Can bypass permission check of CopyArtifact with WebAPI/CLI

This issue is archived. You can view it, but you can't modify it. Learn more

XMLWordPrintable

      When specifying a project name to copy artifacts from without a variable, permission check is performed at configuration time.
      That check is performed in the constructor of CopyArtifact, and can be bypassed using WebAPI, which does not trigger the constructor (triggers readResolve instead).

      update: can be bypassed also with CLI.

            Assignee:
            ikedam
            Reporter:
            ikedam
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Resolved:
              Archived: