I agree that it's not a great solution but it'll get me by while I search for a more favorable one. Is there another way to utilize the webhook feature without enabling any anon privileges?
----- Original Message ----- From: "Kevin Fleming (BLOOMBERG/ 731 LEXIN)" <[email protected]> To: [email protected] Sent: Wednesday, April 9, 2014 2:07:17 PM Subject: Re: Enabling Jenkins Security Blocks Github Webook <404 Error> Keep in mind that this will allow anyone to kick off builds of your jobs if they can reach your Jenkins web interface. This may not be a concern for you, but something to think about. ----- Original Message ----- From: [email protected] To: [email protected] At: Apr 9 2014 14:25:54 Ah, no. Apologies, forgot to remove that. Initially I had it enabled as disabling it seemed to break the webhook feature. Today with Jobs:configure off, it seems to work fine. To clarify - Jobs: Read, Build | Overall: read ----- Original Message ----- From: "Kevin Fleming (BLOOMBERG/ 731 LEXIN)" <[email protected]> To: [email protected] Sent: Tuesday, April 8, 2014 4:18:12 PM Subject: Re: Enabling Jenkins Security Blocks Github Webook <404 Error> You are allowing 'anonymous' to configure your jobs? That sounds quite bad. ----- Original Message ----- From: [email protected] To: [email protected] At: Apr 8 2014 17:05:42 >> My security matrix grants Overall and Job Read to Anonymous. That did the trick. After some fidgeting with anon permissions, the following allowed git to push the build. Overall: +read and Jobs: +configure +read +build -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
