[JIRA] (JENKINS-58344) User with only project level create credentials permission can't create credentials

10 views
Skip to first unread message

rclephas@gmail.com (JIRA)

unread,
Jul 4, 2019, 9:38:02 AM7/4/19
to jenkinsc...@googlegroups.com
Rick Clephas created an issue
 
Jenkins / Bug JENKINS-58344
User with only project level create credentials permission can't create credentials
Issue Type: Bug Bug
Assignee: Oleg Nenashev
Components: core, credentials-plugin, role-strategy-plugin
Created: 2019-07-04 13:37
Environment: Jenkins ver. 2.176.1
Role Strategy Plugin ver. 2.12
Credentials Plugin ver. 2.2.0
Priority: Major Major
Reporter: Rick Clephas

User without the global create credentials permission can't create credentials for a project for which they do have the create credentials permissions. 

Configuration

  • Role1 has global create, delete, manage domains, update and view credentials permissions
  • Role2 has project create, delete, update and view credentials permissions
  • Role2 has global view credentials permission

**Issue

Users with only Role2 can't create credentials for the job. 
The add button is greyed out and the add credentials options doesn't show in the side menu.

Users who also have **Role1 can create global and job credentials.
Users with only Role2 should be able to manage credentials for the job without the need of the global permission.

 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

rclephas@gmail.com (JIRA)

unread,
Jul 4, 2019, 10:00:02 AM7/4/19
to jenkinsc...@googlegroups.com
Rick Clephas updated an issue
Change By: Rick Clephas
User without the global create credentials permission can't create credentials for a project for which they do have the create credentials permissions. 
h2. Configuration
* Role1 has *global* create, delete, manage domains, update and view credentials permissions
* Role2 has *project* create, delete, update and view credentials permissions
* Role2 has *global* view credentials permission

h2.
** Issue


Users with only Role2 can't create credentials for the job. 
The add button is greyed out and the add credentials options doesn't show in the side menu.

Users who also have **Role1 can create global and job credentials.
Users with only Role2 should be able to manage credentials for the job without the need of the global permission.

 

info@papke.it (JIRA)

unread,
Oct 21, 2019, 12:20:06 PM10/21/19
to jenkinsc...@googlegroups.com
Christoph Papke commented on Bug JENKINS-58344
 
Re: User with only project level create credentials permission can't create credentials

Hello everyone,

we currently have the same issue in our company. Did you find a workaround for this in the meantime Rick Clephas? Is there an estimated time when this bug will be fixed Oleg Nenashev?

Thanks for your help. 

Best regards

Chris

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo

o.v.nenashev@gmail.com (JIRA)

unread,
Oct 21, 2019, 3:44:02 PM10/21/19
to jenkinsc...@googlegroups.com

o.v.nenashev@gmail.com (JIRA)

unread,
Oct 21, 2019, 3:44:03 PM10/21/19
to jenkinsc...@googlegroups.com
Oleg Nenashev commented on Bug JENKINS-58344
 
Re: User with only project level create credentials permission can't create credentials

Sorry, I missed the notification and did not triage this issue. I doubt it is a bug, there is no "project level credentials permissions" in Credentials Plugin. Role Strategy just does not know whether there could be ones, and hence it offers the entire category.

 

I will convert it to a feature request to credentials plugin. There is just no feature which is expected here 

 

o.v.nenashev@gmail.com (JIRA)

unread,
Oct 21, 2019, 3:45:02 PM10/21/19
to jenkinsc...@googlegroups.com

o.v.nenashev@gmail.com (JIRA)

unread,
Oct 21, 2019, 3:45:03 PM10/21/19
to jenkinsc...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages