Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-32770

Provide a mechanism to run specific projects as ACL.SYSTEM

    Details

    • Similar Issues:

      Description

      Follow-up to JENKINS-32769

      There is no way to configure a job to run as ACL.SYSTEM.

      If you are migrating a large system to using the authorize projects plugin, there may be some jobs that need to run as SYSTEM (e.g. until plugins used by the job have been upgraded, until the credentials required by the job have been migrated to the appropriate user accounts, etc).

      Prior to JENKINS-30574 this was not as big of an issue, as if there was no strategy set then it would fall back to SYSTEM... but as JENKINS-22949 points out, that behaviour may not be ideal... you do not want users having to opt-in to authentication... they will go with the default of opt-out... with JENKINS-30574 providing a means to set the default for an installation, we now need a way to mark the specific jobs that are not ready (and indeed may never be ready) to run as a user other than SYSTEM as running as SYSTEM.

      Thus we need an Authorization Strategy that will allow an admin to configure the job for running as SYSTEM.

        Attachments

          Issue Links

            Activity

            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
            http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783
            Log:
            JENKINS-32770 Copyright headers

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783 Log: JENKINS-32770 Copyright headers
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
            http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186
            Log:
            JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186 Log: JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
            http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3
            Log:
            JENKINS-32770 Add help file about RUN_SCRIPTS

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3 Log: JENKINS-32770 Add help file about RUN_SCRIPTS
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html
            src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml
            http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714
            Log:
            Merge pull request #16 from stephenc/jenkins-32770

            JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM

            Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714 Log: Merge pull request #16 from stephenc/jenkins-32770 JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f
            Hide
            ikedam ikedam added a comment -

            Added in authorize-project-1.2.0.
            It will be available in the update center in a day.

            Show
            ikedam ikedam added a comment - Added in authorize-project-1.2.0. It will be available in the update center in a day.

              People

              • Assignee:
                stephenconnolly Stephen Connolly
                Reporter:
                stephenconnolly Stephen Connolly
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: