Details
-
Bug
-
Resolution: Done
-
Low
-
5.14.3.1, 5.14.4.1
-
Severity 3 - Minor
-
Description
Summary
When trying to deploy to an environment, Bamboo show "Access denied" page
Steps to Reproduce
- Create a non admin user
- Configure Environment permissions so that the user will have all the permissions
- Configure the related Build Plan so that the user does not have any permissions
- Login with the user
- Access the Deployment Project and Environment
- Click on the button "Deploy"
Expected Results
Bamboo will show that the user does not have View permission on the build plan
Actual Results
Bamboo just show the "Access denied" page with the following message:
Sorry, you have insufficient permissions to view the page. Please contact an administrator if you believe this is an error.
The following warning is thrown in atlassian-bamboo.log:
2017-01-25 22:03:19,026 INFO [http-nio-8085-exec-19] [AccessLogFilter] test GET http://localhost:8085/deploy/selectVersionForExecute.action?environmentId=2162689&returnUrl=%2Fdeploy%2FviewEnvironment.action%3Fid%3D2162689 668301kb 2017-01-25 22:03:19,055 WARN [http-nio-8085-exec-19] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Access is denied; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@93b9ab63: Username: id:1998849 name:test fullName:test email:test@test.com created:Wed Jan 25 21:56:34 MYT 2017; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER; secure object: ReflectiveMethodInvocation: public abstract java.util.List com.atlassian.bamboo.plan.cache.CachedPlanManager.getBranchesForChain(com.atlassian.bamboo.plan.PlanIdentifier); target is of class [com.atlassian.bamboo.plan.cache.CachedPlanManagerImpl]; configuration attributes: [ACL_BUILD_READ]
Attachments
Issue Links
- mentioned in
-
Page Loading...