Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-21635

"Build" permission is ignored, anyone can reach the link

    XMLWordPrintable

Details

    Description

      At least while using project-based security, this module ignores the (lack of) Build permission and allows builds to be run by users without permission.

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-23076 Build With Params link is visible for users without build permission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            Ascending order - Click to sort in descending order
            olivergondza Oliver Gondža added a comment -

            Closing as a duplicate of a bug that is already fixed.

            olivergondza Oliver Gondža added a comment - Closing as a duplicate of a bug that is already fixed.
            olivergondza Oliver Gondža added a comment -

            Note that an attempt to actually build the job will be rejected with SecurityException, therefore this is not a security hole.

            olivergondza Oliver Gondža added a comment - Note that an attempt to actually build the job will be rejected with SecurityException, therefore this is not a security hole.

            People

              Unassigned Unassigned
              byronbrummer Byron Brummer
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: