-
New Feature
-
Resolution: Fixed
-
Minor
-
None
Jenkins.MANAGE permission allows accessing "System Information"
Thread dumps and environment variables should still only be shown to a user with Jenkins.ADMINISTER because they can contain sensitive data. One common example is running Jenkins in a container, where the common way of providing secrets is by using environment variables.
[JENKINS-61456] Allow Jenkins.MANAGE user to access "System Information"
Epic Link | New: JENKINS-61454 [ 205133 ] |
Description |
Original:
Jenkins.MANAGE permission allows accessing "System Information" Thread dumps and environment variables should still only be shown to a user with Jenkins.ADMINISTER |
New:
Jenkins.MANAGE permission allows accessing "System Information" Thread dumps and environment variables should still only be shown to a user with Jenkins.ADMINISTER because they can contain sensitive data. One common example is running Jenkins in a container, where the common way of providing secrets is by using environment variables. |
Status | Original: Open [ 1 ] | New: In Progress [ 3 ] |
Assignee | New: Esther Álvarez Feijoo [ ealvarez ] |
Released As | New: Jenkins 2.227 | |
Resolution | New: Fixed [ 1 ] | |
Status | Original: In Progress [ 3 ] | New: Closed [ 6 ] |