Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-58344

Add support of project-level credentials management

    • Icon: New Feature New Feature
    • Resolution: Unresolved
    • Icon: Major Major
    • credentials-plugin
    • Jenkins ver. 2.176.1
      Role Strategy Plugin ver. 2.12
      Credentials Plugin ver. 2.2.0

      User without the global create credentials permission can't create credentials for a project for which they do have the create credentials permissions. 

      Configuration

      • Role1 has global create, delete, manage domains, update and view credentials permissions
      • Role2 has project create, delete, update and view credentials permissions
      • Role2 has global view credentials permission

      Issue

      Users with only Role2 can't create credentials for the job. 
      The add button is greyed out and the add credentials options doesn't show in the side menu.

      Users who also have **Role1 can create global and job credentials.
      Users with only Role2 should be able to manage credentials for the job without the need of the global permission.

       

          [JENKINS-58344] Add support of project-level credentials management

          Hello everyone,

          we currently have the same issue in our company. Did you find a workaround for this in the meantime rickclephas? Is there an estimated time when this bug will be fixed oleg_nenashev?

          Thanks for your help. 

          Best regards

          Chris

          Christoph Papke added a comment - Hello everyone, we currently have the same issue in our company. Did you find a workaround for this in the meantime rickclephas ? Is there an estimated time when this bug will be fixed oleg_nenashev ? Thanks for your help.  Best regards Chris

          Oleg Nenashev added a comment -

          Sorry, I missed the notification and did not triage this issue. I doubt it is a bug, there is no "project level credentials permissions" in Credentials Plugin. Role Strategy just does not know whether there could be ones, and hence it offers the entire category.

           

          I will convert it to a feature request to credentials plugin. There is just no feature which is expected here 

           

          Oleg Nenashev added a comment - Sorry, I missed the notification and did not triage this issue. I doubt it is a bug, there is no "project level credentials permissions" in Credentials Plugin. Role Strategy just does not know whether there could be ones, and hence it offers the entire category.   I will convert it to a feature request to credentials plugin. There is just no feature which is expected here   

          Oleg Nenashev added a comment -

          What can I do is to update Role Strategy to prevent confusion. If you feel it would help, please create a ticket

          Oleg Nenashev added a comment - What can I do is to update Role Strategy to prevent confusion. If you feel it would help, please create a ticket

          Rick Clephas added a comment -

          chrisipa no unfortunately I haven't found a workaround besides the obvious:

          • Giving the users Role1
          • Asking users with Role1 to manage the credentials

           

          Rick Clephas added a comment - chrisipa no unfortunately I haven't found a workaround besides the obvious: Giving the users Role1 Asking users with Role1 to manage the credentials  

            Unassigned Unassigned
            rickclephas Rick Clephas
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: