Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-72268

Users missing permissions at the controller level

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • github-oauth-plugin
    • jenkins version 2.414.2.2
      github oauth plugin: 588.vf696a_350572a_, 0.39

      We use the GitHub Authentication plugin as the Security Realm and "Role-based matrix authorization strategy" for managing authorization (permissions). 

      We are having issues with the user permissions at the Controller level, and these permissions are not getting synced with the CJOC OC. The user has all the expected permissions (Groups/GitHub teams) at the CJOC OC level but not at the Controller level.

      As a workaround, we are adding individual devs one at a time, and that seems to work, but it would be a pain to add all of them one at a time. 

          [JENKINS-72268] Users missing permissions at the controller level

          mohitatsafe I would suggest you to reach out to the CloudBees support if you are using CJOC
          (https://support.cloudbees.com/hc/en-us/requests/new)

          Wadeck Follonier added a comment - mohitatsafe I would suggest you to reach out to the CloudBees support if you are using CJOC ( https://support.cloudbees.com/hc/en-us/requests/new )

          Mohit added a comment -

          Hi wfollonier, I raised this with CloudBees support, and they think this is a bug with the plugin that causes this issue when looking up group names with OC SSO. Sorry about the confusion! 

          Mohit added a comment - Hi wfollonier , I raised this with CloudBees support, and they think this is a bug with the plugin that causes this issue when looking up group names with OC SSO. Sorry about the confusion! 

          I am not sure this ticket will be sufficient for the plugin maintainer to understand your context. I will try to have a look tomorrow at your previous support request to see what was proposed to you.

          Wadeck Follonier added a comment - I am not sure this ticket will be sufficient for the plugin maintainer to understand your context. I will try to have a look tomorrow at your previous support request to see what was proposed to you.

          From my testing, this PR should correct the behavior you are seeing: https://github.com/jenkinsci/github-oauth-plugin/pull/256

          Wadeck Follonier added a comment - From my testing, this PR should correct the behavior you are seeing: https://github.com/jenkinsci/github-oauth-plugin/pull/256

          Mohit added a comment -

          This is great. Thank you for the quick fix!  

          Mohit added a comment - This is great. Thank you for the quick fix!  

          Basil Crow added a comment -

          Basil Crow added a comment - Reverted in https://github.com/jenkinsci/github-oauth-plugin/commit/e0c3480fcbd051668ad42a446d5eb7a944770fd7

          kutzi added a comment -

          I didn't find this issue when creating JENKINS-73060, but I believe that it's the same issue, right?

          kutzi added a comment - I didn't find this issue when creating JENKINS-73060 , but I believe that it's the same issue, right?

            wfollonier Wadeck Follonier
            mohitatsafe Mohit
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: