log: JENKINS-32770 Fix compilation error

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
          http://jenkins-ci.org/commit/authorize-project-plugin/cca87b5e5e47d4e049b0b2ee1ddf2bb9ef6bb4db
          Log:
          JENKINS-32770 Address issues identified by jglick

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java http://jenkins-ci.org/commit/authorize-project-plugin/cca87b5e5e47d4e049b0b2ee1ddf2bb9ef6bb4db Log: JENKINS-32770 Address issues identified by jglick

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
          src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
          http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783
          Log:
          JENKINS-32770 Copyright headers

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783 Log: JENKINS-32770 Copyright headers

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
          http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186
          Log:
          JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186 Log: JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS

          Code changed in jenkins
          User: Stephen Connolly
          Path:
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
          http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3
          Log:
          JENKINS-32770 Add help file about RUN_SCRIPTS

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3 Log: JENKINS-32770 Add help file about RUN_SCRIPTS

          Code changed in jenkins
          User: ikedam
          Path:
          src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
          src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html
          src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml
          src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml
          http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714
          Log:
          Merge pull request #16 from stephenc/jenkins-32770

          JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM

          Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714 Log: Merge pull request #16 from stephenc/jenkins-32770 JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f

          ikedam added a comment -

          Added in authorize-project-1.2.0.
          It will be available in the update center in a day.

          ikedam added a comment - Added in authorize-project-1.2.0. It will be available in the update center in a day.

            stephenconnolly Stephen Connolly
            stephenconnolly Stephen Connolly
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: