Package io.jenkins.plugins.batchcontrol.security
package io.jenkins.plugins.batchcontrol.security
-
ClassDescriptionmatrix-auth's project-based matrix with Batch Control grants layered on top (D-35a, ARCHITECTURE section 4).Found by XStream through the
$ConverterImplnaming convention.Listed on the security page.JCasC support forBatchControlMatrixAuthorizationStrategyunder the symbolbatchControlProjectMatrix, with the same schema as matrix-auth'sprojectMatrix(D-35a, PoC-5 row 8).The five plugin permissions (SPEC item 2), exposed to Matrix/Role authorization strategies as the "Batch Control" group.role-strategy's role-based strategy with Batch Control grants layered on top (D-35a, ARCHITECTURE section 4).role-strategy's converter is public: the on-disk format is the same, only the type differs.Listed on the security page.JCasC support forBatchControlRoleBasedAuthorizationStrategyunder the symbolbatchControlRoleBased, with the same schema as role-strategy'sroleBased(D-35a, PoC-5 row 8).D-59: putsMoveGuardin front of every move the folders plugin performs.D-40: remembers, on the thread that runs it, the target of acreate-joborcopy-jobCLI command, forNewItemName.Who deleted an item (SPEC 6: the history names who did what).Entry points to the grant layer for code outside this package (D-35b, D-35c).Implemented by the Batch Control authorization strategies, the subclasses of the supported strategies that layer active grants over the parent's ACLs (D-35a, ARCHITECTURE section 4).Runtime authority on active grants (SPEC item 8).security-13 S-13-09, D-80: the identity of an item's directory, recorded with an activation state so that a state left behind by a deleted item is not taken for a new item of the same name.D-59: the answer to a move thatMoveGuardrefused, in the D-48 style: HTTP 403 and a plain message saying what the move needs and what the user is missing.Copies between a plain supported strategy and its Batch Control subclass (D-35a, D-35d): the migration action and its reverse.D-50, D-50a (SPEC item 2, e2e-03 DEF-37, security-21): whether builds on this instance may run as SYSTEM although change control is on.D-74: permission windows follow their item, as matrix-auth's item permissions do.