On 1 December 2015 at 10:01, iostrym <[email protected]> wrote:

> Thanks.
>
> role based plugin don't work without cloudbee folder ? I had a quick look
> at role based plugin but hte problem is that all existing right for each
> user (around 30) will be lost with this plugin. It seems that we will have
> to redo all right for each user. right ?
>
> I also discover that at job creation it is possible to "protect" the job
> and add right for specific user but it is quite fastiduous if there are
> several user to give access.
>
>
Ahem...

[Puts on CloudBees Employee Hat]

Really sounds like you are looking for some of the enterprise features in
CloudBees Jenkins Enterprise:

* CloudBees RBAC plugin supports importing your current Matrix or Project
Matrix security settings so you can migrate to an fully RBAC model piecewise
* CloudBees RBAC plugin allows for creation of local groups that make
per-project role assignment easier
* CloudBees RBAC plugin allows delegation of RBAC management for specific
items to a subset of users
* CloudBees Folders plus allows restriction of some slaves to jobs within
specific folders
* etc

[Removes CloudBees Employee Hat]


> In the same subject, what about "slave protection" ? If I add a slave, is
> it possible to be sure that a job from another group of user (another
> project) won't use that slave ? I don't find any slave protection. Even if
> the slave is not configured to be used "as much as possible", it seems to
> be still possible for a user to select my slave for his job. (and execute a
> rm * -rf on my machine...)
>
> Best regards,
>
> Le mardi 1 décembre 2015 03:57:08 UTC+1, Indra Gunawan (ingunawa) a écrit :
>>
>> Use Cloudbee Folder, and Role based Plugin.  Define specific role based
>> on the regex of each of name of folder for projects/jobs.   One category of
>> jobs each in a separate folder.
>>
>>
>> From: <[email protected]> on behalf of iostrym <
>> [email protected]>
>> Reply-To: "[email protected]" <[email protected]>
>> Date: Monday, November 30, 2015 at 1:48 AM
>> To: "[email protected]" <[email protected]>
>> Subject: jenkins advanced user right
>>
>> Hello,
>>
>> Is it possible to give right for some users to create and configure their
>> job without being able to modify some jobs.
>>
>> Typically, have one job area for one project and another job area for
>> another project. And use from one project that can't modify job for the
>> other project.
>>
>> Is this possible ?
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Jenkins Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/jenkinsci-users/c843b0cd-778b-4960-aafe-1371b7686c62%40googlegroups.com
>> <https://groups.google.com/d/msgid/jenkinsci-users/c843b0cd-778b-4960-aafe-1371b7686c62%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/5eeb1923-d6cc-4a36-b93a-7ff47c119f95%40googlegroups.com
> <https://groups.google.com/d/msgid/jenkinsci-users/5eeb1923-d6cc-4a36-b93a-7ff47c119f95%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CA%2BnPnMw%3DVcCRZrwAtXk4jsDNVtmOV7C%3DTER8qVeyUWPNiUm1wA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to