Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-2434

Misleading "Access Denied" message

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Critical Critical
    • _unsorted
    • None
    • Platform: All, OS: All

      For my Hudson project, I have configuration for Matrix-based security
      authorization of two user/group: "admin" and "hotfix". "admin" user has all
      privileges and "hotfix" user has just Read, Configure and Build privileges.

      When hotfix user made a mistake in configuration of subversion repository path
      then the following messages he got:

      Access Denied

      org.acegisecurity.providers.UsernamePasswordAuthenticationToken@ac2f8aa9:
      Username: hudson.security.HudsonPrivateSecurityRealm$Details@71d29a; Password:
      [PROTECTED]; Authenticated: true; Details:
      org.acegisecurity.ui.WebAuthenticationDetails@ffff10d0: RemoteIpAddress:
      129.146.85.177; SessionId: 5DE492A3C97CD86C218348F23EBDFC38; Granted
      Authorities: authenticated is missing Administer

      So, I used admin user account and fixed wrong subversion path. However,
      misleading message "Access Denied" still presented and only for "hotfix" users.
      I could remove this message only if I'll add Administer privileges for hotfix
      users, but for some security reasons, I don't want to do it.

            Unassigned Unassigned
            ssburlg ssburlg
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: