- `@Secured` annotation with role array (`"admin-user"`, `"admin-user-view"`)
- Role-based query filtering via `RoleQueryHelper`
- Authentication: Local (UserService), LDAP, OIDC, SAML, SPNEGO, Entra ID
- Security features: AES encryption, SHA256 digest, LDAP injection prevention, password policy, rate limiting

## Naming Conventions

| Element | Convention | Example |
|---------|------------|---------|

        id(buildTypeId(model))
        name = "Compile All"
        description = "Compiles all production/test source code and warms up the build cache"

        features {
            publishBuildStatusToGithub(model)
        }

        applyDefaults(
            model,
            this,
            "compileAllBuild -PignoreIncomingBuildReceipt=true -DdisableLocalCache=true",

        type = Type.COMPOSITE

        vcs {
            root(AbsoluteId(VersionedSettingsBranch.fromDslContext().vcsRootId()))
            checkoutMode = CheckoutMode.ON_AGENT
        }

        features {
            enablePullRequestFeature()
            publishBuildStatusToGithub(model)
        }

        if (!VersionedSettingsBranch.fromDslContext().isExperimental) {
            triggers.vcs {

[*.md]
trim_trailing_whitespace = false

[*.{yml,yaml}]
indent_size = 2

[gradle/verification-metadata.xml]
indent_size = 3

[subprojects/launcher/src/main/resources/release-features.txt]

        uuid = "${DslContext.uuidPrefix}_${model.projectId}_${triggerId}_Trigger"
        name = "$triggerName (Trigger)"
        type = Type.COMPOSITE

        applyDefaultSettings()

        features {
            publishBuildStatusToGithub(model)
        }

        dependencies {
            snapshotDependencies(dependencies)
        }

                ParallelizationMethod.TestDistribution
            } else {
                TeamCityParallelTests(4)
            }

        if (parallelizationMethod is TeamCityParallelTests) {
            features {
                parallelTests {
                    this.numberOfBatches = parallelizationMethod.numberOfBatches
                }
            }
        }

        failureConditions {

        id(buildTypeId(model))
        name = "Sanity Check"
        description = "Static code analysis, checkstyle, release notes verification, etc."

        features {
            publishBuildStatusToGithub(model)
        }

        applyDefaults(
            model,
            this,
            "sanityCheck",
            extraParameters =
                listOf(

import vcsroots.useAbsoluteVcs

object WarmupEc2Agent : BuildType({
    name = "Warmup EC2 Agent"
    id("Util_WarmupEc2Agent")

    vcs.useAbsoluteVcs(VersionedSettingsBranch.fromDslContext().vcsRootId())

    features {
        freeDiskSpace {
            // Lower the limit such that the agent work directories aren't cleaned during the AMI baking process
            requiredSpace = "100mb"
        }
    }

    params {

                    "-Dorg.gradle.java.installations.auto-download=false",
                    "-Porg.gradle.java.installations.auto-download=false",
                ).joinToString(" "),
        )

        features {
            publishBuildStatusToGithub(model)
        }

        setArtifactRules(
            """$artifactRules
packaging/distributions-full/build/distributions/*.zip => distributions

            )
            password("env.ORG_GRADLE_PROJECT_botGradleGitHubToken", "%github.bot-gradle.token%")
        }

        features {
            // https://www.jetbrains.com/help/teamcity/shared-resources.html#Viewing+Shared+Resources+Usage
            // https://blog.jetbrains.com/teamcity/2013/05/explaining-the-shared-resources-plugin/