| Filip Pytloun | 0a8e0fe | 2017-03-27 14:59:17 +0200 | [diff] [blame] | 1 | parameters: |
| 2 | _param: |
| 3 | # Full admin access |
| 4 | jenkins_security_matrix_admins: |
| 5 | - ${_param:jenkins_client_user} |
| Filip Pytloun | 0b00d69 | 2017-03-30 14:54:55 +0200 | [diff] [blame] | 6 | - admins |
| Filip Pytloun | 0a8e0fe | 2017-03-27 14:59:17 +0200 | [diff] [blame] | 7 | # Read only access |
| Filip Pytloun | 24aafd6 | 2017-06-14 12:23:37 +0200 | [diff] [blame] | 8 | jenkins_security_matrix_read: |
| 9 | - mirantis |
| Filip Pytloun | 0a8e0fe | 2017-03-27 14:59:17 +0200 | [diff] [blame] | 10 | # Read + permissions to build jobs |
| Filip Pytloun | 24aafd6 | 2017-06-14 12:23:37 +0200 | [diff] [blame] | 11 | jenkins_security_matrix_build: |
| 12 | - mirantis |
| Filip Pytloun | 0a8e0fe | 2017-03-27 14:59:17 +0200 | [diff] [blame] | 13 | # Build permissions + create/delete, whatever. |
| 14 | jenkins_security_matrix_write: |
| 15 | - ${_param:jenkins_client_user} |
| 16 | |
| 17 | jenkins: |
| 18 | client: |
| 19 | security: |
| 20 | matrix: |
| 21 | permissions: |
| 22 | Jenkins: |
| 23 | ADMINISTER: ${_param:jenkins_security_matrix_admins} |
| 24 | READ: ${_param:jenkins_security_matrix_read} |
| 25 | hudson: |
| 26 | model: |
| 27 | Item: |
| 28 | BUILD: ${_param:jenkins_security_matrix_build} |
| 29 | CANCEL: ${_param:jenkins_security_matrix_build} |
| 30 | CONFIGURE: ${_param:jenkins_security_matrix_write} |
| 31 | CREATE: ${_param:jenkins_security_matrix_write} |
| 32 | DELETE: ${_param:jenkins_security_matrix_write} |
| 33 | DISCOVER: ${_param:jenkins_security_matrix_build} |
| 34 | EXTENDED_READ: ${_param:jenkins_security_matrix_build} |
| 35 | WIPEOUT: ${_param:jenkins_security_matrix_write} |
| 36 | WORKSPACE: ${_param:jenkins_security_matrix_write} |
| 37 | READ: ${_param:jenkins_security_matrix_read} |
| 38 | Run: |
| 39 | DELETE: ${_param:jenkins_security_matrix_write} |
| 40 | ARTIFACTS: ${_param:jenkins_security_matrix_write} |
| 41 | UPDATE: ${_param:jenkins_security_matrix_write} |
| 42 | View: |
| 43 | READ: ${_param:jenkins_security_matrix_read} |
| 44 | com: |
| 45 | sonyericsson: |
| 46 | hudson: |
| 47 | plugins: |
| 48 | gerrit: |
| 49 | trigger: |
| 50 | PluginImpl: |
| 51 | RETRIGGER: ${_param:jenkins_security_matrix_build} |