just add what we have tested:

1. granted all permissions except administrator to user, the shelve project button is missing.
2. change the authorisation to matrix based, the problem is still appeared.

rogerwang I reproduced the issue, it seems the check for the delete permission is not correct. I'll work on a fix as soon as possible.

In the meantime, I confirm only the admin rights allows to shelve/unshelve.

This doesn't seem like a regression as the guilty code has been here for a long time.

Hi Pierre,

For some reasons, it accidentally assign the case to me, so I assigned it back to you. 

And just wondering anything I could do to speed up the crucial repairing task, as the Shelve Project feature is kind of essential requirement from our development team and we have to continue use the very old Jenkins until it is fixed.

Thank you very much for your help.

Roger

rogerwang I had a quick look, the fix in itself is quite simple but I see two issues:

• I'm not sure how it could work in the past, could you please send me the Jenkins Core version + Shelve Plugin version that you worked for you so that I can dig deeper?
• As I was saying, the fix is quite simple, but it would introduce an issue because of how the plugin is designed. It is due to the fact that anybody with the create permission on the root of Jenkins can see all the shelved projects. But somebody with the create permission on the root of Jenkins does not necessarily have the rights on a subfolder. Here is a simple example showing my case:

User A has the create permission on root, but cannot see content of folder B. Somebody shelves a job in B, B/job. User A can browse the shelved jobs (because of the create permission on root), therefore he can see the B/job which he is not supposed to see.

From my point of view, allowing users with the delete permission to shelve projects is ok, but allowing people with the create permission to see all the shelved project is not.

This means I can make a quick fix, so that users with the delete permission have the rights to shelve. But only administrators will have the rights to unshelve.

Hi Pierre,

That is great news. I am still waiting our development's opinion for your suggestion. But, in my perspective, that should solve our problems for now if we can't have the permanent solution.

Besides that, the current Jenkins is v1.590 and Shelve Project plugin is v1.5.

Thank you for your help!

Cheers,

Roger