{"id":1612,"date":"2023-03-25T20:35:28","date_gmt":"2023-03-25T12:35:28","guid":{"rendered":"https:\/\/www.appblog.cn\/?p=1612"},"modified":"2023-04-27T21:19:39","modified_gmt":"2023-04-27T13:19:39","slug":"jenkins-user-permission-configuration","status":"publish","type":"post","link":"https:\/\/www.appblog.cn\/index.php\/2023\/03\/25\/jenkins-user-permission-configuration\/","title":{"rendered":"Jenkins\u7528\u6237\u6743\u9650\u914d\u7f6e"},"content":{"rendered":"<h2>\u51c6\u5907\u5de5\u4f5c<\/h2>\n<p>\u63d2\u4ef6\uff1a<code>Role-based Authorization Strategy<\/code><\/p>\n<p>\u7ba1\u7406Jenkins -&gt; <code>Manage Users<\/code> -&gt; \u65b0\u5efa\u7528\u6237<\/p>\n<p><!-- more --><\/p>\n<p>\u7ba1\u7406Jenkins -&gt; <code>Configure Global Security<\/code> -&gt; \u6388\u6743\u7b56\u7565\uff1a<code>Role-Based Strategy<\/code><\/p>\n<h2>\u914d\u7f6e\u6743\u9650\u7b56\u7565<\/h2>\n<p>\u7ba1\u7406Jenkins -&gt; <code>Manage and Assign Roles<\/code><\/p>\n<h3>Manage Roles<\/h3>\n<p>\u9009\u62e9<code>Manage Roles<\/code>\uff0c\u5206\u522b\u8fdb\u884c<code>Global roles<\/code>\u3001<code>Project roles<\/code>\u6743\u9650\u914d\u7f6e\uff1b<\/p>\n<p>\u6ce8\uff1a\u5fc5\u987b\u5148\u8fdb\u884c<code>Global roles<\/code>\u7684\u914d\u7f6e\u540e\u65b9\u53ef\u5bf9<code>Project roles<\/code>\u8fdb\u884c\u914d\u7f6e\uff0c\u53ef\u4ee5\u7406\u89e3\u4e3a\u5148\u914d\u7f6e\u6574\u4f53\u6027\u6743\u9650\uff0c\u518d\u6309\u9879\u76ee\u5206\u6743\u9650\uff0c\u9075\u5b88\u4ece\u5927\u5230\u5c0f\u6743\u9650\u63a7\u5236\u7684\u539f\u5219\uff01<\/p>\n<p>\uff081\uff09\u914d\u7f6e<code>Global roles<\/code><\/p>\n<p><code>Role to add<\/code>: <code>developer<\/code> -&gt; <code>Add<\/code><\/p>\n<ul>\n<li><code>developer<\/code>: <code>Overall<\/code>(<code>Read<\/code>), <code>\u51ed\u636e<\/code>(<code>Create<\/code>,<code>Delete<\/code>,<code>ManageDomains<\/code>,<code>Update<\/code>,<code>View<\/code>), <code>Job<\/code>(<code>Create<\/code>), <code>Run<\/code>(<code>Delete<\/code>,<code>Replay<\/code>,<code>Update<\/code>), <code>SCM<\/code>(<code>Tag<\/code>), <code>Lockable Resources<\/code>(<code>Reserve<\/code>,<code>Unlock<\/code>)<\/li>\n<li><code>builder<\/code>: <code>Overall<\/code>(<code>Read<\/code>), <code>Job<\/code>(<code>Build<\/code>,<code>Cancel<\/code>)<\/li>\n<li><code>reader<\/code>: <code>Overall<\/code>(<code>Read<\/code>), <code>Job<\/code>(<code>Read<\/code>,<code>Workspace<\/code>)<\/li>\n<\/ul>\n<p>\uff082\uff09\u914d\u7f6eProject roles<\/p>\n<p>\u6839\u636e\u6b63\u5219\u5339\u914d\u5bf9\u4e0d\u540c\u7528\u6237\u5206\u914d\u4e0d\u540c\u9879\u76ee\u7684\u4e0d\u540c\u6743\u9650\uff08<code>dev_.*<\/code>\u7684\u610f\u4e49\u662f\u89d2\u8272<code>dev<\/code>\u5177\u6709\u6240\u6709<code>dev_<\/code>\u5f00\u5934\u7684\u9879\u76ee\u7684\u6784\u5efa\u6743\u9650\uff09<\/p>\n<p><code>Role to add:<\/code> <code>dev<\/code>, <code>Pattern<\/code>: <code>dev_.*<\/code> -&gt; <code>Add<\/code><\/p>\n<h3>Assign Roles<\/h3>\n<p>\uff081\uff09\u914d\u7f6e\u8d26\u53f7\u7684<code>Global roles<\/code><\/p>\n<p>\u5982\u5168\u5c40\u6d4b\u8bd5\u6743\u9650developer\u3001\u5168\u5c40\u53ef\u8bfb\u6743\u9650reader\u3001\u5168\u5c40\u6784\u5efa\u6743\u9650builder<\/p>\n<p><code>User\/group to add<\/code>: xxx -&gt; <code>Add<\/code><\/p>\n<p>\uff082\uff09\u914d\u7f6e\u8d26\u53f7\u7684<code>Item roles<\/code><\/p>\n<ul>\n<li>\u5982\u82e5\u67d0\u8d26\u53f7\u5177\u6709\u5168\u5c40\u7684\u6784\u5efa\u6743\u9650<code>builder<\/code>\uff0c\u73b0\u9700\u9488\u5bf9\u9879\u76ee\u5bf9\u5176\u5212\u5206\u4ec5\u6709\u6307\u5b9a\u6d4b\u8bd5\u73af\u5883\u7684\u9879\u76ee\u6784\u5efa\u6743\u9650\uff0c\u5373\u7f29\u5c0f\u6743\u9650\uff0c\u6dfb\u52a0\u7ea6\u675f<\/li>\n<li>\u53c8\u5982\u82e5\u67d0\u8d26\u53f7\u53ea\u5177\u6709\u6240\u6709\u9879\u76ee\u7684\u67e5\u770b\u6743\u9650<code>reader<\/code>\uff0c\u53ef\u770b\u5230\u9879\u76ee\u53f3\u4fa7\u7684\u6784\u5efa\u6309\u94ae\u6d88\u5931<\/li>\n<\/ul>\n<p><img decoding=\"async\" src=\"http:\/\/www.yezhou.me\/AppBlog\/images\/\u8fd0\u7ef4\/Jenkins\u6743\u9650\u914d\u7f6e.png\" alt=\"Jenkins\u6743\u9650\u914d\u7f6e\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u51c6\u5907\u5de5\u4f5c \u63d2\u4ef6\uff1aRole-based Authorization Strategy \u7ba1\u7406Jenkins -&#038;g [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[229],"tags":[],"class_list":["post-1612","post","type-post","status-publish","format-standard","hentry","category-jenkins"],"_links":{"self":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/comments?post=1612"}],"version-history":[{"count":0,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/posts\/1612\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/media?parent=1612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/categories?post=1612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appblog.cn\/index.php\/wp-json\/wp\/v2\/tags?post=1612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}