-
Suggestion
-
Resolution: Duplicate
-
None
Currently, Bamboo v5.7.2 does not provide the ability of restricting users from editing Plan configuration.
With Bamboo becoming a deployment tool, it has to run under the service account with the elevated privileges to deploy and install in various environment. Giving developers ability to edit the build plans, open up a security breach that potentially enables them to use that privileged service account to run DOS and PowerShell code. So we need to find a compromise – allow the developers to see how the build is set up, but to not let them modify things there.
- relates to
-
BAM-11515 New permission level for viewing configuration
- Closed