• Type: Bug
• Resolution: Not A Defect
• Priority: Major
• Component/s: script-security-plugin
• Labels:

  None
• Environment:

  Master: Atomic CentOS
  Slave: Windows Server 2012 R2 x64

[JENKINS-43041] Cannot create a new instance of a pipeline shared library class

Stephen Drew created issue - 2017-03-22 18:15

Stephen Drew made changes - 2017-03-22 19:19

Description

Original: I have a class in a pipeline shared library (which is stored in a deployed Github repository): {code:java} package com.xxx class ArtifactoryPublisher implements Serializable { def script def host ArtifactoryPublisher(script, host) { this.script = script this.host = host } def push(feed, pattern = "*.nupkg") { def artifactory = Artifactory.server this.host def uploadSpec = """{ "files": [ { "pattern": "$pattern", "target": "$feed" } ] }""" def buildInfo = artifactory.upload(uploadSpec) artifactory.publishBuildInfo(buildInfo) } } {code} When I try to instantiate this in a Jenkinsfile: {code:java} def apub = new ArtifactoryPublisher('art01') {code} I get this: {noformat} org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified new com.xxx.ArtifactoryPublisher java.lang.String at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onNewInstance(SandboxInterceptor.java:126) at org.kohsuke.groovy.sandbox.impl.Checker$3.call(Checker.java:191) at org.kohsuke.groovy.sandbox.impl.Checker.checkedConstructor(Checker.java:188) at com.cloudbees.groovy.cps.sandbox.SandboxInvoker.constructorCall(SandboxInvoker.java:20) at WorkflowScript.run(WorkflowScript:78){noformat} However, it does not show up as a pending script approval.

New: I have a class in a pipeline shared library (which is stored in a deployed Github repository): {code:java} package com.xxx class ArtifactoryPublisher implements Serializable { def script def host ArtifactoryPublisher(script, host) { this.script = script this.host = host } def push(feed, pattern = "*.nupkg") { def artifactory = Artifactory.server this.host def uploadSpec = """{ "files": [ { "pattern": "$pattern", "target": "$feed" } ] }""" def buildInfo = artifactory.upload(uploadSpec) artifactory.publishBuildInfo(buildInfo) } } {code} When I try to instantiate this in a Jenkinsfile: {code:java} def apub = new ArtifactoryPublisher('art01') {code} I get this: {noformat} org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified new com.xxx.ArtifactoryPublisher java.lang.String at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onNewInstance(SandboxInterceptor.java:126) at org.kohsuke.groovy.sandbox.impl.Checker$3.call(Checker.java:191) at org.kohsuke.groovy.sandbox.impl.Checker.checkedConstructor(Checker.java:188) at com.cloudbees.groovy.cps.sandbox.SandboxInvoker.constructorCall(SandboxInvoker.java:20) at WorkflowScript.run(WorkflowScript:78){noformat} However, it does not show up as a pending script approval.   PS it is possible to create other objects from shared libraries, e.g. {code:java} def slack = new Slack(this, mySlack.team, mySlack.channel) {code}

Andrew Bayer made changes - 2017-03-23 01:47

Component/s

Original: pipeline [ 21692 ]

Jesse Glick made changes - 2017-06-05 14:20

Resolution		New: Not A Defect [ 7 ]
Status	Original: Open [ 1 ]	New: Resolved [ 5 ]