| Could you anyone help me on this.. i have wrote groovy scripts for adding permissions in Matrix-authorization. it works excepted. but only thing i can not able to update the Move options in Job .  import jenkins.model.* import hudson.security.* import hudson.model.* import com.cloudbees.plugins.* import hudson.scm.* def userName = "{{ jenkins_admins }}" String[] param= userName.split(',') def instance = Jenkins.getInstance() def strategy = new hudson.security.GlobalMatrixAuthorizationStrategy() for( def uname : param ){ /** Enable READ rights for Anonymous & Authenticated Users */ strategy.add(Jenkins.READ, 'anonymous') strategy.add(Jenkins.READ, 'authenticated') /** Enable Overall permissions */ strategy.add(Jenkins.ADMINISTER, uname) strategy.add(Jenkins.READ, uname) /** Enable Credentials permissions */ strategy.add(credentials.CredentialsProvider.CREATE, uname) strategy.add(credentials.CredentialsProvider.DELETE, uname) strategy.add(credentials.CredentialsProvider.UPDATE, uname) strategy.add(credentials.CredentialsProvider.VIEW, uname) strategy.add(credentials.CredentialsProvider.MANAGE_DOMAINS, uname) /** Enable Agent permissions */ strategy.add(Jenkins.MasterComputer.BUILD, uname) strategy.add(Jenkins.MasterComputer.CONFIGURE, uname) strategy.add(Jenkins.MasterComputer.CONNECT, uname) strategy.add(Jenkins.MasterComputer.CREATE, uname) strategy.add(Jenkins.MasterComputer.DELETE, uname) strategy.add(Jenkins.MasterComputer.DISCONNECT, uname) /** Enable Job permissions */ strategy.add(Item.BUILD, uname) strategy.add(Item.CANCEL, uname) strategy.add(Item.CONFIGURE, uname) strategy.add(Item.CREATE, uname) strategy.add(Item.DELETE, uname) strategy.add(Item.DISCOVER, uname) strategy.add(Item.READ, uname) strategy.add(Item.WORKSPACE, uname) strategy.add(Item.MOVE, uname) /** Its not working seems below error */  /** Enable Run permissions */ strategy.add(Run.DELETE, uname) strategy.add(Run.UPDATE, uname) /** strategy.add(Run.REPLAY, uname) */ /** Enable View permissions */ strategy.add(View.READ, uname) strategy.add(View.DELETE, uname) strategy.add(View.CREATE, uname) strategy.add(View.CONFIGURE, uname) /** Enable Tag permission */ strategy.add(SCM.TAG, uname) instance.setAuthorizationStrategy(strategy) instance.save() } |
