org.jenkinsci.plugins.authorizeproject.strategy

Class SystemAuthorizationStrategy

java.lang.Object

hudson.model.AbstractDescribableImpl<AuthorizeProjectStrategy>

org.jenkinsci.plugins.authorizeproject.AuthorizeProjectStrategy

org.jenkinsci.plugins.authorizeproject.strategy.SystemAuthorizationStrategy

All Implemented Interfaces:

hudson.ExtensionPoint, hudson.model.Describable<AuthorizeProjectStrategy>

public class SystemAuthorizationStrategy
extends AuthorizeProjectStrategy

Run builds as ACL.SYSTEM. Using this strategy becomes important when GlobalQueueItemAuthenticator is forcing jobs to a user other than ACL.SYSTEM.

Since:

1.2.0

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SystemAuthorizationStrategy.DescriptorImpl Our descriptor

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

hudson.ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor and Description
SystemAuthorizationStrategy()

Method Summary

Methods

Modifier and Type	Method and Description
org.acegisecurity.Authentication	authenticate(hudson.model.Job<?,?> job, hudson.model.Queue.Item item) Returns the Authentication for the build.
boolean	equals(Object obj) For now we are an object with no configurable fields, so strict instanceof establishes equality.
protected static SystemAuthorizationStrategy	getCurrentStrategy(hudson.model.Job<?,?> job) Return SystemAuthorizationStrategy configured in a job.
SystemAuthorizationStrategy.DescriptorImpl	getDescriptor()
boolean	hasAuthorizationConfigurePermission(hudson.security.AccessControlled context) Tests if the authorization can be configured by the current user.
int	hashCode() For now we are an object with no configurable fields, so return a fixed value.
boolean	hasJobConfigurePermission(hudson.security.AccessControlled context) Tests if the job can be reconfigured by the current user when this strategy is the configured strategy.

Methods inherited from class org.jenkinsci.plugins.authorizeproject.AuthorizeProjectStrategy

all, authenticate, checkAuthorizationConfigurePermission, checkJobConfigurePermission, readResolve

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SystemAuthorizationStrategy

@DataBoundConstructor
public SystemAuthorizationStrategy()

Method Detail

authenticate

public org.acegisecurity.Authentication authenticate(hudson.model.Job<?,?> job,
                                            hudson.model.Queue.Item item)

Returns the Authentication for the build.

Overrides:

authenticate in class AuthorizeProjectStrategy

Parameters:

job - the project to run.

item - the item in queue, which will be a build.

Returns:

true if authentication was successful

getCurrentStrategy

protected static SystemAuthorizationStrategy getCurrentStrategy(hudson.model.Job<?,?> job)

Return SystemAuthorizationStrategy configured in a job.

Parameters:

job - the Job

Returns:

the SystemAuthorizationStrategy or null

hashCode

public final int hashCode()

For now we are an object with no configurable fields, so return a fixed value. If we add configurable fields we probably should consider removing the final.

Overrides:

hashCode in class Object

Returns:

our hashCode.

equals

public final boolean equals(Object obj)

For now we are an object with no configurable fields, so strict instanceof establishes equality. If we add configurable fields we probably should consider removing the final.

Overrides:

equals in class Object

Parameters:

obj - the object to test equality with.

Returns:

true if and only if this is a equivalent SystemAuthorizationStrategy instance.

hasJobConfigurePermission

public boolean hasJobConfigurePermission(hudson.security.AccessControlled context)

Tests if the job can be reconfigured by the current user when this strategy is the configured strategy. Users with Jenkins.ADMINISTER permission skips this check.

Overrides:

hasJobConfigurePermission in class AuthorizeProjectStrategy

Parameters:

context - the context of the job

Returns:

true if and only if the current user is allowed to reconfigure the specified job.

hasAuthorizationConfigurePermission

public boolean hasAuthorizationConfigurePermission(hudson.security.AccessControlled context)

Tests if the authorization can be configured by the current user. Users with Jenkins.ADMINISTER permission skips this check.

Overrides:

hasAuthorizationConfigurePermission in class AuthorizeProjectStrategy

Parameters:

context - the context of the job

Returns:

true if and only if the current user is allowed to configure this authorization.

getDescriptor

public SystemAuthorizationStrategy.DescriptorImpl getDescriptor()

Specified by:

getDescriptor in interface hudson.model.Describable<AuthorizeProjectStrategy>

Overrides:

getDescriptor in class AuthorizeProjectStrategy