Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-65807

Add auto complete of principals to Security Realm

    XMLWordPrintable

Details

    Description

      It would be good if security realms could provide a method that could return an auto-completion candidate for authorization strategies to use when selecting principals.

      Currently AzureAdMatrixAuthorizationStrategy exists for two reasons:
      1. Making it easier to select users in AzureAd rather than just using their object ID (a UUID)
      2. Provide display names so you know who you've granted access to.

      1. Adding a method in SecurityRealm that looks up autocomplete suggestions and used in the UI
      2. should be possible by fixing group lookup (by differentiating the types as mentioned in https://github.com/jenkinsci/azure-ad-plugin/issues/123#issuecomment-821125122

      Would need to see what would end up getting stored (probably the principal ID), which would have the downside that JCasC config would no longer include the display name, (example note: abc is a uuid in real config). But maybe something can be done for that

      The autocomplete should differentiate users and groups in the model that is used

      Attachments

        Activity

          timja Tim Jacomb added a comment -

          any thoughts on this danielbeck ?

          timja Tim Jacomb added a comment - any thoughts on this danielbeck ?
          danielbeck Daniel Beck added a comment - - edited

          timja What's the situation here? Did 3.0 change anything?

          danielbeck Daniel Beck added a comment - - edited timja What's the situation here? Did 3.0 change anything?
          timja Tim Jacomb added a comment -

          I ended up adding a client side web component that handled this for me.
          It also meant I didn’t need a user / group button as I get that information back from the API.

          https://community.jenkins.io/t/im-working-on-a-new-user-group-picker-for-the-azure-ad-plugin/95

          timja Tim Jacomb added a comment - I ended up adding a client side web component that handled this for me. It also meant I didn’t need a user / group button as I get that information back from the API. https://community.jenkins.io/t/im-working-on-a-new-user-group-picker-for-the-azure-ad-plugin/95

          People

            danielbeck Daniel Beck
            timja Tim Jacomb
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: