[JIRA] (JENKINS-55806) Authentication may be mandatory for the wbhooks to trigger builds

linux@bohmer.net (JIRA)

unread,

Jan 27, 2019, 12:42:02 PM1/27/19

to jenkinsc...@googlegroups.com

Remy Böhmer created an issue

Jenkins /

JENKINS-55806

Authentication may be mandatory for the wbhooks to trigger builds

Issue Type:	Bug
Assignee:	lucamilanesio
Components:	gerrit-code-review-plugin
Created:	2019-01-27 17:41
Priority:	Trivial
Reporter:	Remy Böhmer

If the poster of the webhooks does not authenticate to Jenkins, then non-public projects will not be triggered. The root cause is that the call in GerritWebhook.java -~~> getJenkinsInstance().getItems() only returns a list of items that are visible to the caller. Since this call runs in context of the (non~~)authenticated user account that posts the webhook, the private projects are not visible, and as such nothing will be triggered.

Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

linux@bohmer.net (JIRA)

unread,

Jan 27, 2019, 12:43:03 PM1/27/19

to jenkinsc...@googlegroups.com

Remy Böhmer updated an issue

Jenkins /

JENKINS-55806

Authentication may be mandatory for the wbhooks to trigger builds

Change By:	Remy Böhmer

If the poster of the webhooks does not authenticate to Jenkins, then non-public projects will not be triggered. The root cause is that the call in GerritWebhook.java --> [ getJenkinsInstance().getItems() ] only returns a list of items that are visible to the caller. Since this call runs in context of the (non - )authenticated user account that posts the webhook, the private projects are not visible, and as such nothing will be triggered.