jenkins.security.s2m

Class CallableWhitelist

java.lang.Object

jenkins.security.s2m.CallableWhitelist

All Implemented Interfaces:

ExtensionPoint

Direct Known Subclasses:

AdminCallableWhitelist, CallableDirectionChecker.DefaultWhitelist

public abstract class CallableWhitelist
extends Object
implements ExtensionPoint

Used on the master to selectively allow specific Callables to execute on the master even when those Callables do not have proper Role declarations from its RoleSensitive.checkRoles(RoleChecker) method.

Since:

1.THU

Author:

Kohsuke Kawaguchi

Nested Class Summary

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor and Description
CallableWhitelist()

Method Summary

Modifier and Type	Method and Description
static ExtensionList<CallableWhitelist>	all()
abstract boolean	isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject, Collection<org.jenkinsci.remoting.Role> expected, Object context) Returns true if given subject should be allowed to execute on the master even though it came over channel from other JVMs.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CallableWhitelist

public CallableWhitelist()

Method Detail

isWhitelisted

public abstract boolean isWhitelisted(org.jenkinsci.remoting.RoleSensitive subject,
                                      Collection<org.jenkinsci.remoting.Role> expected,
                                      Object context)

Returns true if given subject should be allowed to execute on the master even though it came over channel from other JVMs.

Parameters:

subject - See RoleChecker.check(RoleSensitive, Collection)

expected - See RoleChecker.check(RoleSensitive, Collection)

context - Parameter given to ChannelConfigurator.onChannelBuilding(ChannelBuilder, Object)

Returns:

true to allow this subject to execute. No further CallableWhitelist is consulted when this method returns true. false to "-0" this subject. Other CallableWhitelists will be given a chance to accept/reject this subject, and if no one accepts it, the subject will be rejected.

Throws:

SecurityException - to blacklist a subject, throw this exception. No further CallableWhitelist is consulted, and the execution will be rejected.

all

public static ExtensionList<CallableWhitelist> all()