Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-62478

users unable to configure multibranch jobs without global Job/Build permission

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      steps to recreate:

      1. create a folder
      2. enable folder based permissions
      3. add a user and grant all the available permissions
      4. create a multibranch job in the folder
      5. in branch source, choose gitlab.
      6. user gets the following error message between the "projects" section and the "Behaviours" section:
        ------------------------------
        Access Denied
        <username> is missing the Job/Build permission
        --------------------------------

       

       

      workaround:

      granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

       

      it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.

        Attachments

          Activity

          Hide
          amidar Amit Dar added a comment -

          I have just reconstructed this error on my laptop, at home, using latest docker image. 

          attached are all the images and the plugins list I have installed (most important are the folders plugin, project matrix plugin, gitlab branch source and multibranch pipeline plugins.

          I have a user called admin, which has the admin permission, and another user, called "user" with overall/read permission.

          I created a folder called "some_folder" and granted the user called user all available permissions.

          I defined a gitlab server (pointing to the real gitlab server, but that doesn't matter, all that matters is that at least one server will be defined).

          when the user called "user" is trying to create a multibranch pipeline with gitlab project as the branch source, the problem appears.

           

          please let me know if you still need more information. jenkins-plugins-installed.txt

           

          Show
          amidar Amit Dar added a comment - I have just reconstructed this error on my laptop, at home, using latest docker image.  attached are all the images and the plugins list I have installed (most important are the folders plugin, project matrix plugin, gitlab branch source and multibranch pipeline plugins. I have a user called admin, which has the admin permission, and another user, called "user" with overall/read permission. I created a folder called "some_folder" and granted the user called user all available permissions. I defined a gitlab server (pointing to the real gitlab server, but that doesn't matter, all that matters is that at least one server will be defined). when the user called "user" is trying to create a multibranch pipeline with gitlab project as the branch source, the problem appears.   please let me know if you still need more information. jenkins-plugins-installed.txt  
          Hide
          amidar Amit Dar added a comment -

          while trying to create the multibranch pipeline, the following message appeared in the log console:

          o.e.j.s.h.ContextHandler$Context#log: While serving http://localhost:8080/job/some_folder/job/multibranch_pipeline/descriptorByName/io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource/fillProjectPathItems: hudson.security.AccessDeniedException2: user is missing the Job/Build permission

          Show
          amidar Amit Dar added a comment - while trying to create the multibranch pipeline, the following message appeared in the log console: o.e.j.s.h.ContextHandler$Context#log: While serving http://localhost:8080/job/some_folder/job/multibranch_pipeline/descriptorByName/io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource/fillProjectPathItems: hudson.security.AccessDeniedException2: user is missing the Job/Build permission
          Hide
          amidar Amit Dar added a comment -

          Rick, please take a look at this issue, it includes simple reconstruction instructions, and is causing us a lot of pain...

          Show
          amidar Amit Dar added a comment - Rick , please take a look at this issue, it includes simple reconstruction instructions, and is causing us a lot of pain...
          Hide
          saku MARY Olivier added a comment -

          Hi there,

           

          Same problem for us. Any solution before fix ? I can't "open bar" for all users just for that..........

           

           

          Show
          saku MARY Olivier added a comment - Hi there,   Same problem for us. Any solution before fix ? I can't "open bar" for all users just for that..........    
          Hide
          seb_bdx Sébastien added a comment -

          Hi,

          Same problem. Does anyone have a solution?

          Thanks.

          Show
          seb_bdx Sébastien added a comment - Hi, Same problem. Does anyone have a solution? Thanks.

            People

            Assignee:
            surenpi Rick
            Reporter:
            amidar Amit Dar
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

              Dates

              Created:
              Updated: