Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-53364

github-oauth-plugin -Simpler 403 page

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Duplicate
    • Icon: Minor Minor
    • github-oauth-plugin
    • None

      When a GitHub user outside an authorized organization log in into Jenkins, his access is denied but he has still a view on the Jenkins web UI (with no rights).

      A simple 403 page without any Jenkins menu display would enhance the feeling of a strong "access denied".

      I make this request because this was a remark from an external security audit of our tools. The idea is to reduce the attack surface.

       

       

          [JENKINS-53364] github-oauth-plugin -Simpler 403 page

          There are no comments yet on this issue.

            sag47 Sam Gleske
            arthurc Arthur Clément
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: