Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-32289

RFE - Access to Plugins Manager in without Administer permission

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Won't Do
    • Component/s: core
    • Labels:
      None
    • Similar Issues:

      Description

      It is not possible to access the Plugin Manager without Administer permission.

      I want to create a user that must be able to update plugins. However, this user should not be able to:

      • Manage Jenkins
      • Upload Plugins (in the Advanced Tab)
      • Configure the Update Center (in the Advanced Tab)

      Permissions to revoke in order to achieve that are:

      • Administer to restrict access to Manager Jenkins
      • ConfigureUpdateCenter and UploadPlugin to restrict access to the Advanced Tab

      However we cannot make it work because a user without Administer permission cannot access to the Plugin Manager.

        Attachments

          Issue Links

            Activity

            Hide
            oleg_nenashev Oleg Nenashev added a comment -

            Removed the assignment since it is not a Role Strategy issue. IMHO it is also "won't fix", but needs a decision from the security team. CC Daniel Beck

            Show
            oleg_nenashev Oleg Nenashev added a comment - Removed the assignment since it is not a Role Strategy issue. IMHO it is also "won't fix", but needs a decision from the security team. CC Daniel Beck
            Hide
            danielbeck Daniel Beck added a comment -

            This makes absolutely no sense. If someone can upload plugins, they can give themselves Administer permission by writing and uploading give-me-admin-permission plugin.

            Show
            danielbeck Daniel Beck added a comment - This makes absolutely no sense. If someone can upload plugins, they can give themselves Administer permission by writing and uploading give-me-admin-permission plugin.

              People

              Assignee:
              oleg_nenashev Oleg Nenashev
              Reporter:
              allan_burdajewicz Allan BURDAJEWICZ
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: