User Story

As an admin of Jenkins, I would like the flexibility to restrict how credentials are accessed based on the class type of the caller requesting the credential so that I can flexibly restrict credentials without the need to add new scopes.

Acceptance Criteria

• Verify that arbitrary classes can be selected for restricting. (e.g. hudson.model.Item)

Additional Information

This will likely require at least 3 new classes (I'm not completely sure):

• ClassnameSpecification extending from DomainSpecification.java
• ClassnameRequirement extending from DomainRequirement.java
• Perhaps a ClassnameMatcher which implements CredentialsMatcher.java (I'm really not sure about this)

I would like the configuration of the DomainSpecification to be similar to how the job restrictions plugin allows configuration of restricting by class. See the following screenshot: