Hopeful;ly our authz config matches same config as we had with 0.8

This commit is contained in:
2018-02-19 17:38:15 +01:00
parent 980f50ee4f
commit 0af67dd72c

View File

@@ -355,6 +355,14 @@ c['www'] = dict(port=8010,
'waterfall_view': {}}) 'waterfall_view': {}})
# Access # Access
from buildbot.www.authz.roles import RolesFromOwner
from buildbot.www.authz.roles import RolesFromBase
class StrangerRoles(RolesFromBase):
def getRolesFromUser(self, userDetails):
return ['stranger']
authz = util.Authz( authz = util.Authz(
stringsMatcher=util.fnmatchStrMatcher, # simple matcher with '*' glob character stringsMatcher=util.fnmatchStrMatcher, # simple matcher with '*' glob character
# stringsMatcher = util.reStrMatcher, # if you prefer regular expressions # stringsMatcher = util.reStrMatcher, # if you prefer regular expressions
@@ -364,13 +372,16 @@ authz = util.Authz(
util.AnyEndpointMatcher(role="admins", defaultDeny=False), util.AnyEndpointMatcher(role="admins", defaultDeny=False),
# Defaulting old config, everyone can stop build. # Defaulting old config, everyone can stop build.
util.StopBuildEndpointMatcher(role="*"), util.StopBuildEndpointMatcher(role="stranger"),
util.ForceBuildEndpointMatcher(builder="*", role="*"), util.ForceBuildEndpointMatcher(role="stranger"),
# if future Buildbot implement new control, we are safe with this last rule # if future Buildbot implement new control, we are safe with this last rule
util.AnyControlEndpointMatcher(role="admins") util.AnyControlEndpointMatcher(role="admins")
], ],
) roleMatchers=[
RolesFromOwner(role="owner"),
StrangerRoles(),
])
c['www']['authz'] = authz c['www']['authz'] = authz
# PROJECT IDENTITY # PROJECT IDENTITY