Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-62478

users unable to configure multibranch jobs without global Job/Build permission

    XMLWordPrintable

Details

    Description

      steps to recreate:

      1. create a folder
      2. enable folder based permissions
      3. add a user and grant all the available permissions
      4. create a multibranch job in the folder
      5. in branch source, choose gitlab.
      6. user gets the following error message between the "projects" section and the "Behaviours" section:
        ------------------------------
        Access Denied
        <username> is missing the Job/Build permission
        --------------------------------

       

       

      workaround:

      granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

       

      it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.

      Attachments

        Issue Links

          Activity

            amidar Amit Dar created issue -
            amidar Amit Dar made changes -
            Field Original Value New Value
            Attachment job-configuration-error.jpg [ 51323 ]
            Attachment folder-level-configuration.jpg [ 51324 ]
            Issue Type Improvement [ 4 ] Bug [ 1 ]
            amidar Amit Dar made changes -
            Attachment jenkins-log.txt [ 51325 ]
            amidar Amit Dar made changes -
            Environment jenkins server 2.222.3
            folders plugin 6.12
            matrix authorization plugin 2.6.1
            matrix project plugin 1.14
            gitlab branch source plugin 1.5.1
            gitlab server 12.10.0-ee

            jenkins server 2.222.3
            folders plugin 6.12
            matrix authorization plugin 2.6.1
            matrix project plugin 1.14
            gitlab branch source plugin 1.5.1



            amidar Amit Dar made changes -
            Description steps to recreate:
             # create a folder
             # enable folder based permissions
             # add a user and grant all the available permissions
             # create a multibranch job in the folder
             # in branch source, choose gitlab.
             # user gets the following error message between the "projects" section and the "Behaviours" section:
            ------------------------------
            Access Denied
            <username> is missing the Job/Build permission
            --------------------------------



             

             

            workaround:

            granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

             

            it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.

            i'll provide the line from the log shortly.
            steps to recreate:
             # create a folder
             # enable folder based permissions
             # add a user and grant all the available permissions
             # create a multibranch job in the folder
             # in branch source, choose gitlab.
             # user gets the following error message between the "projects" section and the "Behaviours" section:
             ------------------------------
             Access Denied
             <username> is missing the Job/Build permission
             --------------------------------

             

             

            workaround:

            granting the user the Job/Build permission in "Configure Global Security " solves the problem, but this is major breach in security.

             

            it appears as if the plugin doesn't take into account the permissions granted to the user at the folder level.
            amidar Amit Dar made changes -
            Environment gitlab server 12.10.0-ee

            jenkins server 2.222.3
            folders plugin 6.12
            matrix authorization plugin 2.6.1
            matrix project plugin 1.14
            gitlab branch source plugin 1.5.1



            gitlab server 12.10.0-ee

            jenkins server 2.222.3
            folders plugin 6.12
            matrix authorization plugin 2.6.1
            matrix project plugin 1.14
            gitlab branch source plugin 1.5.1
            multiple scms plugin 0.6



            amidar Amit Dar made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            amidar Amit Dar made changes -
            Status In Progress [ 3 ] Open [ 1 ]
            amidar Amit Dar made changes -
            Summary users unable to create multibranch jobs without global Job/Build permission users unable to configure multibranch jobs without global Job/Build permission
            amidar Amit Dar made changes -
            amidar Amit Dar made changes -
            Attachment jenkins-plugins-installed.txt [ 51665 ]
            amidar Amit Dar made changes -
            Attachment folder-level-configuration.jpg [ 51324 ]
            amidar Amit Dar made changes -
            Attachment jenkins-log.txt [ 51325 ]
            amidar Amit Dar made changes -
            Attachment job-configuration-error.jpg [ 51323 ]
            amidar Amit Dar made changes -
            Environment gitlab server 12.10.0-ee

            jenkins server 2.222.3
            folders plugin 6.12
            matrix authorization plugin 2.6.1
            matrix project plugin 1.14
            gitlab branch source plugin 1.5.1
            multiple scms plugin 0.6



            gitlab server (www.gitlab.com)

            jenkins docker official image 2.222.4

            plugins and configuration attached as files.
            amidar Amit Dar made changes -
            Assignee Parichay Barpanda [ baymac ] Rick [ surenpi ]
            amidar Amit Dar made changes -
            Environment gitlab server (www.gitlab.com)

            jenkins docker official image 2.222.4

            plugins and configuration attached as files.
            gitlab server (www.gitlab.com)

            jenkins docker official image 2.222.4 (occurs in 2.163.1 as well)

            plugins and configuration attached as files.
            amidar Amit Dar made changes -
            Environment gitlab server (www.gitlab.com)

            jenkins docker official image 2.222.4 (occurs in 2.163.1 as well)

            plugins and configuration attached as files.
            gitlab server (www.gitlab.com)

            jenkins docker official image 2.222.4 (occurs in 2.263.1 as well)

            plugins and configuration attached as files.
            mymarche Mikhail Marchenko made changes -
            Remote Link This issue links to "PR-156 (Web Link)" [ 26859 ]
            mymarche Mikhail Marchenko made changes -
            Attachment gitlab-branch-source.hpi [ 55363 ]
            mymarche Mikhail Marchenko made changes -
            Released As https://github.com/jenkinsci/gitlab-branch-source-plugin/releases/tag/625.v85cf3a_400cfe
            Assignee Rick [ surenpi ] Mikhail Marchenko [ mymarche ]
            Resolution Fixed [ 1 ]
            Status Open [ 1 ] Resolved [ 5 ]

            People

              mymarche Mikhail Marchenko
              amidar Amit Dar
              Votes:
              2 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: