Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
xxadev
jenkins
提交
b44787dd
J
jenkins
项目概览
xxadev
/
jenkins
与 Fork 源项目一致
从无法访问的项目Fork
通知
3
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
J
jenkins
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
b44787dd
编写于
10月 16, 2012
作者:
J
Jesse Glick
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
getAuthorities should delegate to impersonate.
上级
16148e79
变更
1
隐藏空白更改
内联
并排
Showing
1 changed file
with
19 addition
and
18 deletion
+19
-18
core/src/main/java/hudson/model/User.java
core/src/main/java/hudson/model/User.java
+19
-18
未找到文件。
core/src/main/java/hudson/model/User.java
浏览文件 @
b44787dd
...
...
@@ -39,11 +39,12 @@ import jenkins.model.Jenkins;
import
net.sf.json.JSONObject
;
import
org.acegisecurity.Authentication
;
import
org.acegisecurity.AuthenticationException
;
import
org.acegisecurity.GrantedAuthority
;
import
org.acegisecurity.providers.UsernamePasswordAuthenticationToken
;
import
org.acegisecurity.providers.anonymous.AnonymousAuthenticationToken
;
import
org.acegisecurity.userdetails.UserDetails
;
import
org.acegisecurity.userdetails.UsernameNotFoundException
;
import
org.springframework.dao.DataAccessException
;
import
org.kohsuke.stapler.StaplerRequest
;
import
org.kohsuke.stapler.StaplerResponse
;
import
org.kohsuke.stapler.export.Exported
;
...
...
@@ -252,11 +253,14 @@ public class User extends AbstractModelObject implements AccessControlled, Descr
try
{
UserDetails
u
=
Jenkins
.
getInstance
().
getSecurityRealm
().
loadUserByUsername
(
id
);
return
new
UsernamePasswordAuthenticationToken
(
u
.
getUsername
(),
""
,
u
.
getAuthorities
());
}
catch
(
Authentication
Exception
e
)
{
//
TODO: use the stored GrantedAuthorities
return
new
UsernamePasswordAuthenticationToken
(
id
,
""
,
new
GrantedAuthority
[]{
SecurityRealm
.
AUTHENTICATED_AUTHORITY
});
}
catch
(
UsernameNotFound
Exception
e
)
{
//
ignore
}
catch
(
DataAccessException
e
)
{
// ignore
}
// TODO: use the stored GrantedAuthorities
return
new
UsernamePasswordAuthenticationToken
(
id
,
""
,
new
GrantedAuthority
[]{
SecurityRealm
.
AUTHENTICATED_AUTHORITY
});
}
/**
...
...
@@ -625,26 +629,23 @@ public class User extends AbstractModelObject implements AccessControlled, Descr
/**
* Checks for authorities (groups) associated with this user.
* If the caller lacks {@link Jenkins#ADMINISTER}, or any problems arise, returns an empty list.
* {@link SecurityRealm#AUTHENTICATED_AUTHORITY} and the username, if present, are omitted.
* @since XXX
* @return a possibly empty
but not null
list
* @return a possibly empty list
*/
public
List
<
String
>
getAuthorities
()
{
public
@Nonnull
List
<
String
>
getAuthorities
()
{
if
(!
Jenkins
.
getInstance
().
hasPermission
(
Jenkins
.
ADMINISTER
))
{
return
Collections
.
emptyList
();
}
List
<
String
>
r
=
new
ArrayList
<
String
>();
try
{
for
(
GrantedAuthority
a
:
Jenkins
.
getInstance
().
getSecurityRealm
().
loadUserByUsername
(
id
).
getAuthorities
())
{
if
(
a
.
equals
(
SecurityRealm
.
AUTHENTICATED_AUTHORITY
))
{
continue
;
}
String
n
=
a
.
getAuthority
();
if
(
n
!=
null
&&
!
n
.
equals
(
id
))
{
r
.
add
(
n
);
}
for
(
GrantedAuthority
a
:
impersonate
().
getAuthorities
())
{
if
(
a
.
equals
(
SecurityRealm
.
AUTHENTICATED_AUTHORITY
))
{
continue
;
}
String
n
=
a
.
getAuthority
();
if
(
n
!=
null
&&
!
n
.
equals
(
id
))
{
r
.
add
(
n
);
}
}
catch
(
Exception
x
)
{
LOGGER
.
log
(
Level
.
FINE
,
"could not look up "
+
id
,
x
);
}
return
r
;
}
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录