Re: JEP-225: Folder-based access control for any credentials provider

2020-02-14 Thread Matt Sicker
ACL is in jenkins-core along with AccessControlled and the other classes Jesse mentioned. On Fri, Feb 14, 2020 at 4:59 AM Chris Kilding wrote: > > I meant the permissions thing which is dotted all around the codebase, and > looks like this: > > import hudson.security.ACL; > import

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-14 Thread Chris Kilding
I meant the permissions thing which is dotted all around the codebase, and looks like this: import hudson.security.ACL; import org.acegisecurity.Authentication; public void doSomething(Authentication authentication) { if (ACL.SYSTEM.equals(authentication)) { // do something } } The

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-13 Thread Daniel Beck
On Wed, Feb 12, 2020 at 6:50 PM Chris Kilding < chris+jenk...@chriskilding.com> wrote: > I have encountered the following solutions which seem relevant, but I know > very little about them: > > - Cloudbees RBAC plugin (commercial) > - Role Strategy Plugin > - Jenkins permissions system > Given

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-13 Thread Jesse Glick
On Wed, Feb 12, 2020 at 12:50 PM Chris Kilding wrote: > I have encountered the following solutions which seem relevant, but I know > very little about them: > > - Cloudbees RBAC plugin (commercial) https://docs.cloudbees.com/docs/admin-resources/latest/plugins/rbac a.k.a. `nectar-rbac` > -

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-13 Thread Tim Jacomb
d someone who knows these components well be able to provide more >>> details, and thoughts on how we might add concepts of folders and >>> credentials to them, so that credential access constraints could be >>> formulated as standard rules? >>> >>> Chris &

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-13 Thread Chris Kilding
; credentials to them, so that credential access constraints could be >> formulated as standard rules? >> >> Chris >> >> > On 12 Feb 2020, at 16:29, Chris Kilding > > <mailto:chris%2bjenk...@chriskilding.com>> wrote: >> > >> > He

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-12 Thread Tim Jacomb
ts well be able to provide more >> details, and thoughts on how we might add concepts of folders and >> credentials to them, so that credential access constraints could be >> formulated as standard rules? >> >> Chris >> >> > On 12 Feb 2020, at 16:29, Chris Kilding

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-12 Thread Chris Kilding
rovide more >> details, and thoughts on how we might add concepts of folders and >> credentials to them, so that credential access constraints could be >> formulated as standard rules? >> >> Chris >> >> > On 12 Feb 2020, at 16:29, Chris Kilding

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-12 Thread Tim Jacomb
: > > > > Hello, > > > > This is the discussion thread for JEP-225: Folder-based access control > for any credentials provider. > > > > A brief summary... > > > > The Cloudbees Folders Plugin has the ability to restrict access to > credentials

Re: JEP-225: Folder-based access control for any credentials provider

2020-02-12 Thread Chris Kilding
? Chris > On 12 Feb 2020, at 16:29, Chris Kilding > wrote: > > Hello, > > This is the discussion thread for JEP-225: Folder-based access control for > any credentials provider. > > A brief summary... > > The Cloudbees Folders Plugin has the ability to