Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-26427

Anonymous can delete data file

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • cluster-stats-plugin
    • None

      While looking how to show the stats in a dashboard for the benefit or a larger audience that the admins.. I noticed that the url plugin/cluster-stats/ 'just' works, even for anonymous users.. that is fine, except that the button 'Delete Recorded Information' is also there... that is less 'fine'...

      PS: I have not checked if click the button actually delete the data.. I'm in no rush to loose it

      In order of preference:

      • the two button are not shown unless you are admin
      • the buttons are shown but do not do anything (or error-out) if not admin
      • the whole page is protected and require admin

            Unassigned Unassigned
            shmget Norbert Thiebaud
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: