jenkins.security.s2m

Class AdminCallableWhitelist

java.lang.Object

jenkins.security.s2m.CallableWhitelist

jenkins.security.s2m.AdminCallableWhitelist

All Implemented Interfaces:

ExtensionPoint

@Extension(ordinal=-100.0)
public class AdminCallableWhitelist
extends CallableWhitelist

Whitelists Callables that are approved by the admins.

Smaller ordinal value allows other programmable CallableWhitelist to accept/reject Callables without bothering the admins. This impl should be used only for those Callables that our program does not have any idea for.

Author:

Kohsuke Kawaguchi

Nested Class Summary

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor and Description
AdminCallableWhitelist()

Method Summary

Modifier and Type	Method and Description
boolean	isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject, Collection<org.jenkinsci.remoting.Role> expected, Object context) Returns true if given subject should be allowed to execute on the master even though it came over channel from other JVMs.

Methods inherited from class jenkins.security.s2m.CallableWhitelist

all

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AdminCallableWhitelist

public AdminCallableWhitelist()

Method Detail

isWhitelisted

public boolean isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject,
                             Collection<org.jenkinsci.remoting.Role> expected,
                             Object context)

Description copied from class: CallableWhitelist

Returns true if given subject should be allowed to execute on the master even though it came over channel from other JVMs.

Specified by:

isWhitelisted in class CallableWhitelist

Parameters:

subject - See RoleChecker.check(RoleSensitive, Collection)

expected - See RoleChecker.check(RoleSensitive, Collection)

context - Parameter given to ChannelConfigurator.onChannelBuilding(ChannelBuilder, Object)

Returns:

true to allow this subject to execute. No further CallableWhitelist is consulted when this method returns true. false to "-0" this subject. Other CallableWhitelists will be given a chance to accept/reject this subject, and if no one accepts it, the subject will be rejected.