org.jenkinsci.plugins.rolestrategy.permissions

Class DangerousPermissionHelper

java.lang.Object

org.jenkinsci.plugins.rolestrategy.permissions.DangerousPermissionHelper

@Restricted(value=org.kohsuke.accmod.restrictions.NoExternalUse.class)
public class DangerousPermissionHelper
extends Object

Helper methods for dangerous permission handling.

Author:

Oleg Nenashev

Field Summary

Fields

Modifier and Type	Field and Description
static Set<hudson.security.Permission>	DANGEROUS_PERMISSIONS List of the dangerous permissions, which need to be suppressed by the plugin.

Method Summary

Modifier and Type	Method and Description
static boolean	hasDangerousPermissions(Iterable<Role> roles)
static boolean	hasDangerousPermissions(RoleBasedAuthorizationStrategy strategy)
static boolean	hasPotentiallyDangerousPermissions(Role r) Checks if the role is potentially dangerous.
static boolean	isDangerous(hudson.security.Permission p) Check if the permissions is dangerous.
static String	reportDangerousPermissions(Iterable<Role> roles) Prepare the report string about dangerous roles.
static String	reportDangerousPermissions(RoleBasedAuthorizationStrategy strategy) Prepare the report string about dangerous roles.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DANGEROUS_PERMISSIONS

@Restricted(value=org.kohsuke.accmod.restrictions.NoExternalUse.class)
public static final Set<hudson.security.Permission> DANGEROUS_PERMISSIONS

List of the dangerous permissions, which need to be suppressed by the plugin.

Method Detail

isDangerous

public static boolean isDangerous(@Nonnull
                                  hudson.security.Permission p)

Check if the permissions is dangerous. Takes the current DangerousPermissionHandlingMode into account.

Parameters:

p - Permission

Returns:

true if the permission is considered as dangerous. Always false in the DangerousPermissionHandlingMode.ENABLED mode.

hasPotentiallyDangerousPermissions

public static boolean hasPotentiallyDangerousPermissions(@Nonnull
                                                         Role r)

Checks if the role is potentially dangerous. Does not take the current DangerousPermissionHandlingMode into account.

Parameters:

r - Role

Returns:

true if the role contains a dangerous permission without Jenkins.ADMINISTER.

reportDangerousPermissions

@CheckForNull
public static String reportDangerousPermissions(@Nonnull
                                                              RoleBasedAuthorizationStrategy strategy)

Prepare the report string about dangerous roles.

Parameters:

strategy - Strategy

Returns:

Summary report string describing dangerous roles. null if all roles are fine.

reportDangerousPermissions

@CheckForNull
public static String reportDangerousPermissions(@Nonnull
                                                              Iterable<Role> roles)

Prepare the report string about dangerous roles.

Parameters:

roles - Roles

Returns:

Summary report string describing dangerous roles. null if all roles are fine.

hasDangerousPermissions

@CheckForNull
public static boolean hasDangerousPermissions(@Nonnull
                                                            RoleBasedAuthorizationStrategy strategy)

hasDangerousPermissions

@CheckForNull
public static boolean hasDangerousPermissions(@Nonnull
                                                            Iterable<Role> roles)