Details
-
Bug
-
Resolution: Fixed
-
Low
-
None
-
None
Description
SUMMARY
Bamboo Cloud is not allowing restricted admin to add shared remote capabilities. Restricted admin can access the page in Bamboo Cloud but receive permission denied error when click on Add.
2016-01-19 22:39:06.990506500 2016-01-19 22:39:06,990 WARN [ajp-nio-127.0.0.105-8009-exec-14] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Access is denied; authenticated principal: org.acegisecurity.providers.anonymous.AnonymousAuthenticationToken@90576bf4: Username: anonymousUser; Password: [PROTECTED]; Authenticated: true; Details: org.acegisecurity.ui.WebAuthenticationDetails@21a2c: RemoteIpAddress: 165.254.227.81; SessionId: 71F90EC18EBC8073B7D8E5E19783CA7A; Granted Authorities: ROLE_ANONYMOUS; secure object: com.atlassian.bamboo.configuration.agent.ConfigureSharedRemoteCapability@19bce31; configuration attributes: [WW_ADMIN, WW_RESTRICTED_ADMIN, GLOBAL_READ]
Workaround
Add capabilities to each remote agents by editing listed agents under Online remote agents or Offline remote agents.
Log trace
@40000000569e521e08a0dacc 2016-01-19 23:11:16,144 INFO [ajp-nio-127.0.0.105-8009-exec-14] [AccessLogFilter] admin POST https://milkcoffee.atlassian.net/builds/admin/agent/addSharedRemoteCapability.action 42449kb ... @40000000569e521e08c68b3c 2016-01-19 23:11:16,147 DEBUG [ajp-nio-127.0.0.105-8009-exec-14] [WebworkAclVoter] Voting to deny access - no ACLs apply for this principal @40000000569e521e08cb55cc 2016-01-19 23:11:16,147 DEBUG [ajp-nio-127.0.0.105-8009-exec-14] [WebworkAclVoter] Voting to grant access @40000000569e521e08dd9994 2016-01-19 23:11:16,148 DEBUG [ajp-nio-127.0.0.105-8009-exec-14] [ActionChainResult] Chaining to action accessDenied @40000000569e521e08dddbfc 2016-01-19 23:11:16,148 DEBUG [ajp-nio-127.0.0.105-8009-exec-14] [DefaultActionProxy] Creating an DefaultActionProxy for namespace [/] and action name [accessDenied]
