From e994dc25e0278991ac4dd9506ced72dee78e098f Mon Sep 17 00:00:00 2001
From: Mikolaj Izdebski <mizdebsk@redhat.com>
Date: Wed, 22 Jul 2015 10:58:54 +0000
Subject: [PATCH] Configure Jenkins project matrix-based security

---
 roles/jenkins/master/files/config.xml | 35 +++++++++++++++++++++++++--
 1 file changed, 33 insertions(+), 2 deletions(-)

diff --git a/roles/jenkins/master/files/config.xml b/roles/jenkins/master/files/config.xml
index 7cc7ab765b..55843eef22 100644
--- a/roles/jenkins/master/files/config.xml
+++ b/roles/jenkins/master/files/config.xml
@@ -5,7 +5,38 @@
   <numExecutors>2</numExecutors>
   <mode>NORMAL</mode>
   <useSecurity>true</useSecurity>
-  <authorizationStrategy class="hudson.security.FullControlOnceLoggedInAuthorizationStrategy"/>
+  <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:mizdebsk</permission>
+    <permission>hudson.model.Computer.Build:mizdebsk</permission>
+    <permission>hudson.model.Computer.Configure:mizdebsk</permission>
+    <permission>hudson.model.Computer.Connect:mizdebsk</permission>
+    <permission>hudson.model.Computer.Create:mizdebsk</permission>
+    <permission>hudson.model.Computer.Delete:mizdebsk</permission>
+    <permission>hudson.model.Computer.Disconnect:mizdebsk</permission>
+    <permission>hudson.model.Hudson.Administer:mizdebsk</permission>
+    <permission>hudson.model.Hudson.ConfigureUpdateCenter:mizdebsk</permission>
+    <permission>hudson.model.Hudson.Read:mizdebsk</permission>
+    <permission>hudson.model.Hudson.RunScripts:mizdebsk</permission>
+    <permission>hudson.model.Hudson.UploadPlugins:mizdebsk</permission>
+    <permission>hudson.model.Item.Build:mizdebsk</permission>
+    <permission>hudson.model.Item.Cancel:mizdebsk</permission>
+    <permission>hudson.model.Item.Configure:mizdebsk</permission>
+    <permission>hudson.model.Item.Create:mizdebsk</permission>
+    <permission>hudson.model.Item.Delete:mizdebsk</permission>
+    <permission>hudson.model.Item.Discover:mizdebsk</permission>
+    <permission>hudson.model.Item.Read:mizdebsk</permission>
+    <permission>hudson.model.Item.Workspace:mizdebsk</permission>
+    <permission>hudson.model.Run.Delete:mizdebsk</permission>
+    <permission>hudson.model.Run.Update:mizdebsk</permission>
+    <permission>hudson.model.View.Configure:mizdebsk</permission>
+    <permission>hudson.model.View.Create:mizdebsk</permission>
+    <permission>hudson.model.View.Delete:mizdebsk</permission>
+    <permission>hudson.model.View.Read:mizdebsk</permission>
+  </authorizationStrategy>
   <securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1">
     <endpoint>http://id.fedoraproject.org/</endpoint>
   </securityRealm>
@@ -33,4 +64,4 @@
   <label></label>
   <nodeProperties/>
   <globalNodeProperties/>
-</hudson>
+</hudson>
\ No newline at end of file