Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-70470

ScriptlerBuilder checks against Overall.RunScripts-Permission instead of Scriptler.RunScripts-Permission

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • scriptler-plugin
    • Jenkins 2.346.3, Scriptler 3.5, Maxtrix Authorization Strategy 3.1.5

      Non-Admin-Users can't configure jobs with scriptler-scripts although they have the permissions Scriptler.RunScripts and Scriptler.ConfigureScripts (verified using https://raw.githubusercontent.com/samrocketman/jenkins-script-console-scripts/main/audit-user-permissions.groovy in the console). The error message is: builderId: As the given builder does not have ID, it must be equals to one of the existing builder that does not have ID. Which should not even be checked when the user has the correct permissions.

      But the method checkPermission in ScriptlerBuilder checks with "if(Jenkins.get().hasPermission(Jenkins.RUN_SCRIPTS)){" against the permission Overall.RunScripts and therefore denies our users to configure the job with a scriptler script.

      Could you please verify if this diagnosis is correct and correct the plugin as neccessary?

            Unassigned Unassigned
            schaarda Daniel Schaarschmidt
            Votes:
            2 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: