copy-job checks CREATE on Jenkins root, when it only needs to do so on the actual target of the copy. Also it fails to check EXTENDED_READ on the source.

      create-job also checks CREATE needlessly on root.

          [JENKINS-22262] copy-job permission checks wrong

          Jesse Glick created issue -
          Jesse Glick made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Jesse Glick made changes -
          Labels Original: cli security New: cli folders security
          SCM/JIRA link daemon made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: In Progress [ 3 ] New: Resolved [ 5 ]
          Daniel Beck made changes -
          Labels Original: cli folders security New: cli folders lts-candidate security
          Oliver Gondža made changes -
          Labels Original: cli folders lts-candidate security New: 1.554.1-fixed cli folders security
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 154343 ] New: JNJira + In-Review [ 194879 ]
          Jesse Glick made changes -
          Link New: This issue relates to SECURITY-321 [ SECURITY-321 ]

            jglick Jesse Glick
            jglick Jesse Glick
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: