Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 341614

Summary:	Eclipse and Equinox group access to Hudson
Product:	Community	Reporter:	Kim Moir <kim.moir>
Component:	CVS	Assignee:	Eclipse Webmaster <webmaster>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	normal
Priority:	P3	CC:	daniel_megert, dj.houghton, john.arthorne, Mike_Wilson, pwebster
Version:	unspecified
Target Milestone:	---
Hardware:	PC
OS:	Windows XP
Whiteboard:

Description Kim Moir

2011-04-01 09:00:03 EDT

I initiated a committer vote for Szymon Brandys for access to eclipse.platform.  I assumed that all committers were in this group because everyone need to access org.eclipse.releng.  However, John pointed out this project is actually managed by ACLs.  Is there a single group that I can use to give all Eclipse and Equinox committers to Hudson jobs without specifying individual committer ids?

johna@dev2:/cvsroot/eclipse> getfacl org.eclipse.releng 
# file: org.eclipse.releng 
# owner: droy 
# group: eclipse.platform 
# flags: -s- 
user::rwx 
user:kmoir:rwx 
user:sdimitro:rwx 
group::rwx 
group:eclipse.platform.debug:rwx 
group:eclipse.platform.releng:rwx 
group:eclipse.platform.resources:rwx 
group:eclipse.platform.runtime:rwx 
group:eclipse.platform.swt:rwx 
group:eclipse.platform.team:rwx 
group:eclipse.platform.text:rwx 
group:eclipse.platform.ua:rwx 
group:eclipse.platform.ui:rwx

Comment 1 Dani Megert

2011-04-01 09:03:06 EDT

Better would be to grant the groups access to Hudson (if possible). That way no further work is needed when a new committer is added.

Comment 2 Kim Moir

2011-04-01 09:23:43 EDT

Yes Dani, but then I have to add nine groups to access every Hudson job.  There is a Hudson job for
-nightly builds, integration builds, every platform (Linux, Windows, Mac), eventually performance tests

So I'm hoping there is a solution to just add one group.

Comment 3 Dani Megert

2011-04-01 09:28:42 EDT

Shouldn't every committer be allowed to look at build results like today?

Comment 4 Eclipse Webmaster

2011-04-01 09:31:31 EDT

(In reply to comment #2)

> So I'm hoping there is a solution to just add one group.

Not that I'm aware of.  Based on the restructure docs we might be able to find
2+ groups that contain 'everyone' but it's still going to be a moving target.

Perhaps you could use a groovy script to implement Danis suggestion?  It will
probably be the easiest long term solution.

-M.

Comment 5 Kim Moir

2011-04-01 11:33:07 EDT

I assume you mean running a Groovy script as described here

http://wiki.hudson-ci.org/display/HUDSON/Hudson+Script+Console

I tried accessing the https://hudson.eclipse.org/hudson/script to try this out and saw the message

Access denied - kmoir is missing the Administer permission

Comment 6 Dani Megert

2011-04-02 02:25:56 EDT

(In reply to comment #5)
> I assume you mean running a Groovy script as described here
> 
> http://wiki.hudson-ci.org/display/HUDSON/Hudson+Script+Console
> 
> I tried accessing the https://hudson.eclipse.org/hudson/script to try this out
> and saw the message
> 
> Access denied - kmoir is missing the Administer permission

Not knowing Hudson too well: maybe there's some sort of parent or template job that could be cloned?

Comment 7 Kim Moir

2011-04-03 20:34:26 EDT

I just added all the group manually to all the jobs. I'll look at the Groovy stuff when I have more time.