Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-54447

Everyone with limited permissions can read configs

    XMLWordPrintable

Details

    Description

      When using the plugin "config-file-provider", the configs files are readable by everyone with the right to create jobs.

      When the user create a job, at the moment of choosing a config file, he can click on "view selected file" and have a full RO access on this files...

      Attachments

        Activity

          Ascending order - Click to sort in descending order
          imod Dominik Bartholdi added a comment - - edited

          I don't think this is a bug but the intention - everyone having permission to create a job should also be able to see the config-files hi is able to use within his jobs. If you have files which should not be seen by everyone, then you should create folders and place the config-files within the scope of a folder where only allowed users have permission to see it.

          imod Dominik Bartholdi added a comment - - edited I don't think this is a bug but the intention - everyone having permission to create a job should also be able to see the config-files hi is able to use within his jobs. If you have files which should not be seen by everyone, then you should create folders and place the config-files within the scope of a folder where only allowed users have permission to see it.
          lunik Guillaume Lunik added a comment -

          Seems legit
          The issue can be closed
          Thanks

          lunik Guillaume Lunik added a comment - Seems legit The issue can be closed Thanks
          lunik Guillaume Lunik added a comment -

          intentional behavior

          lunik Guillaume Lunik added a comment - intentional behavior

          People

            domi Dominik Bartholdi
            lunik Guillaume Lunik
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: