From 9b58069076ead9cdac8f6fe200d3c32caccc12d2 Mon Sep 17 00:00:00 2001 From: kohsuke Date: Tue, 26 Feb 2008 17:59:08 +0000 Subject: [PATCH] builds are now run as the 'SYSTEM' user. git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@7204 71c3de6d-444a-0410-be80-ed276b4c234a --- core/src/main/java/hudson/model/Executor.java | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/core/src/main/java/hudson/model/Executor.java b/core/src/main/java/hudson/model/Executor.java index 12df723860..9277956047 100644 --- a/core/src/main/java/hudson/model/Executor.java +++ b/core/src/main/java/hudson/model/Executor.java @@ -1,8 +1,11 @@ package hudson.model; import hudson.Util; +import hudson.security.ACL; import org.kohsuke.stapler.StaplerRequest; import org.kohsuke.stapler.StaplerResponse; +import org.acegisecurity.Authentication; +import org.acegisecurity.context.SecurityContextHolder; import javax.servlet.ServletException; import java.io.IOException; @@ -39,6 +42,9 @@ public class Executor extends Thread implements ModelObject { } public void run() { + // run as the system user. see ACL.SYSTEM for more discussion about why this is somewhat broken + SecurityContextHolder.getContext().setAuthentication(ACL.SYSTEM); + try { while(true) { if(Hudson.getInstance().isTerminating()) -- GitLab