Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-68755

Add support for explicit user and group assignment

    • Icon: New Feature New Feature
    • Resolution: Fixed
    • Icon: Minor Minor
    • role-strategy-plugin
    • None
    • 664.ve141973c58b_5

      matrix-auth 3.0 added support for explicit assignment of permissions to users and groups, rather than to whatever matches the name.

      role-strategy should have the same feature for unambiguous assignment of permissions.

          [JENKINS-68755] Add support for explicit user and group assignment

          kredens added a comment -

          This is crucial, otherwise we have to keep using obsolete Matrix Auth version

          kredens added a comment - This is crucial, otherwise we have to keep using obsolete Matrix Auth version

          Markus Winter added a comment -

          Since version 484.v8a_a_e4b_d785fd role strategy is completely independent from matrix-auth.

          Markus Winter added a comment - Since version 484.v8a_a_e4b_d785fd role strategy is completely independent from matrix-auth.

          kredens added a comment -

          But it's unusable with Matrix Auth 3.x

          kredens added a comment - But it's unusable with Matrix Auth 3.x

          Markus Winter added a comment -

          Which version of role-strategy do you use?

          And please explain what you mean with "it's unusable".

          Markus Winter added a comment - Which version of role-strategy do you use? And please explain what you mean with "it's unusable".

          kredens added a comment -

          I'm using role-strategy v530 (always the newest, will update to v546 on next restart) + matrix-auth 2.6.11, last of the 2.x line.

          It's unusable, because I have very extensive role setup, consisting of many role definitions and huge amount of both single users and groups assigned to them (AD) - if I update matrix-auth, the assign role page takes forever to load as it can't distinguish users from groups, it flags them one by one that the format is incorrect (or something like that, it's been a while since I tried updating). It's literally minutes to refresh the page, I'm also not sure whether assigning any roles works properly then.

          kredens added a comment - I'm using role-strategy v530 (always the newest, will update to v546 on next restart) + matrix-auth 2.6.11, last of the 2.x line. It's unusable, because I have very extensive role setup, consisting of many role definitions and huge amount of both single users and groups assigned to them (AD) - if I update matrix-auth, the assign role page takes forever to load as it can't distinguish users from groups, it flags them one by one that the format is incorrect (or something like that, it's been a while since I tried updating). It's literally minutes to refresh the page, I'm also not sure whether assigning any roles works properly then.

          Daniel Beck added a comment -

          it's been a while since I tried updating

          role-strategy 484.v8a_a_e4b_d785fd dropped the dependency on matrix-auth. You don't even need matrix-auth anymore for role-strategy.

          Daniel Beck added a comment - it's been a while since I tried updating role-strategy 484.v8a_a_e4b_d785fd dropped the dependency on matrix-auth. You don't even need matrix-auth anymore for role-strategy.

          kredens added a comment - - edited

          Ah, I guess I misunderstood that statement earlier. Alright, I'll test it when 484 (or newer) will be available on LTS Jenkins and will report back  

          kredens added a comment - - edited Ah, I guess I misunderstood that statement earlier. Alright, I'll test it when 484 (or newer) will be available on LTS Jenkins and will report back  

          Markus Winter added a comment -

          You will need Jenkins 2.303.1 at least

          Markus Winter added a comment - You will need Jenkins 2.303.1 at least

          kredens added a comment -

          Alright, so I tested it and everything works as expected. Guess I somehow missed or misunderstood the point in changelog that we were discussing above. 

          Thanks mawinter69 for clearing everything up, you made my Jenkins maintenance easier.

          kredens added a comment - Alright, so I tested it and everything works as expected. Guess I somehow missed or misunderstood the point in changelog that we were discussing above.  Thanks mawinter69 for clearing everything up, you made my Jenkins maintenance easier.

            mawinter69 Markus Winter
            danielbeck Daniel Beck
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: