Eclipse Community Forums: Hudson » SCM Post-commit notification should not require authentication

Home » Archived » Hudson » SCM Post-commit notification should not require authentication(/notifyCommit urls for SCMs should be unprotected )

Show: Today's Messages :: Show Polls :: Message Navigator

SCM Post-commit notification should not require authentication [message #1314197]

Fri, 25 April 2014 08:13

Lukasz Jader

Messages: 37
Registered: October 2013

Member

Post-commit notification is send at /notifyCommit urls exposed by SCMs.

Those urls by itself are not protected, but sadly it requires overall READ permission for Hudson instance.
In more formal companies it's very common to completly secure Hudson instance, which invlolves removal of READ permisions from 'Anonymous' users.

Please introduce in Hudson concept of completly unprotected actions, which could be used in scenario described above.

It will be a small, but significant change, as seen in this commit:
https://github.com/jenkinsci/jenkins/commit/4093fcd4b92414035e61a563e0e2fc08126eb0fd

After introduction of UnprotectedRootAction it will be easy to unprotect /notifyCommit urls, as seen here:
https://github.com/jenkinsci/git-plugin/commit/b3891fabc448e4c388ec86f2a43c3a7d5bd0c41a

Report message to a moderator