Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-42577

Jenkins.version saved only from doConfigSubmit

    XMLWordPrintable

Details

    Description

      2.32.2. Set up Jenkins from the setup wizard. Install matrix-auth and configure admin to have everything but anonymous to have only discover, and Save. You will see config.xml as expected:

        <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
    <permission>hudson.model.Hudson.Administer:admin</permission>
    <permission>hudson.model.Hudson.Read:anonymous</permission>
    <permission>hudson.model.Item.Discover:anonymous</permission>
  </authorizationStrategy>

      Yet after restart if you revisit /configureSecurity, in the UI and reality, anonymous is granted Item.READ.

      Seems that the JENKINS-2324 workaround is incorrectly being applied, since Jenkins.isUpgradedFromBefore is broken, since version on config.xml is still 1.0!

      Workaround is to go to /configure and Save.

      Attachments

        Issue Links

          blocks

          Patch - JENKINS-2324 Feature - Set read permission by project for project-based security

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          depends on

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-47139 Initial Access Regression in 2.80?

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-17081 Permission "hudson.model.Item.Read:anonymous" coming from nowhere

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-63868 PlaceholderTask.getOwnerTask vulnerable to AccessDeniedException

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-42556 PlaceholderTask.runForDisplay vulnerable to AccessDeniedException

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link https://github.com/jenkinsci/jenkins/pull/3010

          Activity

            Ascending order - Click to sort in descending order
            jglick Jesse Glick created issue -
            jglick Jesse Glick made changes -
            Field Original Value New Value
            Link This issue relates to JENKINS-42556 [ JENKINS-42556 ]
            jglick Jesse Glick made changes -
            Link This issue blocks JENKINS-2324 [ JENKINS-2324 ]
            jglick Jesse Glick made changes -
            Labels setup
            oleg_nenashev Oleg Nenashev made changes -
            Labels setup newbie-friendly setup
            liketic Li Ke made changes -
            Assignee Li Ke [ liketic ]
            liketic Li Ke made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            danielbeck Daniel Beck made changes -
            Link This issue is duplicated by JENKINS-17081 [ JENKINS-17081 ]
            oleg_nenashev Oleg Nenashev made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            oleg_nenashev Oleg Nenashev made changes -
            Remote Link This issue links to "https://github.com/jenkinsci/jenkins/pull/3010 (Web Link)" [ 17754 ]
            danielbeck Daniel Beck made changes -
            Resolution Fixed [ 1 ]
            Status In Review [ 10005 ] Resolved [ 5 ]
            jglick Jesse Glick made changes -
            Link This issue depends on JENKINS-47139 [ JENKINS-47139 ]
            smasher Daniel Estermann made changes -
            Link This issue is related to JENKINS-63868 [ JENKINS-63868 ]

            People

              liketic Li Ke
              jglick Jesse Glick
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: