[Issue 177] Guest users can start builds via direct URLs

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Issue 177] Guest users can start builds via direct URLs

vsizikov
https://hudson.dev.java.net/issues/show_bug.cgi?id=177



User vsizikov changed the following:

                What    |Old value                 |New value
================================================================================
                  Status|STARTED                   |RESOLVED
--------------------------------------------------------------------------------
              Resolution|                          |FIXED
--------------------------------------------------------------------------------




------- Additional comments from [hidden email] Wed Nov 22 18:34:50 +0000 2006 -------
Ah, interesting note about need to launch builds remotely.

But it seems with current state of affairs in the Internet, security/safety is
the most important thing, and since I see that Huston is getting more and more
used by public sites with security enabled (Netbeans folks, Glassfish folks,
etc), we'd better make Hudson as protected as possible.

I enabled security check for "build" action for now. Should be in Hudson 1.65.

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]