Remove / disable the Replay capability for Jenkins Pipeline consumers

[Jim Coll]

I want to remove the ability for users of Jenkins Pipeline to be able to modify the Jenkinsfile or other loaded pipeline scripts using the Replay option. 

I have tried removing the permission from the roles that I've assigned to a user group but for some reason they still have the access to the Replay option on the Console Output screen. I have also created a new role without the permission but the option still shows up for the user.

I also noticed that the Run/Replay permissions in the Manage Roles Matrix is greyed out for some of the older Jenkins roles. 

Has anyone else experienced this or similar issues? Any assistance would be greatly appreciated!

Thanks....

[Jim Coll]

Worked it out - the Run/Reply permission was getting greyed out when the Job/Configure permission is selected which implies that it's automatically granted with the latter permission.

[Rushi Jawali]

Can you elaborate more on this?

[Nalin Garg]

If you give a group with access to "Job->Configure " or "Job/Configure " then " Run/Reply" get enabled implicitly(irrespective of whether " Run/Reply" is selected or not). This rule does make sense but seems like a trick.