关于hudson.model.Item.Move权限对象定义位置的技术咨询

Great question! You’re right that most core job permissions like Item.BUILD, Item.CANCEL, or Item.CONFIGURE are defined directly in the hudson.model.Item class. But the Item.Move permission is an exception—it’s actually housed in the hudson.model.ItemGroup class.

Here’s why this makes sense: Moving a job isn’t just an action on the job itself; it’s an operation that involves interacting with the parent container (like a folder, view, or even the root Jenkins instance, all of which implement ItemGroup). The permission controls whether a user can move jobs into or out of a specific item group, so it’s tied to the container rather than the individual job.

To be precise, the Permission object for Item.Move is defined as a static final field in ItemGroup with code structured like this:

public static final Permission MOVE = new Permission(Item.class, "Move", Messages._ItemGroup_MovePermission(), CONFIGURE, PermissionScope.ITEM);

Notice it still associates itself with Item.class for consistent UI grouping, but the definition lives in ItemGroup because the permission’s scope is tied to container-level operations.

内容的提问来源于stack exchange，提问作者agabrys