Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-18 Thread kuisathaverat
Multibranch pipeline with defaults https://plugins.jenkins.io/pipeline-multibranch-defaults and Pipeline Github plugin https://github.com/jenkinsci/pipeline-github-plugin the first allow you to set a Jenkinsfile by default on Multibranch projects so you can have the Jenkinsfile outside of the

Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-17 Thread Jenn Briden
I am also interested in learning more. My understanding is that this is a permissions issue on the Item and not really pipeline. Please correct me if I misunderstood. On Sun, Mar 17, 2019 at 9:11 AM Cyrille Le Clerc wrote: > @ivan I am very interested in this topic and I get a 404 on your first

Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-17 Thread Cyrille Le Clerc
@ivan I am very interested in this topic and I get a 404 on your first link. Can you please verify the URL and maybe share a "non mobile" URL. On Saturday, March 16, 2019 at 4:48:12 PM UTC, Ivan Fernandez Calvo wrote: > > By using >

Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-16 Thread Ivan Fernandez Calvo
By using https://wiki.jenkins.io/plugins/servlet/mobile?contentId=102662618#content/view/10266261 and removing permissions to configure jobs, maybe build also and allow only to trigger builds to some people or manage it with comments from GitHub (see

Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-15 Thread Stuart Rowe
I can't provide you with a step by step solution as it depends on how security and authorization is configured on your Jenkins instance. You should be able to find a lot of information on controlling Jenkins job/build permissions with a quick internet search. On Thursday, 14 March 2019

Re: Security - Pipeline parameterized credentials can be reused by other users

2019-03-14 Thread Sarfroz Basha
On Thursday, March 14, 2019 at 10:10:50 PM UTC+5:30, Stuart Rowe wrote: > > Could you remove build permissions on that job for the users that don't > know the credentials? They wouldn't be able to run the job anyways. That > should also remove their ability to replay the job as far as I

Security - Pipeline parameterized credentials can be reused by other users

2019-03-14 Thread Stuart Rowe
Could you remove build permissions on that job for the users that don't know the credentials? They wouldn't be able to run the job anyways. That should also remove their ability to replay the job as far as I understand. -- You received this message because you are subscribed to the Google

Security - Pipeline parameterized credentials can be reused by other users

2019-03-14 Thread Sarfroz Basha
Hi All, This is Sarfroz Basha.. I'm Working on T-Systems ICT INDIA PVT LTD company. I have one risky task, Can you please help me on this. I want to remove the ability for users of Jenkins Pipeline to be able to modify the Jenkinsfile or other loaded pipeline scripts using the Replay