-
Bug
-
Resolution: Duplicate
-
Critical
-
None
-
Platform: All, OS: All
For my Hudson project, I have configuration for Matrix-based security
authorization of two user/group: "admin" and "hotfix". "admin" user has all
privileges and "hotfix" user has just Read, Configure and Build privileges.
When hotfix user made a mistake in configuration of subversion repository path
then the following messages he got:
Access Denied
org.acegisecurity.providers.UsernamePasswordAuthenticationToken@ac2f8aa9:
Username: hudson.security.HudsonPrivateSecurityRealm$Details@71d29a; Password:
[PROTECTED]; Authenticated: true; Details:
org.acegisecurity.ui.WebAuthenticationDetails@ffff10d0: RemoteIpAddress:
129.146.85.177; SessionId: 5DE492A3C97CD86C218348F23EBDFC38; Granted
Authorities: authenticated is missing Administer
So, I used admin user account and fixed wrong subversion path. However,
misleading message "Access Denied" still presented and only for "hotfix" users.
I could remove this message only if I'll add Administer privileges for hotfix
users, but for some security reasons, I don't want to do it.
- duplicates
-
JENKINS-2715 Field validators in configure screen require admin permission
- Closed