-
Task
-
Resolution: Fixed
-
Minor
In Jenkins core, the SecurityListener class has only methods for listening to authentication-based events (e.g. login, logout, authenticated, etc), but lacks any methods for listening to Jenkins user-account creations; which are an equally important set of security-related events. Hence, the SecurityListener class requires an update with those methods that would facilitate this functionality.
- To perform this update will require modifying the SecurityListener class within the jenkins-core jenkins/security package.
This update will enable the Audit-Log plugin, as well as any other authentication-based plugins, to reuse the same preexisting SecurityListener class to listen for Jenkins user account creation notifications.
Note that this extension point would also be useful for authentication plugins to add support for notifying Jenkins of newly created accounts proactively rather than waiting for someone to attempt to log in first. That might be useful for provisioning user configuration data (e.g., new employee joins team, want to provide default settings to that user).