jenkins LDAP authentication - deny -


we use jenkins ldap authentication. question: possible implement rights scenario?

if not logged-in (anonymous)                      ==> read                            if logged in (via ldap) not "special" user  ==> full access specified jobs  if logged in (via ldap) , "special" user ==> full admin access                   

my goal avoid having manage large numbers of users explicitly.

there's plugin "role strategy plugin" supports permissions specified jobs, doesn't distinguish between anonymous , logged-in (via ldap) users. seems way grant access specified jobs grant user user...which want avoid.

thanks! matt

can use active directory? if so:

  • you can use groups authentication, , therefore assign rights entire group.
  • you can use project-based matrix, specified jobs visible specific groups

if cannot (only ldap):

i think can still above, think ldap configuration require more work groups. not sure of group support in jenkins ldap api.


Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -