Package hudson.security
package hudson.security
Security-related code.
- See Also:
-
ClassDescriptionPartial implementation of
SecurityRealmfor username/password based authentication.Object that has anACLDeprecated.AccessDeniedExceptionwith more information.HandlesAccessDeniedExceptionhappened during request processing.Thrown if an account creation was attempted but failed due to invalid data being entered into a form.Gate-keeper that controls access to Hudson's model objects.AuthenticationManagerproxy that delegates to another instance.Login filter with a change for Jenkins so that we can pick up the hidden "from" form field defined inlogin.jellyto send the user back to where he came from, after a successful authentication.Controls authorization throughout Hudson.Implements the dual authentication mechanism.Deprecated.ServletFilterthat chains multipleFilters.Deprecated.No longer used.Abstraction for a login mechanism through external authenticator/identity provider (instead of username/password.)Used inFederatedLoginService.FederatedIdentity.signin()to indicate that the identifier is not currently associated with anyone.Remembers identifiers given byFederatedLoginServiceto this user.AuthorizationStrategythat grants full-control to authenticated user and optionally read access to anonymous usersSecurity configuration.Represents the details of a group.For anonymous requests to pages that require authentication, first respond withHttpServletResponse.SC_FORBIDDEN, then redirect browsers automatically to the login page.Filterthat Jenkins uses to implement security support.SecurityRealmthat performs authentication by looking upUser.UserPropertythat provides theUserDetailsview of the User object.Displays "manage users" link in the system config ifHudsonPrivateSecurityRealmis in effect.AuthorizationStrategyimplementation that emulates the legacy behavior.SecurityRealmthat acceptsContainerAuthenticationobject without any check (that is, by assuming that the such token is already authenticated by the container.)Generated localization support class.Filterthat does nothing.Permission, which represents activity that requires a security privilege.Service which can add permissions for a given user to the configured authorization strategy.Group ofPermissions that share the sameowner.Represents the model classPermissionacts on and scoped to.RememberMeServicesproxy.What security enforcement does Hudson do?Pluggable security realm that connects external user database to Hudson.Just a tuple so that we can create various inter-related security related objects and return them all at once.Access control list.TokenBasedRememberMeServiceswith modification so as not to rely on the user password being available.If a security exception causedJellyTagException, rethrow it accordingly so thatExceptionTranslationFiltercan pick it up and initiate the redirection.UserDetailsServiceproxy that delegates to another instance.Deprecated.Thrown fromUserDetailsService.loadUserByUsername(String)to indicate that the underlyingSecurityRealmis incapable of retrieving the information, and furthermore, the system cannot tell if such an user exists or not.Expose the data needed for /whoAmI, so it can be exposed by Api.
AccessDeniedException3