Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-72268

Users missing permissions at the controller level

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • github-oauth-plugin
    • jenkins version 2.414.2.2
      github oauth plugin: 588.vf696a_350572a_, 0.39

      We use the GitHub Authentication plugin as the Security Realm and "Role-based matrix authorization strategy" for managing authorization (permissions). 

      We are having issues with the user permissions at the Controller level, and these permissions are not getting synced with the CJOC OC. The user has all the expected permissions (Groups/GitHub teams) at the CJOC OC level but not at the Controller level.

      As a workaround, we are adding individual devs one at a time, and that seems to work, but it would be a pain to add all of them one at a time. 

          [JENKINS-72268] Users missing permissions at the controller level

          Mohit created issue -

          Wadeck Follonier added a comment -

          mohitatsafe I would suggest you to reach out to the CloudBees support if you are using CJOC
          (https://support.cloudbees.com/hc/en-us/requests/new)

          Wadeck Follonier added a comment - mohitatsafe I would suggest you to reach out to the CloudBees support if you are using CJOC ( https://support.cloudbees.com/hc/en-us/requests/new )

          Mohit added a comment -

          Hi wfollonier, I raised this with CloudBees support, and they think this is a bug with the plugin that causes this issue when looking up group names with OC SSO. Sorry about the confusion! 

          Mohit added a comment - Hi wfollonier , I raised this with CloudBees support, and they think this is a bug with the plugin that causes this issue when looking up group names with OC SSO. Sorry about the confusion! 

          Wadeck Follonier added a comment -

          I am not sure this ticket will be sufficient for the plugin maintainer to understand your context. I will try to have a look tomorrow at your previous support request to see what was proposed to you.

          Wadeck Follonier added a comment - I am not sure this ticket will be sufficient for the plugin maintainer to understand your context. I will try to have a look tomorrow at your previous support request to see what was proposed to you.

          Wadeck Follonier added a comment -

          From my testing, this PR should correct the behavior you are seeing: https://github.com/jenkinsci/github-oauth-plugin/pull/256

          Wadeck Follonier added a comment - From my testing, this PR should correct the behavior you are seeing: https://github.com/jenkinsci/github-oauth-plugin/pull/256
          Wadeck Follonier made changes -
          Assignee New: Wadeck Follonier [ wfollonier ]
          Wadeck Follonier made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Wadeck Follonier made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Mohit made changes -
          Description Original: We use the GitHub Authentication plugin as the Security Realm and "Role-based matrix authorization strategy" for managing authorization (permissions). 

          We are having issues with the user permissions at the Controller level, and these permissions are not getting synced with the CJOC. The user has all the expected permissions (Groups/GitHub teams) at the CJOC level but not at the Controller level.

          As a workaround, we are adding individual devs one at a time, and that seems to work, but it would be a pain to add all of them one at a time.            		New: We use the GitHub Authentication plugin as the Security Realm and "Role-based matrix authorization strategy" for managing authorization (permissions). 

          We are having issues with the user permissions at the Controller level, and these permissions are not getting synced with the -CJOC- OC. The user has all the expected permissions (Groups/GitHub teams) at the -CJOC- OC level but not at the Controller level.

          As a workaround, we are adding individual devs one at a time, and that seems to work, but it would be a pain to add all of them one at a time. 

          Mohit added a comment -

          This is great. Thank you for the quick fix!  

          Mohit added a comment - This is great. Thank you for the quick fix!  

            wfollonier Wadeck Follonier
            mohitatsafe Mohit
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: