Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-1875

Update Center needs security permission

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: plugin-proposals
    • Labels:
      None
    • Environment:
      Platform: All, OS: All
    • Similar Issues:

      Description

      When secuirty is enabled, an anonymous user should not be able to access the
      plugin manager. http://localhost:8080/hudson/pluginManager/

        Attachments

          Activity

          draco2k8 draco2k8 created issue -
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in hudson
          User: : kohsuke
          Path:
          trunk/hudson/main/core/src/main/java/hudson/Functions.java
          trunk/hudson/main/core/src/main/java/hudson/PluginManager.java
          trunk/www/changelog.html
          http://fisheye4.cenqua.com/changelog/hudson/?cs=10313
          Log:
          [FIXED JENKINS-1875] layout.jelly had a very error prone permission check that silentely passes when the "it" object is not an AccessControlled object.

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in hudson User: : kohsuke Path: trunk/hudson/main/core/src/main/java/hudson/Functions.java trunk/hudson/main/core/src/main/java/hudson/PluginManager.java trunk/www/changelog.html http://fisheye4.cenqua.com/changelog/hudson/?cs=10313 Log: [FIXED JENKINS-1875] layout.jelly had a very error prone permission check that silentely passes when the "it" object is not an AccessControlled object.
          scm_issue_link SCM/JIRA link daemon made changes -
          Field Original Value New Value
          Resolution Fixed [ 1 ]
          Status Open [ 1 ] Resolved [ 5 ]
          abayer Andrew Bayer made changes -
          Status Resolved [ 5 ] Closed [ 6 ]
          rtyler R. Tyler Croy made changes -
          Workflow JNJira [ 131948 ] JNJira + In-Review [ 201052 ]

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            draco2k8 draco2k8
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: