Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-62478

users unable to configure multibranch jobs without global Job/Build permission

      steps to recreate:

      1. create a folder
      2. enable folder based permissions
      3. add a user and grant all the available permissions
      4. create a multibranch job in the folder
      5. in branch source, choose gitlab.
      6. user gets the following error message between the "projects" section and the "Behaviours" section:
        ------------------------------
        Access Denied
        <username> is missing the Job/Build permission
        --------------------------------

       

       

      workaround:

      granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

       

      it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.

          [JENKINS-62478] users unable to configure multibranch jobs without global Job/Build permission

          Amit Dar created issue -
          Amit Dar made changes -
          Attachment New: job-configuration-error.jpg [ 51323 ]
          Attachment New: folder-level-configuration.jpg [ 51324 ]
          Issue Type Original: Improvement [ 4 ] New: Bug [ 1 ]
          Amit Dar made changes -
          Attachment New: jenkins-log.txt [ 51325 ]
          Amit Dar made changes -
          Environment Original: jenkins server 2.222.3
          folders plugin 6.12
          matrix authorization plugin 2.6.1
          matrix project plugin 1.14
          gitlab branch source plugin 1.5.1
          New: gitlab server 12.10.0-ee

          jenkins server 2.222.3
          folders plugin 6.12
          matrix authorization plugin 2.6.1
          matrix project plugin 1.14
          gitlab branch source plugin 1.5.1



          Amit Dar made changes -
          Description Original: steps to recreate:
           # create a folder
           # enable folder based permissions
           # add a user and grant all the available permissions
           # create a multibranch job in the folder
           # in branch source, choose gitlab.
           # user gets the following error message between the "projects" section and the "Behaviours" section:
          ------------------------------
          Access Denied
          <username> is missing the Job/Build permission
          --------------------------------



           

           

          workaround:

          granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

           

          it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.

          i'll provide the line from the log shortly.
          New: steps to recreate:
           # create a folder
           # enable folder based permissions
           # add a user and grant all the available permissions
           # create a multibranch job in the folder
           # in branch source, choose gitlab.
           # user gets the following error message between the "projects" section and the "Behaviours" section:
           ------------------------------
           Access Denied
           <username> is missing the Job/Build permission
           --------------------------------

           

           

          workaround:

          granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

           

          it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.
          Amit Dar made changes -
          Environment Original: gitlab server 12.10.0-ee

          jenkins server 2.222.3
          folders plugin 6.12
          matrix authorization plugin 2.6.1
          matrix project plugin 1.14
          gitlab branch source plugin 1.5.1



          New: gitlab server 12.10.0-ee

          jenkins server 2.222.3
          folders plugin 6.12
          matrix authorization plugin 2.6.1
          matrix project plugin 1.14
          gitlab branch source plugin 1.5.1
          multiple scms plugin 0.6



          Amit Dar made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Amit Dar made changes -
          Status Original: In Progress [ 3 ] New: Open [ 1 ]
          Amit Dar made changes -
          Summary Original: users unable to create multibranch jobs without global Job/Build permission New: users unable to configure multibranch jobs without global Job/Build permission
          Amit Dar made changes -
          Attachment New: creating a multibranch pipeline as the user.jpg [ 51657 ]
          Attachment New: creating the multi branch pipeline as the user.jpg [ 51658 ]
          Attachment New: gitlab server definition.jpg [ 51659 ]
          Attachment New: jenkins root folder.jpg [ 51660 ]
          Attachment New: jenkins security definition.jpg [ 51661 ]
          Attachment New: jenkins user definition.jpg [ 51662 ]
          Attachment New: some_folder configuration.jpg [ 51663 ]
          Attachment New: uesr receive error message when creating gitlab project.jpg [ 51664 ]
          Amit Dar made changes -
          Attachment New: jenkins-plugins-installed.txt [ 51665 ]

            mymarche Mikhail Marchenko
            amidar Amit Dar
            Votes:
            2 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: