Deployment dashboard not accessible by admins that have limited access to certain deployment projects

Summary

When user without full access to all deployment projects try to access the deployment dashboard, they get the "Background page refresh cannot contact server. Please ensure Bamboo server is available." screen.

Warnings can be seen from Bamboo logs when the error page is returned.

2015-11-03 17:28:06,557 WARN [ajp-nio-127.0.0.105-8009-exec-10] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Authentication username has NO permissions to the domain object com.atlassian.bamboo.deployments.projects.DeploymentProjectImpl@1729d24; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@fa4521b: Username: username; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER, ROLE_RESTRICTEDADMIN; secure object: ReflectiveMethodInvocation: public abstract com.atlassian.bamboo.deployments.projects.DeploymentProject com.atlassian.bamboo.deployments.projects.service.DeploymentProjectService.getDeploymentProject(long); target is of class [com.atlassian.bamboo.deployments.projects.service.DeploymentProjectServiceImpl]; configuration attributes: [ROLE_USER, ROLE_ANONYMOUS, AFTER_ACL_READ]

Steps to Reproduce

• Create a deployment project.
• Restrict permission to that deployment project to one single user.
• Ensure the environments within the project have visibility set to all users.
• Perform a deployment from that project
• Log in as a different restricted admin user and go to Deploy > All Deployment Projects.

Expected Results

The deployment dashboard shows without any issues.

Actual Results

Error page "Background page refresh cannot contact server. Please ensure Bamboo server is available" is returned.

Workarounds

• For any restricted project, make sure the permissions on all environments in that project are a subset of the project's permissions.
• Make all deployment projects visible to all users who need to see any deployment projects.
• View projects one at a time rather than through the dashboard.