Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Working on a support issue we only access the minimum data needed to resolve the issue.

Product Security

TODO

Permissions

TODO

Source Code Protection

Users get access to the App only by logging into Jira. The App uses the Atlassian Connect that relies on HTTPS and JWT authentication to secure communication between the App, the Atlassian product, and the user. 

Please learn more about Atlassian Connect security.

Приложение хранит данные аутентификации к серверам TeamCity в зашифрованном виде. Шифрование и дешифрование происходит с помощью механизма AWS Encryption SDK. У разработчиков нет доступа к ключу шифрования. Ротация ключа шифрования происходит каждый год. Аутентификация в TeamCity происходит с помощью basic HTTP authentication.

Permissions

The maximum set of actions TeamCity Integration for Jira app may perform is expressed in the scopes in the App descriptor and is presented to the administrator during installation. This security level is enforced by Atlassian Connect and cannot be bypassed by app implementations.

Here is the list of all used scopes:

  • READ - View, browse, and read information from Jira.
  • WRITE - Create or edit content in Jira, but not delete content.
  • DELETE - Delete content in Jira.

Learn more in the scopes documentation.

Взаимодействие приложения с Жирой

Мы не храним данные из Жиры в наших таблицах. Приложение только актуализируем данные билдов и деплойментов в Development Panel в Жире. Эндпоинты по получению информации о задаче или проекте используются только для резолва ключа по идентификатору.

POST /rest/api/3/permissions/check

GET /rest/api/3/issue/{issueId}

GET /rest/api/3/project/{projectId}

POST /rest/builds/0.1/bulk

DELETE /rest/builds/0.1/bulkByProperties

POST /rest/deployments/0.1/bulk

DELETE /rest/deployments/0.1/bulkByProperties

Взаимодействие приложения с TeamCity

Приложение не изменяет билды в TeamCity, а только получает информацию

GET /app/rest/buildTypes/{btLocator}

GET /app/rest/server

GET /app/rest/users/{userLocator}

GET /app/rest/changes

GET /app/rest/builds


GET /app/rest/builds/{buildLocator}TODO






Uptime

The App has uptime of 99.99% or higher. You can check our current and historic status at https://stats.uptimerobot.com/jqxnBSYvO3

Network and Application Security

...