Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

  • View Only Users are able to add packages

    Support permissions proget security
    5
    0 Votes
    5 Posts
    6 Views
    ?
    Oh I see what you mean - I thought you meant that you were able to upload packages using the NuGet client... I was able to reproduce in that way. We'll have a fix for this in maintenance release v3.0.4 (logged as issue PG-210). Apologies for the confusion.
  • Prompting for username and password

    Support buildmaster sdk security
    3
    0 Votes
    3 Posts
    10 Views
    ?
    Alana, thanks for the suggestion. I will look at adding this, but do you have any ideas how I can get the execution id for the current execution? There don't seem to be any variables for it. I thought of trying to get it from the BuildMaster API using an HTTP GET request, but I don't see a way to store that to a variable.
  • SSL Proget

    Support proget security
    2
    0 Votes
    2 Posts
    46 Views
    ?
    In this case, you should install ProGet to IIS (it's an option in the installer), and configure SSL from there.
  • View Debug Logs security setting

    Support buildmaster security
    6
    0 Votes
    6 Posts
    20 Views
    ?
    Can you send a screenshot to support@inedo.com exhibiting this behavior? In a quick smoke test my debug logs disappear when I remove the task from all the roles.
  • 0 Votes
    6 Posts
    2 Views
    ?
    We have released BuildMaster 4.1.3, which addresses this issue: BM-1380 - Hide passwords from clients when UseDpApiForPasswords is enabled So as long as that option is enabled, stored passwords will never be accessible from the UI.
  • Unexpected behavior in the ProGet Permissions system

    Support proget security
    7
    0 Votes
    7 Posts
    14 Views
    ?
    Hi John, I just tested the fix, and it indeed solves the problem. I am impressed how quickly this was handled! Thanks a lot!
  • 0 Votes
    3 Posts
    22 Views
    ?
    Great, many thanks for your support!
  • Hide passwords in environment variables

    Support buildmaster actions security
    4
    0 Votes
    4 Posts
    5 Views
    ?
    The logging isn't disabled; build execution log entries with a debug level are simply not displayed to users who don't have that privilege. By default the "View Only" role does not include the ability to view execution log entries. We have a few tutorials for making a custom action here: http://inedo.com/support/tutorials Alternatively you could store the password on the machine as an environment variable, and have the shell script retrieve it that way.
  • Editing of Config Files

    Support configuration-files security buildmaster
    2
    0 Votes
    2 Posts
    8 Views
    ?
    Hi Tim, You may want to create a role with the task, Builds_PromoteBuild, and then only deny that role to Production. Alex
  • Security Exception on new install

    Support buildmaster security error
    4
    0 Votes
    4 Posts
    4 Views
    ?
    Are you using IIS or the integrated web server? You may want to try the integrated web server. It's possible an IIS/system-wide setting is overriding some of the configration.
  • Proget - Security Question

    Support security proget
    4
    0 Votes
    4 Posts
    8 Views
    ?
    Passing in a username/password is controlled through the API key argument when there is no API key assigned for the feed in ProGet: http://inedo.com/support/documentation/proget/feeds/api-keys
  • Trigger Builds

    Support buildmaster triggered-builds security
    2
    0 Votes
    2 Posts
    12 Views
    ?
    The password being displayed is by design, since the same privilege (Builds_ManageBuildSchedules) is required to both view and edit the build schedules, therefore showing it on one page is essentially the same as showing it on the other. You can disallow users to view the schedule details by denying the Builds_ManageBuildSchedules privilege to whomever you do not want to view the passwords.