Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-47661

Preserve submitter in input step while replay pipeline.

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Not A Defect
    • Icon: Major Major
    • pipeline-input-step-plugin
    • Groovy Version: 2.4.12 JVM: 1.8.0_152 Vendor: Oracle Corporation OS: Mac OS X
      Jenkins 2.73.2

      Submitter option can be modified in the replay pipeline.

      Since submitter contains user IDs and/or external group names of person or people permitted to respond to the input, unauthorized folks can overwrite the pipeline functionality by using the replay feature.

          [JENKINS-47661] Preserve submitter in input step while replay pipeline.

          Leonard Lee added a comment -

          See also JENKINS-39874.

          Leonard Lee added a comment - See also JENKINS-39874 .

          Jesse Glick added a comment -

          Do not let untrusted people replay it then.

          Jesse Glick added a comment - Do not let untrusted people replay it then.

            Unassigned Unassigned
            sheeeng Leonard Lee
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: