Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-36525

HTTP403 loading script.js on login page when anonymous doesn't have Overall/Read

XMLWordPrintable

      When being anonymous on an instance that is secured, if Overall/Read hasn't been granted to Anonymous, then retrieving the script.js from the plugin will issue a 403.

      Request

      GET /static/331cd866/plugin/form-element-path/script.js

      Response

      Authentication required
<!--
You are authenticated as: anonymous
Groups that you are in:
  
Permission you need to have (but didn't): hudson.model.Hudson.Read
 ... which is implied by: hudson.security.Permission.GenericRead
 ... which is implied by: hudson.model.Hudson.Administer
-->

      This prevents elements from the login page from being properly decorated.

            vlatombe Vincent Latombe
            vlatombe Vincent Latombe
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: