[JIRA] [jira-plugin] (JENKINS-32087) Configure JIRA credentials at the Job configuration level

[owood@cloudbees.com (JIRA)]

Owen Wood created an issue

Jenkins / JENKINS-32087 Configure JIRA credentials at the Job configuration level Issue Type: Improvement Assignee: Unassigned Components: jira-plugin Created: 15/Dec/15 8:43 PM Priority: Minor Reporter: Owen Wood We are providing build management support services to more than 20 divisions like Engineering, Infra, etc. This feature fills up security loop hole, When we provide Jenkins as service we don't allow teams to modify other teams jobs. In it's current form we cannot support JIRA Plugin as a service due to security issues. Add Comment

This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265)

[owood@cloudbees.com (JIRA)]

Owen Wood updated an issue

Jenkins / JENKINS-32087 Configure JIRA credentials at the Job configuration level

Change By: Owen Wood Currently JIRA credentials can be configured only at the Jenkins Configuration level and not at the Job configuration level. {quote}

We are providing build management support services to more than 20 divisions like Engineering, Infra, etc. This feature fills up security loop hole, When we provide Jenkins as service we don't allow teams to modify other teams jobs. In it's current form we cannot support JIRA Plugin as a service due to security issues.

{quote}

Add Comment

[valentijnscholten@hotmail.com (JIRA)]

Valentijn Scholten commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level I agree this would make the plugin more usable for bigger/enterprise environments. We don't want to people to be able to know credentials to view other departments projects/issues.

Add Comment

This message was sent by Atlassian JIRA (v7.1.7#71011-sha1:2526d7c)

[valentijnscholten@hotmail.com (JIRA)]

Valentijn Scholten edited a comment on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level

I agree this would make the plugin more usable for bigger/enterprise environments. We don't want to people to be able to know credentials to view other departments projects/issues.

It could be beneficials to start using the Jenkins Credentials Plugin: https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Plugin

Add Comment

[yanchen.li@outlook.com (JIRA)]

yc li updated an issue

Jenkins / JENKINS-32087

Configure JIRA credentials at the Job configuration level

Change By: yc li Priority: Minor Critical

Add Comment

[adrien.lecharpentier@gmail.com (JIRA)]

Adrien Lecharpentier commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level At this moment, the plugin is using credentials-plugin to store the username/password to connect the a Jira server. It was not the case when this ticket was created but only since 3.0.0 (May 20th, 2018). The thing is, from what I see, the plugin allow to configure Jira connection on the global level only. So that we can maximize the connection details usage. Having the connection details configurable on the job / folder level might go in the opposite direction (not really in the folder case but bear with me). I didn't see any step / action in the plugin requiring any credentials, as they all JiraSite#get to find the Jira configuration required for project. I'm not saying we couldn't make this happen, I'm just wondering about the need to have the Jira server connection configurable on job level, as most of the time (all the time?) the connection is configured by an administrator.

Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level

Hello, we need it in our company so I will try to do it if it is ok for you. I started somes developments at https://github.com/mat1e/jira-plugin/tree/feature/JENKINS-32087_credentials_at_job_level if you want to take a look.

Add Comment

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq assigned an issue to Mathieu Delrocq

Jenkins / JENKINS-32087

Configure JIRA credentials at the Job configuration level

Change By: Mathieu Delrocq Assignee: Mathieu Delrocq

Add Comment

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq started work on JENKINS-32087

Change By: Mathieu Delrocq Status: Open In Progress

Add Comment

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level A pull request has been opened for this : https://github.com/jenkinsci/jira-plugin/pull/188

Add Comment

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq updated an issue

Jenkins / JENKINS-32087

Configure JIRA credentials at the Job configuration level

Change By: Mathieu Delrocq Comment:

A pull request has been opened for this : https://github.com/jenkinsci/jira-plugin/pull/188

Add Comment

[delrocq.mathieu@gmail.com (JIRA)]

Mathieu Delrocq assigned an issue to Unassigned

Jenkins / JENKINS-32087 Configure JIRA credentials at the Job configuration level

Change By: Mathieu Delrocq Assignee: Mathieu Delrocq

Add Comment

[radek.antoniuk@quiddia.com (JIRA)]

Radek Antoniuk commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level Since JENKINS-44524 this is configurable on the Folder level, which I think serves the purpose of security and transparency on who has access to what. Therefore I propose to close this and use folder configuration instead.

Add Comment

This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)

[radek.antoniuk@gmail.com (JIRA)]

Radek Antoniuk commented on JENKINS-32087

Re: Configure JIRA credentials at the Job configuration level

If anyone from the watchers have a usecase where a folder-level Jira configuration wouldn't be enough, please describe it here. If not, I will assume that when folder-level configuration is fixed, we can close this one.

Add Comment

[radek.antoniuk@gmail.com (JIRA)]

Radek Antoniuk updated an issue

Jenkins / JENKINS-32087

Configure JIRA credentials at the Job configuration level

Change By: Radek Antoniuk Priority: Critical Major

Add Comment

[radek.antoniuk@gmail.com (JIRA)]

Radek Antoniuk stopped work on JENKINS-32087

Change By: Radek Antoniuk Status: In Progress Open

Add Comment