Defined a new permission, ExtendedRead, which can be enabled by specifying true
for the system property hudson.security.ExtendedReadPermission. Granting job
configuration permissions implies this permission.
main/core/src/main/java/model/Item.java
Added plumbing for dynamic enabling and disabling of permissions at runtime.
This will be the basis for future UI based toggling of the availability of a
permission.
main/core/src/main/java/hudson/security/Permission.java
Add the enabled state of a permission to the decision about whether a principal
has it or not. Only show a permission when it's enabled.
main/core/src/main/java/hudson/security/GlobalMatrixAuthorizationStrategy.java
Allow access to config.xml when ExtendedRead is granted.
main/core/src/main/java/hudson/model/Job.java
Don't show the save button if the user only has ExtendedRead.
main/core/src/main/resources/hudson/model/Job/configure.jelly
Change the text of the Configure link in the side panel based on whether a user
has Configure or ExtendedRead permissions.
main/core/src/main/resources/hudson/model/AbstractProject/sidepanel.jelly
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21626 71c3de6d-444a-0410-be80-ed276b4c234a
HUDSON_HOME URL, then include Authorization header in Hudson http requests).
Also moved Functions.isUnitTest to Main.isUnitTest, to remove dependency on
winstone.jar for running hudson.Main (Main uses EnvVars which checks isUnitTest
flag.. in Functions which uses servlet classes).
Updated http://wiki.hudson-ci.org/display/HUDSON/Monitoring+external+jobs
with info about required jars and authentication.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21479 71c3de6d-444a-0410-be80-ed276b4c234a
though probably could be even more restrictive since these are used as shell variables.
Also added duplicate name check when form is submitted.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21340 71c3de6d-444a-0410-be80-ed276b4c234a
add encoding when needed for characters in these values, particularly /
- Use Util.rawEncode in AbstractItem.getShortUrl() so that axis values
needing encoding will be encoded
- STAPLER-8 fix makes Stapler properly parse a URL with %2F (don't
split on %2F, only a real /)
- Stapler fix also makes urls generated via Ancestor class maintain proper encoding
- Add MatrixBuild.RunPtr.getShortUrl() and use this in MatrixBuild/ajaxMatrix.jelly
so links to combinations are properly encoded
- Use Util.rawEncode in MatrixProject.getRootDirFor() so directories created on
the filesystem won't use illegal characters; matching decode() in
MatrixProject.loadConfigurations()
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21321 71c3de6d-444a-0410-be80-ed276b4c234a
- toString -> getShortDescription so that ParameterValue.getShortDescription() can explain what this method is expected to return.
- added proper HTML escape to avoid XSS vulnerability.
- modified to use StringBuilder for string concatanation.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21252 71c3de6d-444a-0410-be80-ed276b4c234a
This is very useful when you are using the parameterized trigger plugin and have dozens of queued
jobs -- you can now know which jobs to kill.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21175 71c3de6d-444a-0410-be80-ed276b4c234a
task or even slave related.
- Removes all caching of labels. Slow extensions can cache (see nodetags).
- Pulls up common implementations of getAssignedLabels and an immutable
getDynamicLabels facility into Node. getDynamicLabels was previously public,
but never exported.
- factored out some trivially duplicated code into Node.getHudsonlabel
- changes LabelFinder to return Collection<Label> as that is the data that
higher layers want to work with, and there is no good reason to force lookups
when implementations can and should cache themselves.
- Deletes OSLabeler, a disabled version of the LabelFinder extension point -
there is no need for dead code to be keep in the tree.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21160 71c3de6d-444a-0410-be80-ed276b4c234a
to 0-20, 21-40, ... 81+ and removed hack in Job.java lowering build health
scores by one so 4/5 wouldn't be "sunny". Now 80 is in the 2nd bracket so
hack not needed.
Left image filenames unchanged for compatibility, in case anyone uses
these images for other things.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21152 71c3de6d-444a-0410-be80-ed276b4c234a
https://www.dev.java.net/svn/hudson/branches/rc
........
r20928 | kohsuke | 2009-08-19 14:47:13 -0700 (Wed, 19 Aug 2009) | 1 line
test bug fix.
........
r20929 | kohsuke | 2009-08-19 14:48:23 -0700 (Wed, 19 Aug 2009) | 1 line
bumped up to a new version that has a trouble-shooting hook for resetting cached views
........
r20939 | kohsuke | 2009-08-19 15:20:57 -0700 (Wed, 19 Aug 2009) | 1 line
picking up subversion 1.5
........
r20974 | kohsuke | 2009-08-20 11:50:04 -0700 (Thu, 20 Aug 2009) | 3 lines
Hudson can make mistakes in binding plugins to their right /plugin/NAME/ URLs.
(<a href="http://www.nabble.com/Custom-Plugin---No-external-resources-available-td25064554.html">report</a>)
........
r20975 | kohsuke | 2009-08-20 12:05:11 -0700 (Thu, 20 Aug 2009) | 1 line
Build history AJX update was buggy.
........
r20988 | kohsuke | 2009-08-20 17:01:57 -0700 (Thu, 20 Aug 2009) | 3 lines
Hudson wasn't working on WebLogic on Windows.
(<a href="http://www.nabble.com/Re%3A-Hudson-on-Weblogic-10.3-td25038378.html#a25043415">report</a>)
........
r21009 | kohsuke | 2009-08-21 14:21:35 -0700 (Fri, 21 Aug 2009) | 1 line
[maven-release-plugin] prepare release hudson-
........
r21011 | kohsuke | 2009-08-21 14:22:00 -0700 (Fri, 21 Aug 2009) | 1 line
[maven-release-plugin] prepare for next development iteration
........
r21015 | kohsuke | 2009-08-21 16:00:17 -0700 (Fri, 21 Aug 2009) | 1 line
updated changelog as a part of the release
........
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21095 71c3de6d-444a-0410-be80-ed276b4c234a
- fixed a divide-by-0 problem if every weight is 0.
- Stapler prefers a typed data structure over bare Map, so TagCloudFactory is changed to TagCloud.
- There are different tag cloud rendering for the same model, so the weight assignment is pushed outside the item. For example, labels can be made into a tag cloud via # of slave / # of tied jobs, etc.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@21086 71c3de6d-444a-0410-be80-ed276b4c234a
kohsuke