JenkinsIcon indicating the project type

Jenkins

Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-30574

Support global default authorization strategy in Authorize Project

    Details

    • Similar Issues:

      Description

      Due to security reasons, sometimes Jenkins admins may want to completely restrict running jobs as a system/anonymous and setup custom security limitations. In such case it would be useful to add the following features:

      • Global default strategy (if no one configured at the project level)
      • Enforced global strategy, which prevents setting other strategies on the project level

        Attachments

          Issue Links

          duplicates

          Task - A task that needs to be done. JENKINS-22949 QueueItemAuthenticator fallback behavior cleanup

          • Major - Major loss of function.
          • Resolved
          is related to

          Task - A task that needs to be done. JENKINS-22949 QueueItemAuthenticator fallback behavior cleanup

          • Major - Major loss of function.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

            Activity

            Ascending order - Click to sort in descending order
            9 older comments
            Hide
            Permalink
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java
            src/main/resources/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/help.html
            src/main/resources/org/jenkinsci/plugins/authorizeproject/Messages.properties
            src/main/resources/org/jenkinsci/plugins/authorizeproject/ProjectQueueItemAuthenticator/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/ProjectQueueItemAuthenticator/help.html
            src/main/resources/org/jenkinsci/plugins/authorizeproject/form/dropdownDescriptorSelector.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/form/taglib
            src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java
            http://jenkins-ci.org/commit/authorize-project-plugin/5f567fcfb978ce39fea263c5b10e34d67ef60a00
            Log:
            Merge pull request #14 from stephenc/jenkins-30574-redux

            [FIXED JENKINS-30574] Support global default authorization strategy in Authorize Project

            Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/c6507c759b15...5f567fcfb978

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java src/main/resources/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/help.html src/main/resources/org/jenkinsci/plugins/authorizeproject/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/ProjectQueueItemAuthenticator/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/ProjectQueueItemAuthenticator/help.html src/main/resources/org/jenkinsci/plugins/authorizeproject/form/dropdownDescriptorSelector.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/form/taglib src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java http://jenkins-ci.org/commit/authorize-project-plugin/5f567fcfb978ce39fea263c5b10e34d67ef60a00 Log: Merge pull request #14 from stephenc/jenkins-30574-redux [FIXED JENKINS-30574] Support global default authorization strategy in Authorize Project Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/c6507c759b15...5f567fcfb978
            Hide
            Permalink
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java
            http://jenkins-ci.org/commit/authorize-project-plugin/61371537451d2e9fe02997ea1799e97ad3118c2f
            Log:
            JENKINS-30574 Added tests to configuration of GlobalQueueItemAuthenticator.

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java http://jenkins-ci.org/commit/authorize-project-plugin/61371537451d2e9fe02997ea1799e97ad3118c2f Log: JENKINS-30574 Added tests to configuration of GlobalQueueItemAuthenticator.
            Hide
            Permalink
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty.java
            src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectUtil.java
            src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java
            src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java
            http://jenkins-ci.org/commit/authorize-project-plugin/932d35fdc5ff8766f95f0af6e62e32959b36fc8c
            Log:
            JENKINS-30574 Make GlobalQueueItemAuthenticator work with SpecificUsersAuthorizationStrategy

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty.java src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectUtil.java src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java src/test/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticatorTest.java http://jenkins-ci.org/commit/authorize-project-plugin/932d35fdc5ff8766f95f0af6e62e32959b36fc8c Log: JENKINS-30574 Make GlobalQueueItemAuthenticator work with SpecificUsersAuthorizationStrategy
            Hide
            Permalink
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectStrategyDescriptor.java
            src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SpecificUsersAuthorizationStrategy.java
            src/main/resources/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/form/dropdownDescriptorSelector.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SpecificUsersAuthorizationStrategy/config.jelly
            http://jenkins-ci.org/commit/authorize-project-plugin/52e06499e89d8dcf7819f74623d9f56167cbc61a
            Log:
            JENKINS-30574 Strategies can change the configuration behavior for GlobalQueueItemAuthenticator.

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectStrategyDescriptor.java src/main/java/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator.java src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SpecificUsersAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/AuthorizeProjectProperty/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/GlobalQueueItemAuthenticator/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/form/dropdownDescriptorSelector.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SpecificUsersAuthorizationStrategy/config.jelly http://jenkins-ci.org/commit/authorize-project-plugin/52e06499e89d8dcf7819f74623d9f56167cbc61a Log: JENKINS-30574 Strategies can change the configuration behavior for GlobalQueueItemAuthenticator.
            Hide
            Permalink
            ikedam ikedam added a comment -

            This feature is provided in authorize-project-1.2.0.
            It will be available in the update center in a day.

            Show
            ikedam ikedam added a comment - This feature is provided in authorize-project-1.2.0. It will be available in the update center in a day.

              People

              • Assignee:
                ikedam ikedam
                Reporter:
                oleg_nenashev Oleg Nenashev
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: