Minor correction matrix auth doesn't depend on the plugin and role strategy
will no longer depend on it after
https://github.com/jenkinsci/role-strategy-plugin/pull/139 is merged
(Both have a minimum core of 2.222.x)

On Thu, 13 Aug 2020 at 21:46, Tim Jacomb <timjaco...@gmail.com> wrote:

> Hi all
>
> Thoughts on graduating to GA:
>
>    - Agent/ExtendedRead
>    - Job/ExtendedRead
>    - Overall/SystemRead
>
> GA would mean:
>
>    - Enabled by default
>    - Beta API restriction removed from Overall/SystemRead
>    - Only weekly line affected for now, wouldn't be GA in LTS until the
>    line after 2.249
>
> Note: enabling by default doesn't make a huge practical difference as the
> extended-read-permission plugin is depended on by role strategy and
> matrix-auth and installing that plugin enabled the permission, which means
> that any updated instance has had this automatically enabled, as can be
> seen in this graph <https://plugins.jenkins.io/extended-read-permission/>:
>
> [image: image.png]
>
> Background:
>
> Job/ExtendedRead was introduced into Jenkins in 2009
> <http://jenkins-ci.361315.n4.nabble.com/Allowing-read-only-access-to-config-xml-td393245.html>,
> and has seen many plugins adopt it over the years, but was disabled by
> default to gather feedback and because of a concern over the permissions
> matrix getting too wide.
>
> Agent/ExtendedRead was introduced in 2013
> <https://github.com/jenkinsci/jenkins/commit/5db147e85802c75bac19320383dcaeed88bc77ba>,
> but didn't see much adoption as it was only added for the REST API in core,
> undocumented and the extended-read-permission plugin didn't enable it like
> it did for jobs. This was fixed in 2.238
> <https://www.jenkins.io/changelog/#v2.238>, with access being extended to
> all agent views.
>
> Overall/SystemRead was introduced in 2.222
> <https://www.jenkins.io/changelog-old/#v2.222> as part of JEP-224
> <https://www.jenkins.io/jep/224>, it added onto the initial
> Job/ExtendedRead by extending the jelly controls to have a read only
> appearance, replacing text boxes with text, and disabling controls like
> radio buttons and checkboxes. Initially it was just used on the System
> configuration page, but many patches
> <https://github.com/orgs/jenkinsci/projects/4> were landed up till 2.239
> <https://www.jenkins.io/changelog/#v2.239> to cover most of Jenkins core.
> Additionally Cloud Stats, JCasC, Simple Disk Usage, Matrix Auth and Role
> Strategy plugins have been updated.
>
> I've created draft PRs for updating the status of the JEP
> <https://github.com/jenkinsci/jep/pull/297> and Jenkins core
> <https://github.com/jenkinsci/jenkins/pull/4909>pending feedback.
>
> Thoughts +1, -1, ±0?
>
> Thanks
> Tim
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3BicOv%2BBkYtxFsoGyyE%2Bsiz6esxppp9_A%3DDdr-%3DejFzCnZw%40mail.gmail.com.

Reply via email to