Authorization Matrix for Folders Inheritance

[Phil Burch]

Hello,

I see in the latest release that, "Authorization Matrix property support on jobs in a folder" was fixed.

I'm wondering how to create a job that inherits it's authorization matrix from the folder it is in.

In the job definition I've tried:

    properties:
        - authorization

But this doesn't tick the "Enable project-based security" box when I look at the job configuration in the UI.

[Thanh Ha]

Hi Phil,

I do not personally use this feature so I could be wrong and would encourage others to chim in if anyone else on this list has more experience with this plugin.

Looking at the code and docs [1] though the authorization config requires that you pass a list of names or users. It does not support a blank configuration.

This makes me think there is no support for inheriting permissions from upper level folders. If someone can grab the XML output of a job that inherits permissions from an upper level folder I think it wouldn't be too difficult to add that support.

Regards,

Thanh

[1] https://docs.openstack.org/infra/jenkins-job-builder/properties.html

[Adam Romanek]

Hi Phil,

I think that whenever the "Enable project-based security" check-box is not selected then the parent folder permissions are inherited implicitly. This check-box allows you to override these implicitly inherited permissions on per-project basis (by specifying additional permissions and potentially ignoring the parent folder permissions completely).

Assuming the above is true you don't need any XML markup to inherit permissions from the parent folder.

Best regards,
Adam Romanek

[Phil Burch]

You're absolutely right, I confirmed this behavior. Thank you.