[Issue 177] Guest users can start builds via direct URLs

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Issue 177] Guest users can start builds via direct URLs


User vsizikov changed the following:

                What    |Old value                 |New value
                  Status|STARTED                   |RESOLVED
              Resolution|                          |FIXED

------- Additional comments from [hidden email] Wed Nov 22 18:34:50 +0000 2006 -------
Ah, interesting note about need to launch builds remotely.

But it seems with current state of affairs in the Internet, security/safety is
the most important thing, and since I see that Huston is getting more and more
used by public sites with security enabled (Netbeans folks, Glassfish folks,
etc), we'd better make Hudson as protected as possible.

I enabled security check for "build" action for now. Should be in Hudson 1.65.

To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]