I have got the correct configuration, I just used the server level security,
no project level security used.
<cruisecontrol xmlns:cb="urn:ccnet.config.builder">
<internalSecurity>
<cache type="inMemoryCache" duration="10" mode="sliding"/>
<users>
<passwordUser name="pcitiuj" display="iuj" password="1"/>
<simpleUser name="*"/>
</users>
<permissions>
<rolePermission name="admin" forceBuild="Allow" startProject="Allow"
sendMessage="Allow" changeProject="Allow" modifySecurity="Allow"
defaultRight="Allow">
<users>
<userName name="pcitiuj"/>
</users>
</rolePermission>
<rolePermission name="user">
<users>
<userName name="*"/>
</users>
</rolePermission>
</permissions>
<defaults forceBuild="Deny" startProject="Deny" sendMessage="Deny"
changeProject="Deny" modifySecurity="Deny" defaultRight="Allow"></defaults>
</internalSecurity>
On Wed, Oct 21, 2009 at 11:40 AM, si dinzi <[email protected]> wrote:
>
>
> On Tue, Oct 20, 2009 at 5:58 PM, Ruben Willems
> <[email protected]>wrote:
>
>> Hi
>>
>> this is functionality of the 1.5 release, you can try the CTP if you want.
>> Check the docs about security
>>
>> if something is not clear, let us know.
>>
> Thanks you! But I still have difficulties in getting the security work. Our
> working environment is in a domain named "domain", I logon to the
> computer with cctray installed by domain account "domain\pcitiuj", and
> I configured in cctray to use "winlogin authentication" for the ccnet
> server.
> My purpose is to only allow the user "domain\pcitiuj" to use cctray
> operate ccnet server, so I made configuration in ccnet.config in this way:
>
> at server level:
> <cruisecontrol xmlns:cb="urn:ccnet.config.builder">
> <internalSecurity>
> <cache type="inMemoryCache" duration="10" mode="sliding"/>
> <users>
> <ldapUser name="pcitiuj" domain="domain"/>
> </users>
> <permissions>
> <rolePermission name="admin" defaultRight="Allow">
> <users>
> <userName name="pcitiuj"/>
> </users>
> </rolePermission>
> </permissions>
> </internalSecurity>
>
> at project level:
> <project name="UPM_Build" queue="Q">
> <security type="inheritedProjectSecurity" />
>
> but in this way cctray says "permission for viewproject has been denied"
> when I fire force build command.
> could you help me configure for my purpose? thanks.
>
> dinzi
>
>>
>>
>> with kind regards
>> Ruben Willems
>>
>>
>>
>> On Tue, Oct 20, 2009 at 11:45 AM, si dinzi <[email protected]> wrote:
>>
>>> Currently anyone who has installed cctray can connect to my ccnet server
>>> and fire commands, but we want that only some person has the permission to
>>> connect to ccnet server and fire build command, could anyone give me an
>>> example about how to configure it? thanks
>>>
>>
>>
>
