• Type: New Feature
• Resolution: Unresolved
• Priority: Major
• Component/s: job-dsl-plugin, script-security-plugin
• Labels:

  • api
  • security
• Environment:

  Ubuntu 14.04 LTS
  OpenJDK 1.7 IcedTea
  Jenkins ver. 1.635
  Script Security Plugin 1.15
  Groovy Postbuild 2.2.2

[JENKINS-31201] Job DSL support for ScriptApproval (was: Groovy postbuild ignores RUN_SCRIPTS permission)

Sam Gleske created issue - 2015-10-27 21:54

Sam Gleske made changes - 2015-10-27 21:55

Link

New: This issue is related to JENKINS-22661 [ JENKINS-22661 ]

Sam Gleske made changes - 2015-10-27 21:56

Description

Original: This plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user. When I generate scripts then this plugin still requires the script approval. Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).

New: The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user. When I generate scripts then this plugin still requires the script approval. Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).

Sam Gleske made changes - 2015-10-27 21:56

Description

Original: The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user. When I generate scripts then this plugin still requires the script approval. Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).

New: The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user. When I generate scripts this plugin still requires the script approval. Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).

Jesse Glick made changes - 2015-12-09 14:27

Link

Original: This issue is related to JENKINS-22661 [ JENKINS-22661 ]

Jesse Glick made changes - 2015-12-09 14:51

Component/s		New: job-dsl-plugin [ 16720 ]
Component/s	Original: groovy-postbuild-plugin [ 15685 ]
Assignee	Original: Stefan Wolf [ wolfs ]
Issue Type	Original: Bug [ 1 ]	New: New Feature [ 2 ]
Labels		New: api security
Summary	Original: Groovy postbuild ignores RUN_SCRIPTS permission	New: Job DSL support for ScriptApproval (was: Groovy postbuild ignores RUN_SCRIPTS permission)

R. Tyler Croy made changes - 2016-07-25 23:52

Workflow

Original: JNJira [ 166387 ]

New: JNJira + In-Review [ 182380 ]

Jesse Glick made changes - 2017-01-03 16:15

Link

New: This issue is duplicated by JENKINS-40118 [ JENKINS-40118 ]

Jesse Glick made changes - 2017-03-16 16:05

Link

New: This issue relates to SECURITY-369 [ SECURITY-369 ]