jenkins.security

Class LastGrantedAuthoritiesProperty

java.lang.Object

hudson.model.UserProperty

jenkins.security.LastGrantedAuthoritiesProperty

All Implemented Interfaces:

ExtensionPoint, Describable<UserProperty>, ReconfigurableDescribable<UserProperty>

public class LastGrantedAuthoritiesProperty
extends UserProperty

Remembers the set of GrantedAuthoritys that was obtained the last time the user has logged in. This allows us to implement User.impersonate() with proper set of groups.

Since:

1.556

Author:

Kohsuke Kawaguchi

See Also:

ImpersonatingUserDetailsService

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	LastGrantedAuthoritiesProperty.DescriptorImpl
static class	LastGrantedAuthoritiesProperty.SecurityListenerImpl Listen to the login success/failure event to persist GrantedAuthoritys properly.

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Field Summary

Fields inherited from class hudson.model.UserProperty

user

Constructor Summary

Constructors

Constructor and Description
LastGrantedAuthoritiesProperty()

Method Summary

Modifier and Type	Method and Description
org.acegisecurity.GrantedAuthority[]	getAuthorities()
void	invalidate() Removes the recorded information
UserProperty	reconfigure(org.kohsuke.stapler.StaplerRequest req, net.sf.json.JSONObject form) Stick to the same object since there's no UI for this.
void	update(org.acegisecurity.Authentication auth) Persist the information with the new UserDetails.

Methods inherited from class hudson.model.UserProperty

all, getDescriptor, setUser

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LastGrantedAuthoritiesProperty

public LastGrantedAuthoritiesProperty()

Method Detail

reconfigure

public UserProperty reconfigure(org.kohsuke.stapler.StaplerRequest req,
                                net.sf.json.JSONObject form)
                         throws Descriptor.FormException

Stick to the same object since there's no UI for this.

Specified by:

reconfigure in interface ReconfigurableDescribable<UserProperty>

Overrides:

reconfigure in class UserProperty

Parameters:

req - The current HTTP request being processed.

form - JSON fragment that corresponds to this describable object. If the newly submitted form doesn't include a fragment for this describable (meaning the user has de-selected your descriptor), then this argument is null.

Returns:

The new instance. To not to create an instance of a describable, return null.

Throws:

Descriptor.FormException

getAuthorities

public org.acegisecurity.GrantedAuthority[] getAuthorities()

update

public void update(@Nonnull
                   org.acegisecurity.Authentication auth)
            throws IOException

Persist the information with the new UserDetails.

Throws:

IOException

invalidate

public void invalidate()
                throws IOException

Removes the recorded information

Throws:

IOException