[#BAM-1711] Bamboo Current Activity View's Error Log does not respect permission rights

Bamboo

Bamboo Current Activity View's Error Log does not respect permission rights

Created: 19/Sep/07 08:06 AM Updated: 23/Sep/07 08:12 PM

Component/s:

Security

Affects Version/s:

1.2.3

Fix Version/s:

1.2.4

Time Tracking:

Not Specified

File Attachments:

showSystemErrors.ftl (3 kB)

Image Attachments:

1. screenshot-1.jpg
(195 kB)

Participants:	Arjan Schaaf, Edwin Wong [Atlassian] and Mark Chaimungkalanont [Atlassian]
Since last comment:	1 year, 16 weeks ago
Number of comments:	4
Internal Priority:	1. Highest
Internal Work Bucket:	Confirmed
Labels:

Description

« Hide

In the Current Activity view users can see more in the error log than they should. All errors from all the plans are visible in this view.

Because we have different groups of users from different company's we don't want to let them see the other builds. This works great in bamboo, however this one view destroys the privacy of the projects. Error loggings name by detail the project which caused the error.

Please change this view, so that users can only see the error they should be allowed to see.
This issue is critical to us, because it prevents us from adapting bamboo for multiple projects

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Arjan Schaaf added a comment - 19/Sep/07 08:07 AM

the activity view with error loggings from project for wich I have no access rights

[ Permlink | « Hide ]

Mark Chaimungkalanont [Atlassian] added a comment - 19/Sep/07 06:29 PM

Arian,

Thanks for reporting this, we'll try to get a patch out to you in the next few days.

Cheers,

Mark C

[ Permlink | « Hide ]

Edwin Wong [Atlassian] added a comment - 19/Sep/07 09:37 PM

Arjan,

I have attached a patch (showSystemErrors.ftl) to this issue which should hide error messages if the user does not have the permission to view the build.

To apply this patch, simply copy the file to {bamboo installation}/WEB-INF/fragments/ directory and replace the existing file with the same name.

A proper fix will be shipped with the next release.

Cheers,
Edwin

[ Permlink | « Hide ]

Arjan Schaaf added a comment - 20/Sep/07 04:14 AM

Thanks so much for resolving this issue on such short notice!

Kind regards,
Arjan