Details
-
Type:
Bug
-
Status: Resolved (View Workflow)
-
Priority:
Critical
-
Resolution: Not A Defect
-
Component/s: build-user-vars-plugin, naginator-plugin
-
Labels:None
-
Similar Issues:
Description
When pressing Re-try after failed build, Naginator plugin is using user credentials of previous failed build. Username can belong to another user. This feature makes it possible to bypass the user authorization rules. Could this plug-in feature to change? It would be better to use current user (who is pressing Re-try button) credentials in Re-try feature by default (for example having global config checkbox settings for this).
Attachments
Activity
Would it be possible to add configuration setting (checkbox) in Jenkin global configuration where it is possible to select which user is used in replay (default settings for this): Current user or that previous user ?
Aleksi Grönlund
added a comment - Would it be possible to add configuration setting (checkbox) in Jenkin global configuration where it is possible to select which user is used in replay (default settings for this): Current user or that previous user ? No, I don't plan for that for now.
Please let me know why that feature is useful.
Users can trigger a new build
if they need a build run with their own ID, can't they?
Let me know why you want to use the retrying feature.
Talking about "bypassing the user authorization rules", it might make sense to introduce "Don't let user manually re-trigger this job" as a global configuration.
ikedam
added a comment - No, I don't plan for that for now.
Please let me know why that feature is useful.
Users can trigger a new build
if they need a build run with their own ID, can't they?
Let me know why you want to use the retrying feature.
Talking about "bypassing the user authorization rules", it might make sense to introduce "Don't let user manually re-trigger this job" as a global configuration. It would be good to make sure somehow (force this for all users in global configuration ?) that there is no possibility for user to re-trigger failed run with another username. This is useful when item contains some authorization rules based on BUILD_USER_ID value.
Aleksi Grönlund
added a comment - It would be good to make sure somehow (force this for all users in global configuration ?) that there is no possibility for user to re-trigger failed run with another username. This is useful when item contains some authorization rules based on BUILD_USER_ID value. 
I can't get your actual problem.
In some situations users may want fo replay the build including the value of BUILD_USER_ID.
If it causes security issues, users can disable the replay feature for the project by checking "Don't let user manually re-trigger this job". (In that case, automatic retriggering of failed builds is enabled).
Let me know more details about your problem.