Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-5836

Make subscripton mode for Hudson Jabber user configurable

    XMLWordPrintable

Details

    • New Feature
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Fixed
    • jabber-plugin
    • None
    • N/A

    Description

      Currently, using a Gmail account for the Hudson Jabber user, the Jabber plug-in will automatically authorize any user that tries to add the Hudson Jabber user to their contact list regardless of the Gmail account settings.

      That is, under Gmail settings > Chat, if one selects the option "Only allow people that I've explicitly approved to chat with me and see when I'm online." for the Hudson Jabber user, the Jabber user will automatically approve the user bypassing the Gmail interface for approving the user by selecting "Yes" or "No".

      You can see this happening if you are logged into the Hudson Jabber user's Gmail account and have someone try to add the user; in the chat window on the left-hand side of the screen, you'll see the Gmail prompt saying "[username] wants to be able to chat with you. Okay?" (See the attached image to see what this looks like) with two buttons "Yes" and "No", however within one second this prompt immediately disappears before you take an action and the user is added to the contact list.

      This feature request is for the Jabber plug-in to allow for users to turn off this auto-authorization behavior so that users that want to add the Hudson Jabber user will need to be screened and authorized through Gmail's interface. This is a security issue because if any gchat user can add Hudson as a buddy then they will be able to control the build process without any trouble.

      Attachments

        Issue Links

          Activity

            rsyamlal rsyamlal created issue -
            kutzi kutzi made changes -
            Field Original Value New Value
            Link This issue depends on JENKINS-5805 [ JENKINS-5805 ]
            kutzi kutzi made changes -
            Summary Prevent the Hudson Jabber user from Auto-authorizing add requests from other Jabber chat users Make subscripton mode for Hudson Jabber user configurable
            kutzi kutzi made changes -
            Attachment instant-messaging.hpi [ 19223 ]
            Attachment jabber.hpi [ 19224 ]
            kutzi kutzi made changes -
            Resolution Fixed [ 1 ]
            Status Open [ 1 ] Resolved [ 5 ]
            abayer Andrew Bayer made changes -
            Status Resolved [ 5 ] Closed [ 6 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 135928 ] JNJira + In-Review [ 203753 ]

            People

              kutzi kutzi
              rsyamlal rsyamlal
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: