Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Simplify jenkins permissions

Browse source
This commit is contained in:
Mikolaj Izdebski 2015-07-29 07:15:30 +00:00
parent 60fce03bad
commit b7243242e7
1 changed files with 7 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

63
roles/jenkins/master/files/config.xml
View file

@ -6,66 +6,17 @@
<mode>EXCLUSIVE</mode>
<useSecurity>true</useSecurity>
<authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:msrb</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:msrb</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:msrb</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:msrb</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:mizdebsk</permission>
<permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:msrb</permission>
<permission>hudson.model.Computer.Build:mizdebsk</permission>
<permission>hudson.model.Computer.Build:msrb</permission>
<permission>hudson.model.Computer.Configure:mizdebsk</permission>
<permission>hudson.model.Computer.Configure:msrb</permission>
<permission>hudson.model.Computer.Connect:mizdebsk</permission>
<permission>hudson.model.Computer.Connect:msrb</permission>
<permission>hudson.model.Computer.Create:mizdebsk</permission>
<permission>hudson.model.Computer.Create:msrb</permission>
<permission>hudson.model.Computer.Delete:mizdebsk</permission>
<permission>hudson.model.Computer.Delete:msrb</permission>
<permission>hudson.model.Computer.Disconnect:mizdebsk</permission>
<permission>hudson.model.Computer.Disconnect:msrb</permission>
<permission>hudson.model.Hudson.Administer:sysadmin-jenkins</permission>
<permission>hudson.model.Hudson.ConfigureUpdateCenter:sysadmin-jenkins</permission>
<permission>hudson.model.Hudson.Read:sysadmin-jenkins</permission>
<permission>hudson.model.Hudson.Read:anonymous</permission>
<permission>hudson.model.Hudson.RunScripts:sysadmin-jenkins</permission>
<permission>hudson.model.Item.Read:anonymous</permission>
<!-- temp until mizdebsk is added to sysadmin-jenkins -->
<permission>hudson.model.Hudson.Administer:mizdebsk</permission>
<permission>hudson.model.Hudson.Administer:msrb</permission>
<permission>hudson.model.Hudson.ConfigureUpdateCenter:mizdebsk</permission>
<permission>hudson.model.Hudson.ConfigureUpdateCenter:msrb</permission>
<permission>hudson.model.Hudson.Read:mizdebsk</permission>
<permission>hudson.model.Hudson.Read:msrb</permission>
<permission>hudson.model.Hudson.RunScripts:mizdebsk</permission>
<permission>hudson.model.Hudson.RunScripts:msrb</permission>
<permission>hudson.model.Hudson.UploadPlugins:mizdebsk</permission>
<permission>hudson.model.Hudson.UploadPlugins:msrb</permission>
<permission>hudson.model.Item.Build:mizdebsk</permission>
<permission>hudson.model.Item.Build:msrb</permission>
<permission>hudson.model.Item.Cancel:mizdebsk</permission>
<permission>hudson.model.Item.Cancel:msrb</permission>
<permission>hudson.model.Item.Configure:mizdebsk</permission>
<permission>hudson.model.Item.Configure:msrb</permission>
<permission>hudson.model.Item.Create:mizdebsk</permission>
<permission>hudson.model.Item.Create:msrb</permission>
<permission>hudson.model.Item.Delete:mizdebsk</permission>
<permission>hudson.model.Item.Delete:msrb</permission>
<permission>hudson.model.Item.Discover:mizdebsk</permission>
<permission>hudson.model.Item.Discover:msrb</permission>
<permission>hudson.model.Item.Read:mizdebsk</permission>
<permission>hudson.model.Item.Read:msrb</permission>
<permission>hudson.model.Item.Workspace:mizdebsk</permission>
<permission>hudson.model.Item.Workspace:msrb</permission>
<permission>hudson.model.Run.Delete:mizdebsk</permission>
<permission>hudson.model.Run.Delete:msrb</permission>
<permission>hudson.model.Run.Update:mizdebsk</permission>
<permission>hudson.model.Run.Update:msrb</permission>
<permission>hudson.model.View.Configure:mizdebsk</permission>
<permission>hudson.model.View.Configure:msrb</permission>
<permission>hudson.model.View.Create:mizdebsk</permission>
<permission>hudson.model.View.Create:msrb</permission>
<permission>hudson.model.View.Delete:mizdebsk</permission>
<permission>hudson.model.View.Delete:msrb</permission>
<permission>hudson.model.View.Read:mizdebsk</permission>
<permission>hudson.model.View.Read:msrb</permission>
</authorizationStrategy>
<securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1">
<endpoint>http://id.fedoraproject.org/</endpoint>