Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48896

anonymous read of cc.xml file works only for root (ldap)

    Details

    • Similar Issues:

      Description

      This refers to LDAP plugin. Exactly the same issue was raised and fixed against github-auth plugin in the past.

      It seems that the option to allow anonymous users to read the /cc.xml works only for the root one and not for those associated with other views, or the special "all" view which is exposed at /view/All/cc.xml

      This bug has a serious impact because due to it, it means that you can only expose the status of the jobs present on the default view. On any serious setup, the default view does not expose ALL jobs.

      Even worse, it seems that if you try to get the other cc.xml files you get a 403 but if you try to use basic auth, you will get a 500 error.

        Attachments

          Issue Links

            Activity

            ssbarnea Sorin Sbarnea created issue -
            ssbarnea Sorin Sbarnea made changes -
            Field Original Value New Value
            Link This issue is related to JENKINS-2885 [ JENKINS-2885 ]
            ssbarnea Sorin Sbarnea made changes -
            Remote Link This issue links to "pull-52 (Web Link)" [ 19762 ]
            ssbarnea Sorin Sbarnea made changes -
            Component/s ldap-plugin [ 17122 ]
            Component/s github-oauth-plugin [ 15900 ]
            ssbarnea Sorin Sbarnea made changes -
            Description It seems that the option to allow anonymous users to read the /cc.xml works only for the root one and not for those associated with other views, or the special "all" view which is exposed at /view/All/cc.xml

            This bug has a serious impact because due to it, it means that you can only expose the status of the jobs present on the default view. On any serious setup, the default view does not expose ALL jobs.

            Even worse, it seems that if you try to get the other cc.xml files you get a 403 but if you try to use basic auth, you will get a 500 error.

            Ideally the github integration plugin should expose github login as basic auth, so we can use it from other applications too. Still, this would be subject to a different bug report.
            This refers to LDAP plugin. Exactly the same issue was raised and fixed against github-auth plugin in the past.

            It seems that the option to allow anonymous users to read the /cc.xml works only for the root one and not for those associated with other views, or the special "all" view which is exposed at /view/All/cc.xml

            This bug has a serious impact because due to it, it means that you can only expose the status of the jobs present on the default view. On any serious setup, the default view does not expose ALL jobs.

            Even worse, it seems that if you try to get the other cc.xml files you get a 403 but if you try to use basic auth, you will get a 500 error.
            ssbarnea Sorin Sbarnea made changes -
            Assignee Sam Gleske [ sag47 ] Kohsuke Kawaguchi [ kohsuke ]
            oleg_nenashev Oleg Nenashev made changes -
            Component/s cctray-xml-plugin [ 21967 ]
            oleg_nenashev Oleg Nenashev made changes -
            Component/s core [ 15593 ]
            ssbarnea Sorin Sbarnea made changes -
            Status Open [ 1 ] Resolved [ 5 ]
            Resolution Cannot Reproduce [ 5 ]

              People

              • Assignee:
                kohsuke Kohsuke Kawaguchi
                Reporter:
                ssbarnea Sorin Sbarnea
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: