Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-19970

( Praqma case 10162 ) Matrix-reloaded does not adhere to build permissions in the same way that normal manual build triggering does.

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Major Major
    • matrix-reloaded-plugin
    • None
    • Jenkins 1.509.1 or Jenkins 1.518, both configured with "Project-based Matrix Authorization Strategy".
      Matrix-reloaded 1.1.1

      I am experiencing the following situation: I am logged into an instance of Jenkins that supports multiple users and is configured such that, by default, they cannot trigger each others jobs. I have created a matrix job, checked the "Enable project-based security", added my account to the permissions matrix and checked all options, including the job build option, to give myself all permissions for my job. Now, I can manually trigger a build without a problem. However, when I try to trigger any build of my own job via the matrix-reloaded mechanism, I get a permission denied error message.
      It seems this is because the matrix-reloaded plugin is not handling permissions in the same way that the normal manual build triggering mechanism does. When I go to the Jenkins global security settings and enable the job build permission for all users, only then will triggering a build via matrix-reloaded work. However, this defeats the point of a per-job authorisation strategy since now everyone on the system can trigger my jobs.
      I suspect the fix to issue #16628 was not actually implemented correctly. My suggestion would be to check the permissions in the same way that the normal manual build triggering does. Ideally, using the same code.

            praqma Praqma Support
            aszostak Artur Szostak
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: