Package hudson.security
package hudson.security
Security-related code.
- See Also:
-
ClassDescriptionPartial implementation of
SecurityRealm
for username/password based authentication.Object that has anACL
Deprecated.AccessDeniedException
with more information.HandlesAccessDeniedException
happened during request processing.Thrown if an account creation was attempted but failed due to invalid data being entered into a form.Gate-keeper that controls access to Hudson's model objects.AuthenticationManager
proxy that delegates to another instance.Login filter with a change for Jenkins so that we can pick up the hidden "from" form field defined inlogin.jelly
to send the user back to where he came from, after a successful authentication.Controls authorization throughout Hudson.Implements the dual authentication mechanism.Deprecated.ServletFilter
that chains multipleFilter
s.Deprecated.No longer used.Abstraction for a login mechanism through external authenticator/identity provider (instead of username/password.)Used inFederatedLoginService.FederatedIdentity.signin()
to indicate that the identifier is not currently associated with anyone.Remembers identifiers given byFederatedLoginService
to this user.AuthorizationStrategy
that grants full-control to authenticated user and optionally read access to anonymous usersSecurity configuration.Represents the details of a group.For anonymous requests to pages that require authentication, first respond withHttpServletResponse.SC_FORBIDDEN
, then redirect browsers automatically to the login page.Filter
that Jenkins uses to implement security support.SecurityRealm
that performs authentication by looking upUser
.UserProperty
that provides theUserDetails
view of the User object.Displays "manage users" link in the system config ifHudsonPrivateSecurityRealm
is in effect.AuthorizationStrategy
implementation that emulates the legacy behavior.SecurityRealm
that acceptsContainerAuthentication
object without any check (that is, by assuming that the such token is already authenticated by the container.)Generated localization support class.Filter
that does nothing.Permission, which represents activity that requires a security privilege.Service which can add permissions for a given user to the configured authorization strategy.Group ofPermission
s that share the sameowner
.Represents the model classPermission
acts on and scoped to.RememberMeServices
proxy.What security enforcement does Hudson do?Pluggable security realm that connects external user database to Hudson.Just a tuple so that we can create various inter-related security related objects and return them all at once.Access control list.TokenBasedRememberMeServices
with modification so as not to rely on the user password being available.If a security exception causedJellyTagException
, rethrow it accordingly so thatExceptionTranslationFilter
can pick it up and initiate the redirection.UserDetailsService
proxy that delegates to another instance.Deprecated.Thrown fromUserDetailsService.loadUserByUsername(String)
to indicate that the underlyingSecurityRealm
is incapable of retrieving the information, and furthermore, the system cannot tell if such an user exists or not.Expose the data needed for /whoAmI, so it can be exposed by Api.
AccessDeniedException3