Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-67661

SYSTEM permissions not possible to migrate for existing multibranch jobs

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Minor Minor
    • matrix-auth-plugin
    • None
    • Jenkins 2.319.2 on RHEL7 with openJDK 11.0.13
      Bitbucket Branch Source Plugin 751.vda_24678a_f781
      Matrix Authorization Strategy Plugin 3.0
      Pipeline: Multibranch 706.vd43c65dec013

      After upgrading to Matrix Authorization Strategy Plugin 3.0 (and some other plugins) we noticed that all existing multibranch branch jobs (possible PR jobs are affected as well, we didn't have any though) are listed as "Ambiguous Permission Assignments". When investigating we see that they all have permissions for SYSTEM which is flagged. But as the branch (and PR) jobs for a multibranch pipeline are created automatically there is no way to migrate this permission. Se attached image.
      Checking the config.xml file for such a branch job I see the following config:

          <hudson.security.AuthorizationMatrixProperty>
            <inheritanceStrategy class="org.jenkinsci.plugins.matrixauth.inheritance.InheritParentStrategy"/>
            <permission>hudson.model.Item.Build:SYSTEM</permission>
            <permission>hudson.model.Item.Configure:SYSTEM</permission>
            <permission>hudson.model.Item.Delete:SYSTEM</permission>
            <permission>hudson.model.Item.Read:SYSTEM</permission>
            <permission>hudson.model.Item.Workspace:SYSTEM</permission>
          </hudson.security.AuthorizationMatrixProperty>
      

            danielbeck Daniel Beck
            ahammar Anders Hammar
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: