Doesn't Robert's suggestion address the CLI/REST issue? If I extend it and use it in my own authorization strategy, I can deny create permission for the descriptor types of type freestyle, pipeline, etc. But then again, I I've read that descriptors only define and bind the UI displayed, correct? Do the CLI and REST endpoints also depend on descriptors?
http://javadoc.jenkins-ci.org/hudson/security/ACL.html#hasCreatePermission-org.acegisecurity.Authentication-hudson.model.ItemGroup-hudson.model.TopLevelItemDescriptor- <http://www.google.com/url?q=http%3A%2F%2Fjavadoc.jenkins-ci.org%2Fhudson%2Fsecurity%2FACL.html%23hasCreatePermission-org.acegisecurity.Authentication-hudson.model.ItemGroup-hudson.model.TopLevelItemDescriptor-&sa=D&sntz=1&usg=AFQjCNFkG2g-IcoGlWC0coQExCMHb2LoAg> public boolean hasCreatePermission(@Nonnull <http://docs.oracle.com/javase/8/docs/api/javax/annotation/Nonnull.html?is-external=true> org.acegisecurity.Authentication a, @Nonnull <http://docs.oracle.com/javase/8/docs/api/javax/annotation/Nonnull.html?is-external=true> ItemGroup <http://javadoc.jenkins-ci.org/hudson/model/ItemGroup.html> c, @Nonnull <http://docs.oracle.com/javase/8/docs/api/javax/annotation/Nonnull.html?is-external=true> TopLevelItemDescriptor <http://javadoc.jenkins-ci.org/hudson/model/TopLevelItemDescriptor.html> d) Checks if the given principal has the permission to create top level items within the specified item group. On Thursday, 18 January 2018 18:51:24 UTC+1, Jesse Glick wrote: > > On Wed, Jan 17, 2018 at 6:22 PM, Miguelangel Fernandez > <miguela...@gmail.com <javascript:>> wrote: > > I've extended DescriptorVisibilityFilter the > > same way the Hide Maven Plugin does. > > Remember this just hides the link in the GUI. It has no effect on > CLI/REST usages, etc. > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/708e830e-cf76-4097-86a1-3cf59c2d4563%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
