Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-31201

Job DSL support for ScriptApproval (was: Groovy postbuild ignores RUN_SCRIPTS permission)

    Details

    • Similar Issues:

      Description

      The Groovy Postbuild plugin doesn't appear to adhere to the Jenkins.RUN_SCRIPTS permission at all. I'm generating jobs using the Job DSL Plugin and have given the RUN_SCRIPTS permission to the anonymous user.

      When I generate scripts this plugin still requires the script approval.

      Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).

        Attachments

          Issue Links

            Activity

            sag47 Sam Gleske created issue -
            sag47 Sam Gleske made changes -
            Field Original Value New Value
            Link This issue is related to JENKINS-22661 [ JENKINS-22661 ]
            sag47 Sam Gleske made changes -
            Description This plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user.

            When I generate scripts then this plugin still requires the script approval.

            Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).
            The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user.

            When I generate scripts then this plugin still requires the script approval.

            Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).
            sag47 Sam Gleske made changes -
            Description The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user.

            When I generate scripts then this plugin still requires the script approval.

            Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).
            The Groovy Postbuild plugin doesn't appear to adhere to the {{Jenkins.RUN_SCRIPTS}} permission at all. I'm generating jobs using the Job DSL Plugin and have given the {{RUN_SCRIPTS}} permission to the {{anonymous}} user.

            When I generate scripts this plugin still requires the script approval.

            Authentication is enabled but anonymous is given RunScripts permission. I would assume anybody would be able to create scripts (including the Job DSL plugin generated jobs).
            jglick Jesse Glick made changes -
            Link This issue is related to JENKINS-22661 [ JENKINS-22661 ]
            jglick Jesse Glick made changes -
            Summary Groovy postbuild ignores RUN_SCRIPTS permission Job DSL support for ScriptApproval (was: Groovy postbuild ignores RUN_SCRIPTS permission)
            Issue Type Bug [ 1 ] New Feature [ 2 ]
            Component/s job-dsl-plugin [ 16720 ]
            Component/s groovy-postbuild-plugin [ 15685 ]
            Labels api security
            Assignee wolfs [ wolfs ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 166387 ] JNJira + In-Review [ 182380 ]
            jglick Jesse Glick made changes -
            Link This issue is duplicated by JENKINS-40118 [ JENKINS-40118 ]
            jglick Jesse Glick made changes -
            Link This issue relates to SECURITY-369 [ SECURITY-369 ]

              People

              • Assignee:
                Unassigned
                Reporter:
                sag47 Sam Gleske
              • Votes:
                7 Vote for this issue
                Watchers:
                12 Start watching this issue

                Dates

                • Created:
                  Updated: