Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-47661

Preserve submitter in input step while replay pipeline.

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Not A Defect
    • Labels:
    • Environment:
      Groovy Version: 2.4.12 JVM: 1.8.0_152 Vendor: Oracle Corporation OS: Mac OS X
      Jenkins 2.73.2
    • Similar Issues:

      Description

      Submitter option can be modified in the replay pipeline.

      Since submitter contains user IDs and/or external group names of person or people permitted to respond to the input, unauthorized folks can overwrite the pipeline functionality by using the replay feature.

        Attachments

          Activity

          sheeeng Leonard Lee created issue -
          abayer Andrew Bayer made changes -
          Field Original Value New Value
          Component/s pipeline-input-step-plugin [ 21708 ]
          Component/s pipeline [ 21692 ]
          jglick Jesse Glick made changes -
          Labels pipeline, security security
          jglick Jesse Glick made changes -
          Resolution Not A Defect [ 7 ]
          Status Open [ 1 ] Resolved [ 5 ]

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            sheeeng Leonard Lee
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: