hudson.security

Class GlobalMatrixAuthorizationStrategy

java.lang.Object

hudson.model.AbstractDescribableImpl<hudson.security.AuthorizationStrategy>

hudson.security.AuthorizationStrategy

hudson.security.GlobalMatrixAuthorizationStrategy

All Implemented Interfaces:

hudson.ExtensionPoint, hudson.model.Describable<hudson.security.AuthorizationStrategy>

Direct Known Subclasses:

ProjectMatrixAuthorizationStrategy

public class GlobalMatrixAuthorizationStrategy
extends hudson.security.AuthorizationStrategy

Role-based authorization via a matrix.

Author:

Kohsuke Kawaguchi

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	GlobalMatrixAuthorizationStrategy.ConverterImpl Persist GlobalMatrixAuthorizationStrategy as a list of IDs that represent grantedPermissions.
static class	GlobalMatrixAuthorizationStrategy.DescriptorImpl
static class	GlobalMatrixAuthorizationStrategy.PermissionAdderImpl

Nested classes/interfaces inherited from class hudson.security.AuthorizationStrategy

hudson.security.AuthorizationStrategy.Unsecured

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

hudson.ExtensionPoint.LegacyInstancesAreScopedToHudson

Field Summary

Fields

Modifier and Type	Field and Description
static GlobalMatrixAuthorizationStrategy.DescriptorImpl	DESCRIPTOR
static boolean	ENABLE_DANGEROUS_PERMISSIONS Backwards compatibility: Enable granting dangerous permissions independently of Administer access.

Fields inherited from class hudson.security.AuthorizationStrategy

LIST, UNSECURED

Constructor Summary

Constructors

Constructor and Description
GlobalMatrixAuthorizationStrategy()

Method Summary

Modifier and Type	Method and Description
void	add(hudson.security.Permission p, String sid) Adds to grantedPermissions.
List<String>	getAllSIDs() Returns all SIDs configured in this matrix, minus "anonymous"
Set<String>	getGroups()
hudson.security.ACL	getRootACL()
boolean	hasExplicitPermission(String sid, hudson.security.Permission p) Checks if the permission is explicitly given, instead of implied through Permission.impliedBy.
boolean	hasPermission(String sid, hudson.security.Permission p) Checks if the given SID has the given permission.

Methods inherited from class hudson.security.AuthorizationStrategy

all, getACL, getACL, getACL, getACL, getACL, getACL, getACL, getACL

Methods inherited from class hudson.model.AbstractDescribableImpl

getDescriptor

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DESCRIPTOR

@Extension
public static final GlobalMatrixAuthorizationStrategy.DescriptorImpl DESCRIPTOR

ENABLE_DANGEROUS_PERMISSIONS

@Restricted(value=org.kohsuke.accmod.restrictions.NoExternalUse.class)
public static boolean ENABLE_DANGEROUS_PERMISSIONS

Backwards compatibility: Enable granting dangerous permissions independently of Administer access.

Since:

TODO

Constructor Detail

GlobalMatrixAuthorizationStrategy

public GlobalMatrixAuthorizationStrategy()

Method Detail

add

public void add(hudson.security.Permission p,
                String sid)

Adds to grantedPermissions. Use of this method should be limited during construction, as this object itself is considered immutable once populated.

getRootACL

public hudson.security.ACL getRootACL()

Specified by:

getRootACL in class hudson.security.AuthorizationStrategy

getGroups

public Set<String> getGroups()

Specified by:

getGroups in class hudson.security.AuthorizationStrategy

hasPermission

public boolean hasPermission(String sid,
                             hudson.security.Permission p)

Checks if the given SID has the given permission.

hasExplicitPermission

public boolean hasExplicitPermission(String sid,
                                     hudson.security.Permission p)

Checks if the permission is explicitly given, instead of implied through Permission.impliedBy.

getAllSIDs

public List<String> getAllSIDs()

Returns all SIDs configured in this matrix, minus "anonymous"

Returns:

Always non-null.