Assuming, a System administrator has full access to all the everything including pipelines. they can trigger the pipelines.
The role based security looks good. If we revoke the access of system administrator. we can easily add multiple users to a role from the user summary tab. but we have a lot of pipelines/pipeline groups and multiple teams as well. Clicking on each pipeline group adding admin_X_team,view_Y_team, operate_X_team roles it's a real pain. If there would be a roles summary page displaying roles and their pipeline groups it serves it would be a better way. If there's any work around for this to add it quicker let me know. On Tuesday, 2 May 2017 18:34:16 UTC-7, Ashwanth Kumar wrote: > > AFAIK today you cannot have password for triggering the pipeline. IMHO > it's also not safe to have a single password for a pipeline (which would > eventually get shared across the organisation), instead have you looked at > role > based security > <https://docs.gocd.io/17.5.0/configuration/dev_authorization.html#role-based-security> > ? > > > On Wed, May 3, 2017 at 1:07 AM, Vamshi krishna <[email protected] > <javascript:>> wrote: > >> Is there anyway or a plugin whenever a pipeline gets triggered it should >> prompt popup for a password(credentials). There's a secret variable option >> but we would like have more control over this pipeline. like for AWS >> credentials if stored in environment variables any GoCD admin can trigger >> this pipeline so the pipeline prompting for the credentials would be a way >> to go. any suggestions ? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "go-cd" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > > Ashwanth Kumar / ashwanthkumar.in > > -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
