cruisecontrol.net - 在 CC.NET 1.5 中配置安全设置

Question

下面是我拥有的 ccnet.config 文件，我在其中使用 CC.NET 1.5 的新安全功能。谁能让我知道我做错了什么。我在 DOMAIN 中有两个组，我想让一个组仅查看，而另一组具有完全访问权限。

<cruisecontrol>
  <project>
   <name>Introvert</name> 
      <!-- Security Settings -->
      <security type="defaultProjectSecurity" defaultRight="Deny">
          <permissions>
              <!-- Grant permissions to this project -->
              <rolePermission name="ViewOnly" ref="ViewOnly"/>
              <rolePermission name="FullAccess" ref="FullAccess"/>
          </permissions>
      </security>

  </project>


<!-- Security Settings -->
    <internalSecurity>
        <users>
            <simpleUser name="DOMAIN\GROUP1\*" />
            <simpleUser name="DOMAIN\GROUP2\*" />
        </users>
        <permissions>
            !-- Roles -->
            <rolePermission name="FullAccess" forceBuild="Allow" startProject="Allow" >
                <users>
                    <userName name="DOMAIN\GROUP1\"/>
                </users>         
            </rolePermission>
            <rolePermission name="ViewOnly" forceBuild="Deny" startProject="Deny">
                <users>
                    <userName name="DOMAIN\GROUP2\"/>
                </users>
            </rolePermission>
        </permissions>
    </internalSecurity>
</cruisecontrol>

Answer 1

<!-- Security Settings --> 
    <internalSecurity> 
        <users> 
            <simpleUser name="DOMAIN\GROUP1\*" /> 
            <simpleUser name="DOMAIN\GROUP2\*" /> 
        </users> 
        <permissions> 
            **!-- Roles -->** <-- mising a "<", bad formatted XML
            <rolePermission name="FullAccess" forceBuild="Allow" startProject="Allow" > 
                <users> 
                    <userName name="DOMAIN\GROUP1\"/>  <-- shouldn't it be DOMAIN\GROUP1\*?
                </users>          
            </rolePermission> 
            <rolePermission name="ViewOnly" forceBuild="Deny" startProject="Deny"> 
                <users> 
                    <userName name="DOMAIN\GROUP2\"/> 
                </users> 
            </rolePermission> 
        </permissions> 
    </internalSecurity>