Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Hudson » SCM Post-commit notification should not require authentication(/notifyCommit urls for SCMs should be unprotected )
icon4.gif  SCM Post-commit notification should not require authentication [message #1314197] Fri, 25 April 2014 08:13 Go to next message
Lukasz Jader is currently offline Lukasz JaderFriend
Messages: 36
Registered: October 2013
Member
Post-commit notification is send at /notifyCommit urls exposed by SCMs.

Those urls by itself are not protected, but sadly it requires overall READ permission for Hudson instance.
In more formal companies it's very common to completly secure Hudson instance, which invlolves removal of READ permisions from 'Anonymous' users.

Please introduce in Hudson concept of completly unprotected actions, which could be used in scenario described above.

It will be a small, but significant change, as seen in this commit:
https://github.com/jenkinsci/jenkins/commit/4093fcd4b92414035e61a563e0e2fc08126eb0fd

After introduction of UnprotectedRootAction it will be easy to unprotect /notifyCommit urls, as seen here:
https://github.com/jenkinsci/git-plugin/commit/b3891fabc448e4c388ec86f2a43c3a7d5bd0c41a
Re: SCM Post-commit notification should not require authentication [message #1314204 is a reply to message #1314197] Fri, 25 April 2014 08:15 Go to previous messageGo to next message
Lukasz Jader is currently offline Lukasz JaderFriend
Messages: 36
Registered: October 2013
Member
Issue posted: https://bugs.eclipse.org/bugs/show_bug.cgi?id=433488
Re: SCM Post-commit notification should not require authentication [message #1387082 is a reply to message #1314204] Tue, 24 June 2014 01:50 Go to previous message
Winston Prakash is currently offline Winston PrakashFriend
Messages: 449
Registered: August 2011
Location: Fremont, CA USA
Senior Member
Fixed in 3.2.0

Winston Prakash
Eclipse Hudson team
Previous Topic:Hudson integration with eclipse
Next Topic:What would you like to see in Hudson 3.2?
Goto Forum:
  


Current Time: Sun Dec 21 17:24:43 GMT 2014

Powered by FUDForum. Page generated in 0.05554 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software