Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-32770

Provide a mechanism to run specific projects as ACL.SYSTEM

    Details

    • Similar Issues:

      Description

      Follow-up to JENKINS-32769

      There is no way to configure a job to run as ACL.SYSTEM.

      If you are migrating a large system to using the authorize projects plugin, there may be some jobs that need to run as SYSTEM (e.g. until plugins used by the job have been upgraded, until the credentials required by the job have been migrated to the appropriate user accounts, etc).

      Prior to JENKINS-30574 this was not as big of an issue, as if there was no strategy set then it would fall back to SYSTEM... but as JENKINS-22949 points out, that behaviour may not be ideal... you do not want users having to opt-in to authentication... they will go with the default of opt-out... with JENKINS-30574 providing a means to set the default for an installation, we now need a way to mark the specific jobs that are not ready (and indeed may never be ready) to run as a user other than SYSTEM as running as SYSTEM.

      Thus we need an Authorization Strategy that will allow an admin to configure the job for running as SYSTEM.

        Attachments

          Issue Links

            Activity

            stephenconnolly Stephen Connolly created issue -
            stephenconnolly Stephen Connolly made changes -
            Field Original Value New Value
            Assignee stephenconnolly [ stephenconnolly ]
            ikedam ikedam made changes -
            Link This issue is related to JENKINS-22949 [ JENKINS-22949 ]
            Show
            ikedam ikedam added a comment - https://github.com/jenkinsci/authorize-project-plugin/pull/16
            jglick Jesse Glick made changes -
            Link This issue is related to JENKINS-30574 [ JENKINS-30574 ]
            jglick Jesse Glick made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html
            src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml
            http://jenkins-ci.org/commit/authorize-project-plugin/5550847cc7aaf09f48bfadd609768ccbf15d1624
            Log:
            [FIXED JENKINS-32770] Provide a mechanism to run specific projects as ACL.SYSTEM

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml http://jenkins-ci.org/commit/authorize-project-plugin/5550847cc7aaf09f48bfadd609768ccbf15d1624 Log: [FIXED JENKINS-32770] Provide a mechanism to run specific projects as ACL.SYSTEM
            scm_issue_link SCM/JIRA link daemon made changes -
            Status In Progress [ 3 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            http://jenkins-ci.org/commit/authorize-project-plugin/77cd5e8403be19bc3017cd8c78660b85d725f15e
            Log:
            JENKINS-32770 Fix compilation error

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java http://jenkins-ci.org/commit/authorize-project-plugin/77cd5e8403be19bc3017cd8c78660b85d725f15e Log: JENKINS-32770 Fix compilation error
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            http://jenkins-ci.org/commit/authorize-project-plugin/cca87b5e5e47d4e049b0b2ee1ddf2bb9ef6bb4db
            Log:
            JENKINS-32770 Address issues identified by jglick

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java http://jenkins-ci.org/commit/authorize-project-plugin/cca87b5e5e47d4e049b0b2ee1ddf2bb9ef6bb4db Log: JENKINS-32770 Address issues identified by jglick
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
            http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783
            Log:
            JENKINS-32770 Copyright headers

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java http://jenkins-ci.org/commit/authorize-project-plugin/b9b6925839e5e4d4f164d200263559c7b3e08783 Log: JENKINS-32770 Copyright headers
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
            http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186
            Log:
            JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly http://jenkins-ci.org/commit/authorize-project-plugin/4e5fa858f1fefe0ccd7d7569404317ef753ab186 Log: JENKINS-32770 Fix jelly pages to enforce RUN_SCRIPTS
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Stephen Connolly
            Path:
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
            http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3
            Log:
            JENKINS-32770 Add help file about RUN_SCRIPTS

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Stephen Connolly Path: src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html http://jenkins-ci.org/commit/authorize-project-plugin/05252731e3a01375bd2ce84b75bdd07e4e4567a3 Log: JENKINS-32770 Add help file about RUN_SCRIPTS
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: ikedam
            Path:
            src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html
            src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html
            src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml
            src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml
            http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714
            Log:
            Merge pull request #16 from stephenc/jenkins-32770

            JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM

            Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: ikedam Path: src/main/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy.java src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/Messages.properties src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/config.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/global-security.jelly src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help-permitReconfiguration.html src/main/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategy/help.html src/test/java/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest.java src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/jobs/test/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/testLoadOnStart/users/test2/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/admin/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test1/config.xml src/test/resources/org/jenkinsci/plugins/authorizeproject/strategy/SystemAuthorizationStrategyTest/users/test2/config.xml http://jenkins-ci.org/commit/authorize-project-plugin/12a36be51c8f0362bfabc3350721bb53e9421714 Log: Merge pull request #16 from stephenc/jenkins-32770 JENKINS-32770 Provide a mechanism to run specific projects as ACL.SYSTEM Compare: https://github.com/jenkinsci/authorize-project-plugin/compare/43af1ff853d2...12a36be51c8f
            Hide
            ikedam ikedam added a comment -

            Added in authorize-project-1.2.0.
            It will be available in the update center in a day.

            Show
            ikedam ikedam added a comment - Added in authorize-project-1.2.0. It will be available in the update center in a day.
            ikedam ikedam made changes -
            Status Resolved [ 5 ] Closed [ 6 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 168434 ] JNJira + In-Review [ 209673 ]

              People

              • Assignee:
                stephenconnolly Stephen Connolly
                Reporter:
                stephenconnolly Stephen Connolly
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: