jenkins.security.s2m

Class AdminWhitelistRule

java.lang.Object

jenkins.security.s2m.AdminWhitelistRule

All Implemented Interfaces:

org.kohsuke.stapler.StaplerProxy

@Extension
public class AdminWhitelistRule
extends Object
implements org.kohsuke.stapler.StaplerProxy

Rules of whitelisting for RoleSensitive objects and FilePaths.

Author:

Kohsuke Kawaguchi

Field Summary

Fields

Modifier and Type	Field and Description
jenkins.security.s2m.FilePathRuleConfig	filePathRules FilePath access pattern rules specified by the admin
CallableRejectionConfig	rejected Ones that we rejected but want to run by admins.
jenkins.security.s2m.CallableWhitelistConfig	whitelisted Callables that admins have whitelisted explicitly.

Constructor Summary

Constructors

Constructor and Description
AdminWhitelistRule()

Method Summary

Modifier and Type	Method and Description
boolean	checkFileAccess(String op, File f)
org.kohsuke.stapler.HttpResponse	doApprove(String value) Approves specific callables by their names.
org.kohsuke.stapler.HttpResponse	doApproveAll() Approves all the currently rejected subjects
org.kohsuke.stapler.HttpResponse	doSubmit(org.kohsuke.stapler.StaplerRequest req)
boolean	getMasterKillSwitch()
Object	getTarget() Restricts the access to administrator.
boolean	isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject, Collection<org.jenkinsci.remoting.Role> expected, Object context)
void	setMasterKillSwitch(boolean state)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

rejected

public final CallableRejectionConfig rejected

Ones that we rejected but want to run by admins.

whitelisted

public final jenkins.security.s2m.CallableWhitelistConfig whitelisted

Callables that admins have whitelisted explicitly.

filePathRules

public final jenkins.security.s2m.FilePathRuleConfig filePathRules

FilePath access pattern rules specified by the admin

Constructor Detail

AdminWhitelistRule

public AdminWhitelistRule()
                   throws IOException,
                          InterruptedException

Throws:

IOException

InterruptedException

Method Detail

isWhitelisted

public boolean isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject,
                             Collection<org.jenkinsci.remoting.Role> expected,
                             Object context)

checkFileAccess

public boolean checkFileAccess(String op,
                               File f)

doSubmit

public org.kohsuke.stapler.HttpResponse doSubmit(org.kohsuke.stapler.StaplerRequest req)
                                          throws IOException

Throws:

IOException

doApproveAll

public org.kohsuke.stapler.HttpResponse doApproveAll()
                                              throws IOException

Approves all the currently rejected subjects

Throws:

IOException

doApprove

public org.kohsuke.stapler.HttpResponse doApprove(@QueryParameter
                                                  String value)
                                           throws IOException

Approves specific callables by their names.

Throws:

IOException

getMasterKillSwitch

public boolean getMasterKillSwitch()

setMasterKillSwitch

public void setMasterKillSwitch(boolean state)

getTarget

public Object getTarget()

Restricts the access to administrator.

Specified by:

getTarget in interface org.kohsuke.stapler.StaplerProxy