Can Hudson be configured to prevent certain users from accessing certain projects?

Question

I have various projects being built and tested periodically on a Hudson server, but I don't want every employee in the company to see published artifacts for every project.

Project-based matrix security seemed at first the key, but after many tests I find that granting overall read permissions is mandatory if you want users to be able to read anything in the hudson server.

So, in the end read permissions are binary: either you grant global read permission or you block everything, am I right?

Answer 1

After trying to do something similar to you with Hudson's authorization settings, I came to the same conclusion you did.

Answer 2

Haven't it tested with the newest release, but I use the matrix setup. I gave Anonymous the overall read. This way they can see the login screen when they type {{http://servername:port/}} but does not give them access to the jobs. In the jobs themselves I configured the users that should actually see the job. Works like a charm.