Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-42707

ReverseBuildTrigger can throw AccessDeniedException

    XMLWordPrintable

Details

    • Bug
    • Status: Resolved (View Workflow)
    • Major
    • Resolution: Fixed
    • core
    • Jenkins 2.32.3

    Description

      Noticed in a console logs of an upstream job:

      Notifying upstream projects of job completion 
FATAL: Please login to access job upstream 
org.acegisecurity.AccessDeniedException: Please login to access job upstream 
at jenkins.model.Jenkins.getItem(Jenkins.java:2724) 
at jenkins.model.Jenkins.getItem(Jenkins.java:324) 
at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830) 
at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849) 
at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116) 
at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89) 
at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146) 
at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247) 
at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681) 
at hudson.model.Build$BuildExecution.cleanUp(Build.java:200) 
at hudson.model.Run.execute(Run.java:1775) 
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) 
at hudson.model.ResourceController.execute(ResourceController.java:98) 
at hudson.model.Executor.run(Executor.java:404) 
Notifying upstream projects of job completion 
FATAL: Please login to access job <foldername> 
org.acegisecurity.AccessDeniedException: Please login to access job upstream 
at jenkins.model.Jenkins.getItem(Jenkins.java:2724) 
at jenkins.model.Jenkins.getItem(Jenkins.java:324) 
at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830) 
at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849) 
at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116) 
at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89) 
at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146) 
at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247) 
at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681) 
at hudson.model.Build$BuildExecution.cleanUp(Build.java:200) 
at hudson.model.Run.execute(Run.java:1775) 
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) 
at hudson.model.ResourceController.execute(ResourceController.java:98) 
at hudson.model.Executor.run(Executor.java:404)

      ReverseBuildTrigger.shouldTrigger should be impersonating SYSTEM.

      This seems to happen because the anonymous user has Overall/Read and Item/Discover permission. The workaround is to remove the Item/Discover permission for the anonymous user.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-42586 OldDataMonitor.referTo can throw AccessDeniedException

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-42556 PlaceholderTask.runForDisplay vulnerable to AccessDeniedException

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. JENKINS-63868 PlaceholderTask.getOwnerTask vulnerable to AccessDeniedException

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link CloudBees Internal OSS-2135

          Web Link core-PR#2846

          Activity

            Ascending order - Click to sort in descending order
            allan_burdajewicz Allan BURDAJEWICZ created issue -
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Field Original Value New Value
            Description Noticed in a console logs of an upstream job:

             

            ```

            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)

            ```

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.             		Noticed in a console logs of an upstream job:

             

            {code}

            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)

            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Description Noticed in a console logs of an upstream job:

             

            {code}

            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)

            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.             		Noticed in a console logs of an upstream job:

             

            {code}
            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Link This issue is related to JENKINS-42586 [ JENKINS-42586 ]
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Link This issue is related to JENKINS-42556 [ JENKINS-42556 ]
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Description Noticed in a console logs of an upstream job:

             

            {code}
            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.             		Noticed in a console logs of an upstream job:

            {code}
            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Description Noticed in a console logs of an upstream job:

            {code}
            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous__ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.             		Noticed in a console logs of an upstream job:

            {code}
            Notifying upstream projects of job completion
            FATAL: Please login to access job upstream 
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            Notifying upstream projects of job completion
            FATAL: Please login to access job <foldername>
            org.acegisecurity.AccessDeniedException: Please login to access job upstream 
            at jenkins.model.Jenkins.getItem(Jenkins.java:2724)
            at jenkins.model.Jenkins.getItem(Jenkins.java:324)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2830)
            at jenkins.model.Jenkins.getItemByFullName(Jenkins.java:2849)
            at jenkins.triggers.ReverseBuildTrigger.shouldTrigger(ReverseBuildTrigger.java:116)
            at jenkins.triggers.ReverseBuildTrigger.access$000(ReverseBuildTrigger.java:89)
            at jenkins.triggers.ReverseBuildTrigger$1.shouldTriggerBuild(ReverseBuildTrigger.java:146)
            at hudson.tasks.BuildTrigger.execute(BuildTrigger.java:247)
            at hudson.model.AbstractBuild$AbstractBuildExecution.cleanUp(AbstractBuild.java:681)
            at hudson.model.Build$BuildExecution.cleanUp(Build.java:200)
            at hudson.model.Run.execute(Run.java:1775)
            at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)
            at hudson.model.ResourceController.execute(ResourceController.java:98)
            at hudson.model.Executor.run(Executor.java:404)
            {code}

            [ReverseBuildTrigger.shouldTrigger|https://github.com/jenkinsci/jenkins/blob/jenkins-2.50/core/src/main/java/jenkins/triggers/ReverseBuildTrigger.java#L116] should be impersonating {{SYSTEM}}.

            This seems to happen because the _anonymous_ user has _Overall/Read_ and _Item/Discover_ permission. The workaround is to remove the _Item/Discover_ permission for the _anonymous_ user.
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Assignee Allan BURDAJEWICZ [ allan_burdajewicz ]
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Remote Link This issue links to "core-PR#2846 (Web Link)" [ 16201 ]
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            allan_burdajewicz Allan BURDAJEWICZ made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            jglick Jesse Glick made changes -
            Resolution Fixed [ 1 ]
            Status In Review [ 10005 ] Resolved [ 5 ]
            oleg_nenashev Oleg Nenashev made changes -
            Labels lts-candidate
            olivergondza Oliver Gondža made changes -
            Labels lts-candidate 2.46.3-fixed
            jamesdumay James Dumay made changes -
            Remote Link This issue links to "CloudBees Internal OSS-2135 (Web Link)" [ 18406 ]
            smasher Daniel Estermann made changes -
            Link This issue is related to JENKINS-63868 [ JENKINS-63868 ]

            People

              allan_burdajewicz Allan BURDAJEWICZ
              allan_burdajewicz Allan BURDAJEWICZ
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: