+1

On Thu, 13 Aug 2020 at 22:59, Tim Jacomb <[email protected]> wrote:

> Minor correction matrix auth doesn't depend on the plugin and role
> strategy will no longer depend on it after
> https://github.com/jenkinsci/role-strategy-plugin/pull/139 is merged
> (Both have a minimum core of 2.222.x)
>
> On Thu, 13 Aug 2020 at 21:46, Tim Jacomb <[email protected]> wrote:
>
>> Hi all
>>
>> Thoughts on graduating to GA:
>>
>>    - Agent/ExtendedRead
>>    - Job/ExtendedRead
>>    - Overall/SystemRead
>>
>> GA would mean:
>>
>>    - Enabled by default
>>    - Beta API restriction removed from Overall/SystemRead
>>    - Only weekly line affected for now, wouldn't be GA in LTS until the
>>    line after 2.249
>>
>> Note: enabling by default doesn't make a huge practical difference as the
>> extended-read-permission plugin is depended on by role strategy and
>> matrix-auth and installing that plugin enabled the permission, which means
>> that any updated instance has had this automatically enabled, as can be
>> seen in this graph <https://plugins.jenkins.io/extended-read-permission/>
>> :
>>
>> [image: image.png]
>>
>> Background:
>>
>> Job/ExtendedRead was introduced into Jenkins in 2009
>> <http://jenkins-ci.361315.n4.nabble.com/Allowing-read-only-access-to-config-xml-td393245.html>,
>> and has seen many plugins adopt it over the years, but was disabled by
>> default to gather feedback and because of a concern over the permissions
>> matrix getting too wide.
>>
>> Agent/ExtendedRead was introduced in 2013
>> <https://github.com/jenkinsci/jenkins/commit/5db147e85802c75bac19320383dcaeed88bc77ba>,
>> but didn't see much adoption as it was only added for the REST API in core,
>> undocumented and the extended-read-permission plugin didn't enable it like
>> it did for jobs. This was fixed in 2.238
>> <https://www.jenkins.io/changelog/#v2.238>, with access being extended
>> to all agent views.
>>
>> Overall/SystemRead was introduced in 2.222
>> <https://www.jenkins.io/changelog-old/#v2.222> as part of JEP-224
>> <https://www.jenkins.io/jep/224>, it added onto the initial
>> Job/ExtendedRead by extending the jelly controls to have a read only
>> appearance, replacing text boxes with text, and disabling controls like
>> radio buttons and checkboxes. Initially it was just used on the System
>> configuration page, but many patches
>> <https://github.com/orgs/jenkinsci/projects/4> were landed up till 2.239
>> <https://www.jenkins.io/changelog/#v2.239> to cover most of Jenkins
>> core. Additionally Cloud Stats, JCasC, Simple Disk Usage, Matrix Auth and
>> Role Strategy plugins have been updated.
>>
>> I've created draft PRs for updating the status of the JEP
>> <https://github.com/jenkinsci/jep/pull/297> and Jenkins core
>> <https://github.com/jenkinsci/jenkins/pull/4909>pending feedback.
>>
>> Thoughts +1, -1, ±0?
>>
>> Thanks
>> Tim
>>
>>
>> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3BicOv%2BBkYtxFsoGyyE%2Bsiz6esxppp9_A%3DDdr-%3DejFzCnZw%40mail.gmail.com
> <https://groups.google.com/d/msgid/jenkinsci-dev/CAH-3BicOv%2BBkYtxFsoGyyE%2Bsiz6esxppp9_A%3DDdr-%3DejFzCnZw%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>


-- 
Antonio Muñiz
Human, Engineer
CloudBees, Inc.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAJc7kzRHYeHA-sATKMfOZv8YWO8%3D%3De90wO0FUys5J6S75x3ffQ%40mail.gmail.com.

Reply via email to