提交 9463e0a2 编写于 作者: K kohsuke

with the introduction of Item.READ, I believe this test data now needs to...

with the introduction of Item.READ, I believe this test data now needs to grant that permission to anonymous.

This change also implies that existing user will see regressions with this new change. Without the explicit access given to Item.READ, the users who were able to see everything before will suddenly not see any projects at all, until the permission is explicitly granted on Item.READ.

OTOH, if I inherit Item.READ from Hudson.READ, the per-project permission won't work, becaues Hudson.READ is necessary to see the top page.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@17337 71c3de6d-444a-0410-be80-ed276b4c234a
上级 1ccdb5dc
......@@ -41,6 +41,7 @@ THE SOFTWARE.
<permission>hudson.model.View.Delete:authenticated</permission>
<permission>hudson.scm.SCM.Tag:authenticated</permission>
<permission>hudson.model.Hudson.Read:anonymous</permission>
<permission>hudson.model.Item.Read:anonymous</permission>
</authorizationStrategy>
<securityRealm class="hudson.security.LegacySecurityRealm"/>
<jdks/>
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册