Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-13429

Nested views not showing up with just read perms for View

    XMLWordPrintable

Details

    Description

      Jenkins 1.459 + Nested View Plugin 1.8 + Role-based Authorization Strategy 1.1.2

      User has read permissions for "View" but Jenkins main page is missing Nested views (even if they have sub views with jobs).
      Adding "configure" perms for "View" results in Nested views showing up correctly.

      It looks like it's connected with:
      "Added the View.READ permission to control visibility of views, and updated the default implementation to hide empty views. (issue 3681)"

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-14546 Regular users (others than admin) can't see any nested-views (other than the default one) with role-based authorization strategy activated

          • Major - Major loss of function.
          • Reopened

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-13942 Cannot display the view for Readonly user

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-17315 Nested view no longer shows unless logged in

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-3681 Hide Empty Tabs (Views) in the GUI

          • Major - Major loss of function.
          • Resolved

          Activity

            Ascending order - Click to sort in descending order
            View 5 older comments
            vrenjith Renjith Pillai added a comment -

            Badly in need of this correction. The workaround to give 'Configure' permission for the same seems to be dangerous.

            vrenjith Renjith Pillai added a comment - Badly in need of this correction. The workaround to give 'Configure' permission for the same seems to be dangerous.
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Vincent Latombe
            Path:
            changelog.html
            core/src/main/java/hudson/security/AuthorizationStrategy.java
            http://jenkins-ci.org/commit/jenkins/d1b2ba7e4988d26fbb815b8912efb16273c407d4
            Log:
            [FIXED JENKINS-13429]
            Backward compatibility is preventing the View.READ permission to apply
            correctly. It actually overrides the View.READ instead of complementing
            it.

            This change only applies default READ right if the View.READ is not
            available, and the user has View.CONFIGURE + the view is not empty.

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Vincent Latombe Path: changelog.html core/src/main/java/hudson/security/AuthorizationStrategy.java http://jenkins-ci.org/commit/jenkins/d1b2ba7e4988d26fbb815b8912efb16273c407d4 Log: [FIXED JENKINS-13429] Backward compatibility is preventing the View.READ permission to apply correctly. It actually overrides the View.READ instead of complementing it. This change only applies default READ right if the View.READ is not available, and the user has View.CONFIGURE + the view is not empty.
            vrenjith Renjith Pillai added a comment -

            So which release contains this correction? The changelogs doesn't seem to indicate this.

            vrenjith Renjith Pillai added a comment - So which release contains this correction? The changelogs doesn't seem to indicate this.
            vlatombe Vincent Latombe added a comment -

            It will be in 1.467

            vlatombe Vincent Latombe added a comment - It will be in 1.467
            dogfood dogfood added a comment -

            Integrated in jenkins_ui-changes_branch #30
            [FIXED JENKINS-13429] (Revision d1b2ba7e4988d26fbb815b8912efb16273c407d4)

            Result = SUCCESS
            Kohsuke Kawaguchi : d1b2ba7e4988d26fbb815b8912efb16273c407d4
            Files :

            • core/src/main/java/hudson/security/AuthorizationStrategy.java
            • changelog.html
            dogfood dogfood added a comment - Integrated in jenkins_ui-changes_branch #30 [FIXED JENKINS-13429] (Revision d1b2ba7e4988d26fbb815b8912efb16273c407d4) Result = SUCCESS Kohsuke Kawaguchi : d1b2ba7e4988d26fbb815b8912efb16273c407d4 Files : core/src/main/java/hudson/security/AuthorizationStrategy.java changelog.html

            People

              kohsuke Kohsuke Kawaguchi
              carno M S
              Votes:
              11 Vote for this issue
              Watchers:
              13 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: