OpenSource/jenkins
1
0 Fork 0
mirror of https://github.com/jenkinsci/jenkins.git synced 2026-10-26 19:15:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Warn about unsafe authorization strategy (#27499)

Browse Source 
Issue #27465: warn about unsafe authorization strategy
This commit is contained in:
Somesh Kumar Singh authored and GitHub committed 2026-10-10 10:13:46 -06:00
1 parent d84f69e91c
commit 8a98cbdf9c
2 files changed
+4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
+3
View File
@@ -1,6 +1,9 @@
<?jelly escape-by-default='true'?> <?jelly escape-by-default='true'?>
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson"
xmlns:f="/lib/form"> xmlns:f="/lib/form">
<div class="jenkins-alert jenkins-alert-warning">
${%warning}
</div>
<f:entry field="allowAnonymousRead"> <f:entry field="allowAnonymousRead">
<f:checkbox default="true" title="${%Allow anonymous read access}" /> <f:checkbox default="true" title="${%Allow anonymous read access}" />
</f:entry> </f:entry>
core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties
+1
View File
@@ -0,0 +1 @@
warning=All authenticated users will be granted full administrative access. Only use this authorization strategy if all authenticated users are fully trusted.