[JIRA] (JENKINS-61456) Allow Jenkins.MANAGE user to access "System Information"

[ealvarez@cloudbees.com (JIRA)]

Esther Álvarez Feijoo created an issue

Jenkins / JENKINS-61456 Allow Jenkins.MANAGE user to access "System Information" Issue Type: New Feature Assignee: Unassigned Components: core Created: 2020-03-12 12:25 Priority: Minor Reporter: Esther Álvarez Feijoo Jenkins.MANAGE permission allows accessing "System Information" Thread dumps and environment variables should still only be shown to a user with Jenkins.ADMINISTER Add Comment

This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)

[ealvarez@cloudbees.com (JIRA)]

Esther Álvarez Feijoo assigned an issue to Esther Álvarez Feijoo

Jenkins / JENKINS-61456 Allow Jenkins.MANAGE user to access "System Information"

Change By: Esther Álvarez Feijoo Assignee: Esther Álvarez Feijoo

Add Comment

[ealvarez@cloudbees.com (JIRA)]

Esther Álvarez Feijoo started work on JENKINS-61456

Change By: Esther Álvarez Feijoo

Status: Open In Progress

Add Comment

[ealvarez@cloudbees.com (JIRA)]

Esther Álvarez Feijoo updated an issue

Jenkins / JENKINS-61456 Allow Jenkins.MANAGE user to access "System Information"

Change By: Esther Álvarez Feijoo

Jenkins.MANAGE permission allows accessing "System Information"

Thread dumps and environment variables should still only be shown to a user with Jenkins.ADMINISTER because they can contain sensitive data. One common example is running Jenkins in a container, where the common way of providing secrets is by using environment variables.

Add Comment

[dbeck@cloudbees.com (JIRA)]

Daniel Beck closed an issue as Fixed

Jenkins / JENKINS-61456 Allow Jenkins.MANAGE user to access "System Information"

Change By: Daniel Beck Status: In Progress Closed Resolution: Fixed Released As: Jenkins 2.227

Add Comment