jenkins LDAP authentication - deny -


we use jenkins ldap authentication. question: possible implement rights scenario?

if not logged-in (anonymous)                      ==> read                            if logged in (via ldap) not "special" user  ==> full access specified jobs  if logged in (via ldap) , "special" user ==> full admin access                   

my goal avoid having manage large numbers of users explicitly.

there's plugin "role strategy plugin" supports permissions specified jobs, doesn't distinguish between anonymous , logged-in (via ldap) users. seems way grant access specified jobs grant user user...which want avoid.

thanks! matt

can use active directory? if so:

  • you can use groups authentication, , therefore assign rights entire group.
  • you can use project-based matrix, specified jobs visible specific groups

if cannot (only ldap):

i think can still above, think ldap configuration require more work groups. not sure of group support in jenkins ldap api.


Comments

Popular posts from this blog

ios - iPhone/iPad different view orientations in different views , and apple approval process -

monitor web browser programmatically in Android? -

c# - Using multiple datasets in RDLC -