Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-54447

Everyone with limited permissions can read configs

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      When using the plugin "config-file-provider", the configs files are readable by everyone with the right to create jobs.

      When the user create a job, at the moment of choosing a config file, he can click on "view selected file" and have a full RO access on this files...

        Attachments

          Activity

          Hide
          imod Dominik Bartholdi added a comment - - edited

          I don't think this is a bug but the intention - everyone having permission to create a job should also be able to see the config-files hi is able to use within his jobs. If you have files which should not be seen by everyone, then you should create folders and place the config-files within the scope of a folder where only allowed users have permission to see it.

          Show
          imod Dominik Bartholdi added a comment - - edited I don't think this is a bug but the intention - everyone having permission to create a job should also be able to see the config-files hi is able to use within his jobs. If you have files which should not be seen by everyone, then you should create folders and place the config-files within the scope of a folder where only allowed users have permission to see it.
          Hide
          lunik Guillaume Lunik added a comment -

          Seems legit
          The issue can be closed
          Thanks

          Show
          lunik Guillaume Lunik added a comment - Seems legit The issue can be closed Thanks
          Hide
          lunik Guillaume Lunik added a comment -

          intentional behavior

          Show
          lunik Guillaume Lunik added a comment - intentional behavior

            People

            • Assignee:
              domi Dominik Bartholdi
              Reporter:
              lunik Guillaume Lunik
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: