jenkins LDAP authentication - deny -
we use jenkins ldap authentication. question: possible implement rights scenario?
if not logged-in (anonymous) ==> read if logged in (via ldap) not "special" user ==> full access specified jobs if logged in (via ldap) , "special" user ==> full admin access
my goal avoid having manage large numbers of users explicitly.
there's plugin "role strategy plugin" supports permissions specified jobs, doesn't distinguish between anonymous , logged-in (via ldap) users. seems way grant access specified jobs grant user user...which want avoid.
thanks! matt
can use active directory? if so:
- you can use groups authentication, , therefore assign rights entire group.
- you can use project-based matrix, specified jobs visible specific groups
if cannot (only ldap):
i think can still above, think ldap configuration require more work groups. not sure of group support in jenkins ldap api.
Comments
Post a Comment