{"action":"created","issue":{"url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/10","labels_url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/10/comments","events_url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/10/events","html_url":"https://github.com/jenkinsci/authorize-project-plugin/pull/10","id":92221757,"number":10,"title":"[JENKINS-28298] Administrators can disable specific strategies","user":{"login":"ikedam","id":3115961,"avatar_url":"https://avatars.githubusercontent.com/u/3115961?v=3","gravatar_id":"","url":"https://api.github.com/users/ikedam","html_url":"https://github.com/ikedam","followers_url":"https://api.github.com/users/ikedam/followers","following_url":"https://api.github.com/users/ikedam/following{/other_user}","gists_url":"https://api.github.com/users/ikedam/gists{/gist_id}","starred_url":"https://api.github.com/users/ikedam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ikedam/subscriptions","organizations_url":"https://api.github.com/users/ikedam/orgs","repos_url":"https://api.github.com/users/ikedam/repos","events_url":"https://api.github.com/users/ikedam/events{/privacy}","received_events_url":"https://api.github.com/users/ikedam/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-06-30T23:09:12Z","updated_at":"2015-07-14T05:47:47Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/pulls/10","html_url":"https://github.com/jenkinsci/authorize-project-plugin/pull/10","diff_url":"https://github.com/jenkinsci/authorize-project-plugin/pull/10.diff","patch_url":"https://github.com/jenkinsci/authorize-project-plugin/pull/10.patch"},"body":"[JENKINS-28298](https://issues.jenkins-ci.org/browse/JENKINS-28298).\r\nUnfortunately, you cab bypass the authentication of \"Run as specific user\" by CLI or WebAPI on Jenkins > 1.545.\r\nThere's nothing authorize-project can do to fix that,\r\nand I filed the issue to Jenkins core ([JENKINS-28440](https://issues.jenkins-ci.org/browse/JENKINS-28440)) and sent a pull request a month ago.\r\n\r\nI plan followings for this issue:\r\n* Introduce a feature to disable \"Run as specific user\" (for users doesn't need that feature).\r\n* Write steps to disable CLI and WebAPI on the Wiki page (I believe they can be disabled by filtering /cli and /*/api)\r\n\r\nThis is the change to let administrators disable `AuthorizeProjectStrategy`s they don't need.\r\n\r\n![enable-disable](https://cloud.githubusercontent.com/assets/3115961/8444136/6e1c6168-1fc8-11e5-9118-f17ccaa0026a.png)\r\n"},"comment":{"url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/comments/121137869","html_url":"https://github.com/jenkinsci/authorize-project-plugin/pull/10#issuecomment-121137869","issue_url":"https://api.github.com/repos/jenkinsci/authorize-project-plugin/issues/10","id":121137869,"user":{"login":"oleg-nenashev","id":3000480,"avatar_url":"https://avatars.githubusercontent.com/u/3000480?v=3","gravatar_id":"","url":"https://api.github.com/users/oleg-nenashev","html_url":"https://github.com/oleg-nenashev","followers_url":"https://api.github.com/users/oleg-nenashev/followers","following_url":"https://api.github.com/users/oleg-nenashev/following{/other_user}","gists_url":"https://api.github.com/users/oleg-nenashev/gists{/gist_id}","starred_url":"https://api.github.com/users/oleg-nenashev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oleg-nenashev/subscriptions","organizations_url":"https://api.github.com/users/oleg-nenashev/orgs","repos_url":"https://api.github.com/users/oleg-nenashev/repos","events_url":"https://api.github.com/users/oleg-nenashev/events{/privacy}","received_events_url":"https://api.github.com/users/oleg-nenashev/received_events","type":"User","site_admin":false},"created_at":"2015-07-14T05:47:47Z","updated_at":"2015-07-14T05:47:47Z","body":"@ikedam \r\nI'm OK with the change. :+1: \r\nI would vote for a centralized support of disabling extension points in Jenkins, but I doubt such solution would completely address your case."}}