-
Bug
-
Resolution: Unresolved
-
Critical
-
None
We have Jenkins configured so that only logged in users can make changes. We have promoted builds set up to let anyone approve a manual promotion. Unfortunately that means people have been approving promotions without first logging in.
I think the plugin should be checking whether a user has modify permissions before displaying the 'approve' button, i.e. same logic that Jenkins uses for the 'build now' button.
Sorry, over last months I had no time to work on the plugin, because I had to focus on the Jenkins core and other projects. I also have not been using this plugin on my own since 2016. So I have decided to unassign the issues so that there is no expectation that I work on them anytime soon.
Currently the plugin is being transfered to another maintainer. Hopefully he will have some time to finish triaging of the issues and maybe to deliver some fixes. But, as in any community-driven project, everybody is welcome to propose pull requests and to contribute to the plugin's state.