1. 07 4月, 2017 1 次提交
  2. 12 2月, 2016 1 次提交
  3. 14 10月, 2013 2 次提交
  4. 13 10月, 2013 1 次提交
  5. 28 7月, 2011 1 次提交
  6. 29 5月, 2011 2 次提交
  7. 08 8月, 2010 1 次提交
    • M
      [SECURITY-5] Add several missing permission checks in CLI commands. · d4c9e40b
      mindless 提交于
      Current CLI is always available and most commands can be run by anonymous users.
      Now only a short help message and the login command are available for anonymous
      in a Hudson without anonymous read permission, and each individual command also
      checks the appropriate permission for that command.  Details:
      * Vulnerable CLI commands now fixed:
        build, clear-queue, copy-job, create-job, delete-builds, delete-job,
        disable-job, enable-job, install-plugin, install-tool, keep-build,
        mail, restart, safe-restart, set-build-result
      * Broken CLI commands now fixed:
        connect-node, delete-node, disconnect-node, offline-node, online-node
      * Other vulnerable command (not CLI) now fixed: /gc (JVM garbage collect)
      
      
      git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@33626 71c3de6d-444a-0410-be80-ed276b4c234a
      d4c9e40b
  8. 20 3月, 2010 1 次提交
  9. 23 6月, 2009 1 次提交
  10. 29 4月, 2009 1 次提交