Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-3627

Add separate permission to view build logs

XMLWordPrintable

      Hi,

      it would be great to hide the console output of a build from unauthorized users.
      We use the project based matrix security and in the console output are possible
      security informations output by hudson.
      For example we are using sonar to run quality checks and hudson (maybe the sonar
      plugin) prints the command line of the sonar build to the console. In this
      commandline are database access information like url, username and password.

      It would be great if the console could be hidden from users just like the
      workspace could.

          [JENKINS-3627] Add separate permission to view build logs

          knisterpeter created issue -

          Oleg Nenashev added a comment -

          The request stills actual

          Oleg Nenashev added a comment - The request stills actual
          Oleg Nenashev made changes -
          Component/s New: core [ 15593 ]
          Component/s Original: security [ 15508 ]
          Labels New: permission security
          Oleg Nenashev made changes -
          Issue Type Original: Improvement [ 4 ] New: New Feature [ 2 ]
          Daniel Beck made changes -
          Summary Original: Showing too much information to public viewers New: Add separate permission to view build logs

          Daniel Beck added a comment -

          FWIW printing passwords in plain text to the console log should never be done and can be considered a bug in the plugin if it still happens.

          Daniel Beck added a comment - FWIW printing passwords in plain text to the console log should never be done and can be considered a bug in the plugin if it still happens.

          mess110 mess110 added a comment -

          Agreed, printing passwords in plain text to the console should not be done.

          On the other hand, the permission could also be useful to me: I allow anonymous builds and I would like to not display the trigger email at the end publicly.

          mess110 mess110 added a comment - Agreed, printing passwords in plain text to the console should not be done. On the other hand, the permission could also be useful to me: I allow anonymous builds and I would like to not display the trigger email at the end publicly.
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 133700 ] New: JNJira + In-Review [ 174067 ]

          Nathan Rennie-Waldock added a comment -

          Would be nice to see this added. It'd be useful for for custom build scripts that have an API key or similar in.

          Nathan Rennie-Waldock added a comment - Would be nice to see this added. It'd be useful for for custom build scripts that have an API key or similar in.
          Daniel Beck made changes -
          Link New: This issue is related to JENKINS-18649 [ JENKINS-18649 ]

            Unassigned Unassigned
            knisterpeter knisterpeter
            Votes:
            20 Vote for this issue
            Watchers:
            21 Start watching this issue

              Created:
              Updated: