Bug 469720 - Security - SVN Plugin: Add admin views to configure override behaviour
Summary: Security - SVN Plugin: Add admin views to configure override behaviour
Status: NEW
Alias: None
Product: Hudson
Classification: Technology
Component: Plugins (show other bugs)
Version: unspecified   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: ---   Edit
Assignee: Winston Prakash CLA
QA Contact: Geoff Waymark CLA
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-06-09 07:20 EDT by Markus Buchner CLA
Modified: 2015-06-09 07:20 EDT (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Markus Buchner CLA 2015-06-09 07:20:33 EDT 
As requested by "Winston Prakash" I add now a separate issue for this security flaw:
See ticket: https://bugs.eclipse.org/bugs/show_bug.cgi?id=447041

Actually it is a security flaw to override the credentials globally -> I already added an issue in the past.

I think this plugin would need a settings dialog in the hudson settings page (hudson administration page) to configure if "override global credentials" functionality is available in this "hudson system"!

If not there is no need to render any checkbox or radio button and credentials will be stored on a per job basis.

This is also very important if you work with the new hudson team configuration!! Here there could / should also be a flag / checkbox / radio button to "override credentials for the team only". This behavior should also be enable/disable able in the hudson administration page.

Greetings max