I actually think I may have got this working...finally, tweaked config
below for reference (hopefully not tweaked enough to break it):

<cruisecontrol xmlns:cb="urn:ccnet.config.builder">

        <internalSecurity>
                <cache type="inMemoryCache" duration="10" mode="sliding"/>
                <users>
                        <!--Basic user/password accounts-->
                        <passwordUser name="Build" password="Team" 
display="Builder"/>
                        <passwordUser name="User" password="User" 
display="User"/>

                        <!--All users in the domain DOMAIN-->
                        <ldapUser name="*" domain="DOMAIN"/>
                </users>
                <permissions>
                        <rolePermission name="Admins" defaultRight="Allow">
                                <users>
                                        <userName 
name="DOMAIN\firstname_lastname"/>
                                        <userName name="Build"/>
                                </users>
                        </rolePermission>
                        <rolePermission name="Developers" defaultRight="Deny"
viewProject="Allow">
                                <users>
                                        <userName name="User"/>
                                </users>
                        </rolePermission>
                </permissions>
        </internalSecurity>


        <project name="ExampleProject">
                <security type="inheritedProjectSecurity" />

                <tasks>
                        <nullTask />
                </tasks>
        </project>
</cruisecontrol>

I think my problem was basically down to not previously including the
domain name in the <userName name="DOMAIN\firstname_lastname"/> node,
resulting in being allowed to log in succcessfully, but then not
getting the admin rights I expected.

Cheers,
Jay

Reply via email to