Deployment dashboard broken for users who cannot see all deployment projects

Summary

If a user doesn't have permission to access all deployment projects, Bamboo throws an error saying "Background page refresh cannot contact server. Please ensure Bamboo server is available." and none of the projects are visible.

Steps to Reproduce

• Create a deployment project.
• Restrict permission to that deployment project to one single user.
• Perform a deployment from that project
• Log in as a different user and go to Deploy > All Deployment Projects.

Expected Results

The deployment projects that your user has access to are listed.

Actual Results

No projects are listed and instead an error saying "Background page refresh cannot contact server. Please ensure Bamboo server is available" appears.

Workarounds

There are no universal workarounds to this bug. Possibilities include:

• Make all deployment projects visible to all users who need to see any deployment projects.
• Encourage users to view projects one at a time rather than through the dashboard.

Notes

The following error is thrown in the Bamboo logs:

2015-11-03 17:28:06,557 WARN [ajp-nio-127.0.0.105-8009-exec-10] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Authentication username has NO permissions to the domain object com.atlassian.bamboo.deployments.projects.DeploymentProjectImpl@1729d24; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@fa4521b: Username: username; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER, ROLE_RESTRICTEDADMIN; secure object: ReflectiveMethodInvocation: public abstract com.atlassian.bamboo.deployments.projects.DeploymentProject com.atlassian.bamboo.deployments.projects.service.DeploymentProjectService.getDeploymentProject(long); target is of class [com.atlassian.bamboo.deployments.projects.service.DeploymentProjectServiceImpl]; configuration attributes: [ROLE_USER, ROLE_ANONYMOUS, AFTER_ACL_READ]