[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey updated JENKINS-36229 Jenkins / JENKINS-36229 API for UI to honour permissions Change By: Vivek Pandey Status: In Review Resolved Resolution: Fixed Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey updated JENKINS-36229 Jenkins / JENKINS-36229 API for UI to honour permissions Change By: Vivek Pandey Status: In Progress Review Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey commented on JENKINS-36229 Re: API for UI to honour permissions James Dumay I am going to make first cut of jenkins config object in this ticket. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay commented on JENKINS-36229 Re: API for UI to honour permissions That is, Making it extensible Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay commented on JENKINS-36229 Re: API for UI to honour permissions Brilliant idea Vivek - now we have a good home for the config of other things too! Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey commented on JENKINS-36229 Re: API for UI to honour permissions James Dumay Good idea, we can do that using BluePageDecorator, it will inject config objet on window element. I think we are doing things like this from some of the plugins anyways. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay commented on JENKINS-36229 Re: API for UI to honour permissions Vivek Pandey what about a app config JSON object that gets embedded on window.blueoceanConfig when the index.jelly gets rendered? No round trip required. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey started work on JENKINS-36229 Change By: Vivek Pandey Status: Open In Progress Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey commented on JENKINS-36229 Re: API for UI to honour permissions James Dumay yes JWT gets issues for anonymous user. I see your point, I think UI needs to display Login button if security is turned on. Putting such information in JWT token is bit odd though, its jenkins config information and there could be more going forward. Perhaps, right place could be in /organizations/:id API, where it provides organization level config information. Why does UI needs to load on every page, could it not cache it? Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay commented on JENKINS-36229 Re: API for UI to honour permissions > Can we be more specific? Did you mean "can create a job/pipeline"? Yes, has the ability to create jobs. > if GET /jwt-auth/token return 401 auth is turned on. if auth is off, does a JWT get issued? I asked because I do not think the UI should need to hit the server to ask that (it will on every page load). Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey commented on JENKINS-36229 Re: API for UI to honour permissions James Dumay > Start runs > Stop runs These two can appear on pipeline object as such permissions could be specific to a job/pipeline based on authorization strategy. > Can create items Can we be more specific? Did you mean "can create a job/pipeline"? > Is an administrator > Don't know if handled elsewhere but can we tell if auth is on or off? if GET /jwt-auth/token return 401 auth is turned on. > Logged In vs Logged Out vs Anonymous (no auth) GET /jwt-auth/token Logged In: 200 OK with token in the header Logged Out: 401 Unauthorized Anonymous: JWT claim 'sub' == 'anonymous' is true Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Michael Neale updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Change By: Michael Neale Priority: Blocker Critical Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay edited a comment on JENKINS-36229 Re: API for UI to honour permissions Can the user:* Start runs* Stop runs* Can create items* Is an administratorDon't know if handled elsewhere but can we tell if auth is on or off? Logged In vs Logged Out vs Anonymous (no auth) Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay commented on JENKINS-36229 Re: API for UI to honour permissions Can the user: Start runs Stop runs Can create items Is an administrator Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Updated to blocking. Change By: James Dumay Priority: Major Blocker Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Change By: James Dumay Sprint: 1.0-m11, 1.0-m12 , 1.0-beta-1 Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Change By: James Dumay Sprint: 1.0-m11 , 1.0-m12 Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Change By: James Dumay Priority: Minor Major Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title Vivek Pandey commented on JENKINS-36229 Re: API for UI to honour permissions James Dumay We can leverage JWT tokens for this purpose. I guess one of the feature of JWT is pass such information to clients in secure way. More on this when JWT ticket gets worked on. Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay updated an issue Jenkins / JENKINS-36229 API for UI to honour permissions Change By: James Dumay Sprint: 1.0-m11 Add Comment This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-36229) API for UI to honour permissions
Title: Message Title James Dumay created an issue Jenkins / JENKINS-36229 API for UI to honour permissions Issue Type: Task Assignee: Vivek Pandey Components: blueocean-plugin Created: 2016/Jun/27 12:13 AM Labels: api Priority: Minor Reporter: James Dumay We need a way for the frontend to conditionally show UI depending on what permissions the user has. For example, the run buttons on https://ci.blueocean.io/blue/organizations/jenkins/blueocean/branches are shown if you are logged out. We need a way in the API for the UI to know what actions are available for their permissions. Add Comment
