-
Improvement
-
Resolution: Fixed
-
Major
-
None
-
-
Pipeline - October, Pipeline - December
As a Jenkins administrator, I would like for developers to be able to configure jobs, but only have certain users able to build those jobs. Through various means like RBAC and controlled agents, I have given jobs in a certain folder the ability to access agents and secrets. While I trust developers to configure those jobs, I have business requirements to only allow certain users to build those jobs.
However, Jenkins allows users to Replay a build even if they don't have the Run/Replay or Job/Build permissions. This seems to due the fact that Run/Replay is implied by Job/Configure.
Put another way, Job/Build isn't implied by Job/Configure, so why does Job/Configure imply Run/Replay? Instead, it seems like Run/Replay should only be implied if a user has both Job/Build and Job/Configure.
- is related to
-
JENKINS-63080 Replay link is shown to users with push access to repo, but replay page shows no script editor
-
- Resolved
-
-
-
- Reopened
-
-
-
- Resolved
-
- links to
- mentioned in
-
Page Loading...
[JENKINS-47339] Add Rebuild action for users who can Build but not Replay (was: Users with only Job/Configure shouldn't be able to replay jobs)
| Rank | New: Ranked higher |
| Component/s | New: pipeline [ 21692 ] |
| Sprint | New: Pipeline - October [ 406 ] |
| Status | Original: Open [ 1 ] | New: In Progress [ 3 ] |
| Status | Original: In Progress [ 3 ] | New: In Review [ 10005 ] |
| Remote Link | New: This issue links to "workflow-cps PR #187 (Web Link)" [ 17997 ] |
| Remote Link | New: This issue links to "Blue Ocean PR #1536 (Web Link)" [ 17998 ] |
| Sprint | Original: Pipeline - October [ 406 ] | New: Pipeline - October, Pipeline - December [ 406, 446 ] |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: In Review [ 10005 ] | New: Resolved [ 5 ] |
| Remote Link | New: This issue links to "CloudBees Internal CD-200 (Web Link)" [ 18955 ] |