Chapter 6. Security

## Chapter 6. Security

With QuickBuild, you will be able to control that who can access your build system, and what they can do on it. Further more, you can authorize anonymous users accessing certain part of your system.

## User authentication

Currently QuickBuild supports authenticating users from two sources: configuration file and database. Users from other authentication source such as CAS, LDAP will be supported in later versions. Configuration file authentication source is only used for administrator with initial user/password as admin/admin. Path to the configuration file is `<QuickBuild installation directory>/config.properties`. Administrator password can be changed by editing this file. User admin is the only super user in QuickBuild system, and has the permission to perform tasks such as managing users/groups, configuring system settings, managing licenses, managing build queues, backing up/restoring system, or exporting/importing data, etc.

Another supported authentication source is database. Users created by administrator in QuickBuild are saved into database, and will be authenticated through that database later on. Please be noted that the Users menu lists not only all users in the database, but also users from other authentication source (here you will see admin been listed). The reason is that although QuickBuild authenticate them through other authentication sources, it still maintains contact information such as Email, MSN messenger account, which may be used to send out build notification to these users. Changing password for these users here has no effect. Instead, password should be changed from their own authentication source (such as editing config file in order to change password for the admin user).

Chapter 5. Velocity templates |  | User authorization