jenkins 权限控制

2017-11-27 971

版权

本文内容由阿里云实名注册用户自发贡献，版权归原作者所有，阿里云开发者社区不拥有其著作权，亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容，填写侵权投诉表单进行举报，一经查实，本社区将立刻删除涉嫌侵权内容。

简介：

 
        1.
        /root/
        .jenkins
        /config
        .xml 
       
        <useSecurity>
        true
        <
        /useSecurity
        > 
       
        <authorizationStrategy class=
        "hudson.security.GlobalMatrixAuthorizationStrategy"
        > 
       
        <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:admin<
        /permission
        > 
       
        <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:admin<
        /permission
        > 
       
        <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:admin<
        /permission
        > 
       
        <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:admin<
        /permission
        > 
       
        <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Build:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Configure:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Connect:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Create:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Delete:admin<
        /permission
        > 
       
        <permission>hudson.model.Computer.Disconnect:admin<
        /permission
        > 
       
        <permission>hudson.model.Hudson.Administer:admin<
        /permission
        > 
       
        <permission>hudson.model.Hudson.ConfigureUpdateCenter:admin<
        /permission
        > 
       
        <permission>hudson.model.Hudson.Read:admin<
        /permission
        > 
       
        <permission>hudson.model.Hudson.Read:anonymous<
        /permission
        > 
       
        <permission>hudson.model.Hudson.Read:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Hudson.RunScripts:admin<
        /permission
        > 
       
        <permission>hudson.model.Hudson.UploadPlugins:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Build:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Build:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Cancel:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Cancel:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Configure:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Configure:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Create:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Create:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Delete:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Delete:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Discover:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Discover:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Move:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Read:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Read:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Item.Workspace:admin<
        /permission
        > 
       
        <permission>hudson.model.Item.Workspace:dubbodev<
        /permission
        > 
       
        <permission>hudson.model.Run.Delete:admin<
        /permission
        > 
       
        <permission>hudson.model.Run.Replay:admin<
        /permission
        > 
       
        <permission>hudson.model.Run.Update:admin<
        /permission
        > 
       
        <permission>hudson.model.View.Configure:admin<
        /permission
        > 
       
        <permission>hudson.model.View.Create:admin<
        /permission
        > 
       
        <permission>hudson.model.View.Delete:admin<
        /permission
        > 
       
        <permission>hudson.model.View.Read:admin<
        /permission
        > 
       
        <permission>hudson.scm.SCM.Tag:admin<
        /permission
        > 
       
        <
        /authorizationStrategy
        > 
       
        <securityRealm class=
        "hudson.security.HudsonPrivateSecurityRealm"
        > 
       
        <disableSignup>
        false
        <
        /disableSignup
        > 
       
        <enableCaptcha>
        false
        <
        /enableCaptcha
        > 
       
        <
        /securityRealm
        > 
       
        这是允许admin登陆管理任何项目
       
        2. Role Strategy Plugin插件 实现不同用户组显示对应视图views中不同的jobs
       
        讲解的很详细