[JIRA] (JENKINS-62184) Ownership based authorization falling back to anonymous when no ownership defined

2 views
Skip to first unread message

antoine.malliarakis@gmail.com (JIRA)

unread,
May 6, 2020, 4:53:03 PM5/6/20
to jenkinsc...@googlegroups.com
Antoine Malliarakis created an issue
 
Jenkins / Bug JENKINS-62184
Ownership based authorization falling back to anonymous when no ownership defined
Issue Type: Bug Bug
Assignee: Unassigned
Components: ownership-plugin
Created: 2020-05-06 20:52
Environment: Jenkins 2.222.3
Authorize Project 1.3.0
ownership-plugin 0.12.1
Priority: Minor Minor
Reporter: Antoine Malliarakis

Context

Currently we have defined the Authorize Project to use the following order to identify the user to run a job as:

  1. Configuration defined at the level of the job
  2. Run as "any developer" (limited role basically)

I wanted to introduce an intermediary step "Run as owner".

The issue here is that the ownership plugin doesn't check if ownership is defined and returns "Anonymous" if one of the following conditions is true

  1. Ownership is disabled
  2. There is no primary owner defined

While I'm not too sure about the latter, I'm pretty sure that the former is causing us an issue: on most of projects owners are not defined... And thus our jobs get to run as "Anonymous" ... Which obviously means it doesn't run !

Acceptance criteria

  • If ownership is disabled the "Run as owner" should basically be identified as "nothing defined" and Authorize project should proceed to the next policy.

 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)
Atlassian logo
Reply all
Reply to author
Forward
0 new messages