The matrix authorizer shows permissions added by plugins, however, the github authorization strategy doesn't seem to support plugin-provided permissions.

      In my case, I need to give users the 'Release' permission from the 'Release' plugin, and can't find a way to do that with the committer authorization strategy.

          [JENKINS-33661] Plugin permissions not supported

          Sam Gleske added a comment - - edited

          If you make use of another authorization strategy (such as a matrix-based authorization strategy) then you can support it. GitHub organizations and teams are surfaced as groups in Jenkins.

          https://wiki.jenkins-ci.org/display/JENKINS/Github+OAuth+Plugin#GithubOAuthPlugin-MatrixbasedAuthorizationstrategy

          I think it would require a little bit of extra thinking in how we can support permissions from other plugins in the GitHub authorization strategy.

          Sam Gleske added a comment - - edited If you make use of another authorization strategy (such as a matrix-based authorization strategy) then you can support it. GitHub organizations and teams are surfaced as groups in Jenkins. https://wiki.jenkins-ci.org/display/JENKINS/Github+OAuth+Plugin#GithubOAuthPlugin-MatrixbasedAuthorizationstrategy I think it would require a little bit of extra thinking in how we can support permissions from other plugins in the GitHub authorization strategy.

          Christian Höltje added a comment - - edited

          I ran across this today and it took a bit of tracking to figure out what was going on...

          A user on a team cannot use the Pipeline "Replay" feature because of this issue.

          It's a pretty big usability issue.

          Christian Höltje added a comment - - edited I ran across this today and it took a bit of tracking to figure out what was going on... A user on a team cannot use the Pipeline "Replay" feature because of this issue. It's a pretty big usability issue.

          Sam Gleske added a comment - - edited

          I don't actively develop this plugin. I mostly maintain pull requests and releases. I welcome proposals, pull requests, and other forms of contributions which would improve this feature and resolve this bug.

          Sam Gleske added a comment - - edited I don't actively develop this plugin. I mostly maintain pull requests and releases. I welcome proposals, pull requests, and other forms of contributions which would improve this feature and resolve this bug.

          Sam Gleske added a comment -

          Closing this issue in favor of JENKINS-27844 to completely overhaul this authorization strategy.  Subscribe and vote there so we can track it all in one place.

          Sam Gleske added a comment - Closing this issue in favor of  JENKINS-27844  to completely overhaul this authorization strategy.  Subscribe and vote there so we can track it all in one place.

            sag47 Sam Gleske
            baf Robert Ferris
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: