Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-63051

Child teams should inherit rights granted to parent group

    • Icon: Improvement Improvement
    • Resolution: Unresolved
    • Icon: Minor Minor
    • github-oauth-plugin
    • None

      On GitHub (Enterprise), our organization has a number of teams. Some teams include both members and teams.

      Suppose we have member personX, who is part of team teamA, and member personY.

      Both teamA and personY are to receive access to start builds on Jenkins so they are added to the builders team as teamA and personY.

      Build permission is granted to the organization*builders entity.

      PersonY can start builds, but personX cannot, despite being recognized by GitHub Enterprise as inheriting access to the builders team.

      Requested improvement would be to provide child teams the expected inherited access.

          [JENKINS-63051] Child teams should inherit rights granted to parent group

          If it helps, <jenkins_url>/whoAmI isn't returning parent teams, only the teams a user is explicitly tied to. Looking at the github api, it appears parents are described as keys within each linked users team, e.g.

          curl https://api.github.com/user/teams --> [\{name: child-team, parent: {name: parent-team}}]

          Dharma Indurthy added a comment - If it helps, <jenkins_url>/whoAmI isn't returning parent teams, only the teams a user is explicitly tied to. Looking at the github api, it appears parents are described as keys within each linked users team, e.g. curl https://api.github.com/user/teams  --> [\{name: child-team, parent: {name: parent-team}}]

          Justin Wood added a comment -

          Looks like in the Java GitHub API library this plugin uses getting at the parent teams is not exposed readily.  I filed https://github.com/hub4j/github-api/issues/1543 upstream there to see if they'll add that support

          Justin Wood added a comment - Looks like in the Java GitHub API library this plugin uses getting at the parent teams is not exposed readily.  I filed https://github.com/hub4j/github-api/issues/1543 upstream there to see if they'll add that support

            sag47 Sam Gleske
            cloverbt Clover BT
            Votes:
            3 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: