Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-21327

Offering access to users with RUN_SCRIPTS is redundant

XMLWordPrintable

      From my reading of the UI and wiki, Scriptler seems to allow people with ADMINISTER to always run scripts, and those with RUN_SCRIPTS to do so only if additionally authorized. If true, this is backwards, as RUN_SCRIPTS is strictly more powerful than ADMINISTER. (And for Scriptler to be useful in a large secured installation, someone with RUN_SCRIPTS needs to be able to offer scripts for use by users who lack either permission.)

      Is this really true, or does the UI just give this false impression? For example

      Allow execution by user with 'RunScripts' permission

          [JENKINS-21327] Offering access to users with RUN_SCRIPTS is redundant

          Jesse Glick created issue -
          Jesse Glick made changes -
          Link New: This issue is related to JENKINS-21336 [ JENKINS-21336 ]
          Jesse Glick made changes -
          Link New: This issue is duplicated by SECURITY-135 [ SECURITY-135 ]
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 153191 ] New: JNJira + In-Review [ 178442 ]
          Wadeck Follonier made changes -
          Remote Link New: This issue links to "#32 (Web Link)" [ 20252 ]
          Wadeck Follonier made changes -
          Resolution New: Done [ 10000 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]

            domi Dominik Bartholdi
            jglick Jesse Glick
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: