• Type: Bug
• Resolution: Duplicate
• Priority: Major
• Component/s: email-ext-plugin
• Labels:

  • security
• Environment:

  Email-ext 2.37.2.2 on Jenkins 1.554.3

[JENKINS-23986] Permissions check in ExtendedEmailPublisher.getProjectActions does not work

Daniel Beck created issue - 2014-07-25 12:49

Daniel Beck made changes - 2014-07-25 13:34

Description

Original: The permissions check is run in a system context (or not re-run for every page view), so it's ineffective. The permission needs to be checked: * in the action itself (e.g. the index.jelly) to fail when configure permission is missing * as well as the action.jelly that needs to be added for this

New: The permissions check is run in a system context (or not re-run for every page view), so it's ineffective. The permission needs to be checked: * in the action itself (e.g. the index.jelly) to fail when configure permission is missing (for those clever users navigating to known URLs directly) * as well as the action.jelly that needs to be added for this

Daniel Beck made changes - 2014-07-25 14:49

Assignee

Original: Alex Earl [ slide_o_mix ]

New: Daniel Beck [ danielbeck ]

Daniel Beck made changes - 2014-07-25 14:50

Assignee

Original: Daniel Beck [ danielbeck ]

New: Alex Earl [ slide_o_mix ]

Alex Earl made changes - 2014-08-19 12:46

Link

New: This issue duplicates JENKINS-23834 [ JENKINS-23834 ]

Alex Earl made changes - 2014-08-19 12:47

Resolution		New: Duplicate [ 3 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

R. Tyler Croy made changes - 2016-07-26 00:01

Workflow

Original: JNJira [ 156856 ]

New: JNJira + In-Review [ 207900 ]