• Type: Bug
• Resolution: Fixed
• Priority: Critical
• Component/s: script-security-plugin, workflow-cps-plugin
• Labels:

  None
• Environment:

  Jenkins 2.3 from Docker Hub, Pipeline Plugin 2.0

[JENKINS-34973] RejectedAccessException thrown but no pending script approval added

Tobias Larscheid created issue - 2016-05-20 09:02

Tobias Larscheid made changes - 2016-05-20 09:02

Description

Original: When using {{new GetMethod(url)}} from {{import org.apache.commons.httpclient.HttpClient import org.apache.commons.httpclient.methods.GetMethod}} directly in a Workflow script pasted into the UI, everything works as expected. When the script is loaded with the file loader plugin during the Workflow script, the following error occurs: {{org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use new org.apache.commons.httpclient.methods.GetMethod java.lang.String}} No pending script approval is generated.

New: When using {{new GetMethod(url)}} from {{import org.apache.commons.httpclient.HttpClient}} {{import org.apache.commons.httpclient.methods.GetMethod}} directly in a Workflow script pasted into the UI, everything works as expected. When the script is loaded with the file loader plugin during the Workflow script, the following error occurs: {{org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use new org.apache.commons.httpclient.methods.GetMethod java.lang.String}} No pending script approval is generated.

Jesse Glick made changes - 2016-06-01 19:54

Summary

Original: Workflow scripts not permitted to use apache http client get method

New: RejectedAccessException thrown but no pending script approval added

Jesse Glick made changes - 2016-06-06 19:21

Epic Link

New: JENKINS-35391 [ 171184 ]

Marcus Philip made changes - 2016-06-16 09:52

Comment

[ I have same problem using groovy.json.JsonSlurper().parse(url). How am I supposed to do that? ]

R. Tyler Croy made changes - 2016-07-25 23:52

Workflow

Original: JNJira [ 171177 ]

New: JNJira + In-Review [ 184209 ]

Andrew Bayer made changes - 2016-08-26 21:49

Component/s

New: pipeline-general [ 21692 ]

Andrew Bayer made changes - 2016-08-26 21:54

Component/s

Original: workflow-plugin [ 18820 ]

Jesse Glick made changes - 2016-08-29 21:36

Component/s		New: workflow-cps-plugin [ 21713 ]
Component/s	Original: pipeline [ 21692 ]

Jesse Glick made changes - 2016-11-04 15:27

Component/s

New: script-security-plugin [ 18520 ]

Jesse Glick made changes - 2017-02-13 19:30

Link

New: This issue is duplicated by JENKINS-41571 [ JENKINS-41571 ]

Load more newer history items