Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-4740

404 when not logged in when clicking link in hudson-e-mail

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not A Defect
    • Icon: Major Major
    • core
    • None
    • Platform: All, OS: All

      When a user is not logged into hudson gui and clicks a link in a hudson-email like:
      See <http://server/hudson/job/jobname/176/>

      He gets a 404 error:

      HTTP Status 404 -

      type Status report

      message

      description The requested resource () is not available.
      Apache Tomcat/6.0.18

        1. 4740.patch
          9 kB
          btosabre
        2. screenshot.jpg
          17 kB
          williamleara

          [JENKINS-4740] 404 when not logged in when clicking link in hudson-e-mail

          2sober created issue -

          2sober added a comment -

          Expected: Show hudson login page.

          2sober added a comment - Expected: Show hudson login page.

          bbohl added a comment -

          I think this should be classified as a bug and not a feature request.

          bbohl added a comment - I think this should be classified as a bug and not a feature request.
          williamleara made changes -
          Attachment New: screenshot.jpg [ 19562 ]

          btosabre added a comment -

          This is definitively not a feature request. In most cases* Hudson redirects to login page as expected, but in some cases it doesn't -> and this is a bug.

          • - by case I mean security settings, try for example by giving anonymous user READ access to Hudson and to individula jobs if you use Project Matrix Authorization Strategy -> it should work then.

          In our case the problem occurs when:

          • we use Project Matrix Authorization Strategy,
          • anonymous user has "general" read access (hudson.model.Hudson.READ), but
          • anonymous user doesn't have access rights to the job.

          I am currently working on preparing a patch for this particular problem. I'll attach it later today.

          btosabre added a comment - This is definitively not a feature request. In most cases* Hudson redirects to login page as expected, but in some cases it doesn't -> and this is a bug. - by case I mean security settings, try for example by giving anonymous user READ access to Hudson and to individula jobs if you use Project Matrix Authorization Strategy -> it should work then. In our case the problem occurs when: we use Project Matrix Authorization Strategy, anonymous user has "general" read access (hudson.model.Hudson.READ), but anonymous user doesn't have access rights to the job. I am currently working on preparing a patch for this particular problem. I'll attach it later today.

          btosabre added a comment -

          Patch to SVN revision 37296. Mainly adds tests. The fix consists of two small changes in model.hudson.Hudson class.

          btosabre added a comment - Patch to SVN revision 37296. Mainly adds tests. The fix consists of two small changes in model.hudson.Hudson class.
          btosabre made changes -
          Attachment New: 4740.patch [ 20063 ]

          btosabre added a comment -

          BTW - as a work around you may remove READ permission for user anonymous in system configuration matrix. Of course this will forbid not logged users to access Hudson.

          btosabre added a comment - BTW - as a work around you may remove READ permission for user anonymous in system configuration matrix. Of course this will forbid not logged users to access Hudson.
          OHTAKE Tomohiro made changes -
          Link New: This issue is duplicated by JENKINS-9867 [ JENKINS-9867 ]
          OHTAKE Tomohiro made changes -
          Link New: This issue is related to JENKINS-8214 [ JENKINS-8214 ]

            Unassigned Unassigned
            2sober 2sober
            Votes:
            16 Vote for this issue
            Watchers:
            18 Start watching this issue

              Created:
              Updated:
              Resolved: