RBAC so that users can create projects but not touch other Projects?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

RBAC so that users can create projects but not touch other Projects?

Randy Rue
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/e717b0e7-b8f3-baa3-23b2-10ffa16101ff%40gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Randy Rue
Is this possible? I ultimately need a way for users to create a project and have full rights to that and only that project...

On Friday, January 29, 2021 at 11:08:18 AM UTC-8 Randy Rue wrote:
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/b8ca246f-f262-48ab-8c38-b2c32dd25c3an%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Dom Dom
I think you can follow up with the following video:
https://www.youtube.com/watch?v=v-AVR0UoB-c

Vào lúc 05:31:42 UTC+7 ngày Thứ Tư, 3 tháng 2, 2021, [hidden email] đã viết:
Is this possible? I ultimately need a way for users to create a project and have full rights to that and only that project...

On Friday, January 29, 2021 at 11:08:18 AM UTC-8 Randy Rue wrote:
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/b5246365-f00d-4262-8131-81a9cc0b19f0n%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Dom Dom
Did you see the video yet?
they are so clear for your question

Vào Th 4, 3 thg 2, 2021 vào lúc 08:38 Dom Dom <[hidden email]> đã viết:
I think you can follow up with the following video:
https://www.youtube.com/watch?v=v-AVR0UoB-c

Vào lúc 05:31:42 UTC+7 ngày Thứ Tư, 3 tháng 2, 2021, [hidden email] đã viết:
Is this possible? I ultimately need a way for users to create a project and have full rights to that and only that project...

On Friday, January 29, 2021 at 11:08:18 AM UTC-8 Randy Rue wrote:
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/b5246365-f00d-4262-8131-81a9cc0b19f0n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAEUiy17riDoUh3yAi_%2BS13LrtYp1pGHAowZjB3_JQcWAjakUWA%40mail.gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Koray Incki
hi Randy
you can create folders and assign permissions to folders as dom dom suggests. then you can create projects under thisenfolders

On Wed, Feb 3, 2021, 08:21 Dom Dom <[hidden email]> wrote:
Did you see the video yet?
they are so clear for your question

Vào Th 4, 3 thg 2, 2021 vào lúc 08:38 Dom Dom <[hidden email]> đã viết:
I think you can follow up with the following video:
https://www.youtube.com/watch?v=v-AVR0UoB-c

Vào lúc 05:31:42 UTC+7 ngày Thứ Tư, 3 tháng 2, 2021, [hidden email] đã viết:
Is this possible? I ultimately need a way for users to create a project and have full rights to that and only that project...

On Friday, January 29, 2021 at 11:08:18 AM UTC-8 Randy Rue wrote:
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/b5246365-f00d-4262-8131-81a9cc0b19f0n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAEUiy17riDoUh3yAi_%2BS13LrtYp1pGHAowZjB3_JQcWAjakUWA%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CA%2B2TnooPVKhQmWCEH9cUnoJcUOOUhYX1-t87h2MxrW24K%3D_ivg%40mail.gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Randy Rue

OK, I don't believe this plugin was around when I last was hammering on this effort (it's been parked for a few months).

Are "folders" a new thing too?

In any case, I believe I have four folders created and ldap groups with full rights to do what they will inside them. Will hand off to the users for testing.

Thanks!

Randy in Seattle

On 2/3/2021 4:21 AM, Koray Incki wrote:
hi Randy
you can create folders and assign permissions to folders as dom dom suggests. then you can create projects under thisenfolders

On Wed, Feb 3, 2021, 08:21 Dom Dom <[hidden email]> wrote:
Did you see the video yet?
they are so clear for your question

Vào Th 4, 3 thg 2, 2021 vào lúc 08:38 Dom Dom <[hidden email]> đã viết:
I think you can follow up with the following video:
https://www.youtube.com/watch?v=v-AVR0UoB-c

Vào lúc 05:31:42 UTC+7 ngày Thứ Tư, 3 tháng 2, 2021, [hidden email] đã viết:
Is this possible? I ultimately need a way for users to create a project and have full rights to that and only that project...

On Friday, January 29, 2021 at 11:08:18 AM UTC-8 Randy Rue wrote:
Hello All,

I'm trying to set up Role Based Access Control so that users can create
a project and have full rights within their project, but not have admin
rights on other users' projects. We've tested this and so far can't find
a way for users to have that ability, for example, and to not then be
able to see each other's authentication tokens.

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

Hope to hear from you,

Randy in Seattle

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/b5246365-f00d-4262-8131-81a9cc0b19f0n%40googlegroups.com.
--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAEUiy17riDoUh3yAi_%2BS13LrtYp1pGHAowZjB3_JQcWAjakUWA%40mail.gmail.com.
--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CA%2B2TnooPVKhQmWCEH9cUnoJcUOOUhYX1-t87h2MxrW24K%3D_ivg%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/00e1e621-49ce-248e-851f-be04319f54f7%40gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: RBAC so that users can create projects but not touch other Projects?

Daniel Beck-2
In reply to this post by Randy Rue


On Fri, Jan 29, 2021 at 8:08 PM Rue, Randy <[hidden email]> wrote:

Is this possible? So far even in Project-Based Matrix Authorization I
haven't been able to make it work.

It should just work there, one of the many issues I fixed in matrix-auth 2.0 back in 2017. 

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAMo7PtLr_D-2f-X_kPMZwiYRwYQmnRecF4rAgabVYtekWOME7Q%40mail.gmail.com.