Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-18493

Users unable to copy jobs without global read permissions

XMLWordPrintable

      While using the Project-based Matrix Authorization Strategy users are unable to create a new job unless global read is enabled. The global read permission is too liberal, allowing any authenticated user to see any job. The Create Job Advanced Plugin (https://wiki.jenkins-ci.org/display/JENKINS/Create+Job+Advanced+Plugin) seems to fix this by granting users full permissions to jobs they create, however, it does not apply to duplicated jobs.

      When an authenticated user attempts to copy an existing job without global read permissions the resulting job fails to copy the existing values from the copied job. The user is then forwarded to a page that requests the user log in to see the newly created job.

      Expected behavior:
      A user is only able to copy jobs they have the ability to read and the resultant job should have the same permissions as the copied job.

        1. Jenkins System Properties.doc
          148 kB
        2. jenkins_copy_job_screen1.png
          jenkins_copy_job_screen1.png
          56 kB
        3. jenkins_copy_job_screen2.png
          jenkins_copy_job_screen2.png
          54 kB

          [JENKINS-18493] Users unable to copy jobs without global read permissions

          Timothy Forbes created issue -
          Oleg Nenashev made changes -
          Component/s New: matrix-auth [ 18131 ]
          Component/s Original: core [ 15593 ]
          Assignee New: Jesse Glick [ jglick ]
          Labels Original: authentication job permissions New: authentication job permissions security
          Jesse Glick made changes -
          Assignee Original: Jesse Glick [ jglick ]
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 149800 ] New: JNJira + In-Review [ 177475 ]
          Oleg Nenashev made changes -
          Component/s Original: security [ 15508 ]
          Daniel Beck made changes -
          Link New: This issue duplicates JENKINS-5277 [ JENKINS-5277 ]
          Daniel Beck made changes -
          Resolution New: Duplicate [ 3 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]

            Unassigned Unassigned
            leprasmurf Timothy Forbes
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: