since every committer can have an authenticated access to Jenkins, this seems 
reasonable to me

notice I don't really get what is "the archive artifacts functionality": any 
pointer appreciated, and I'll try to add explanations to our Jenkins best 
practices [1]

> am going to contact the Maven team
> regarding what looks to be build usage of bits from some of their jobs'
> workspaces
are you talking about the dist-tool report [2], or something else?
Is a generated site like workspace or like archive?

Thank you for the hard work done.

Regards,

Hervé


[1] 
http://wiki.apache.org/general/Jenkins#Are_there_recommended_or_mandatory_Jenkins_settings_for_ASF_projects.3F

[2] https://builds.apache.org/view/M-R/view/Maven/job/dist-tool-plugin/site/

Le jeudi 15 mai 2014 13:55:21 Andrew Bayer a écrit :
> So from https://issues.jenkins-ci.org/browse/JENKINS-23056 it sounds like
> at least one of the problems we're having with Jenkins hanging is because
> of attempts to access the workspace of jobs through the UI - when a slave
> is slow or hanging and that kind of request is made, it can lock up the
> whole UI. I've contacted the Mahout team regarding their linking to
> javadocs in job workspaces, and am going to contact the Maven team
> regarding what looks to be build usage of bits from some of their jobs'
> workspaces, but I'd also like to nip this in the bud permanently by
> requiring authentication for access to job workspaces.
> 
> My thinking is that the only legitimate reason to be accessing the
> workspace is if you need to in order to debug a failed build - otherwise,
> if there's something that you want to be publishing from your build, you
> can use the archive artifacts functionality. Does this sound reasonable to
> everyone?
> 
> A.

Reply via email to