-
Bug
-
Resolution: Fixed
-
Medium
-
6.4.0
-
10
-
Severity 2 - Major
-
1
-
At moment Bamboo provides 2 endpoints to dedicate agents:
- /rest/api/latest/agent/assignment
- /rest/api/latest/deploy/environment/<environment_id>/agent-assignment
In order to dedicate an agent, the minimum requirement is:
- admin permission for plan/project
- edit permission for environment/deployment project
This may cause a denial of service situation if someone grabs all the agents.
In order to avoid that, as an Administrator I would like to have a security toggle to make the agent assignment "restricted to admin only".
- is duplicated by
-
BAM-17869 Add security setting to Block users from being able to Dedicate Agents to Build Plans and Deployment Enviroments
- Closed
- is related to
-
BAM-21152 Cloning a deployment environment with dedicated agents leads to Access Denied errors
- Closed
-
BAM-17869 Add security setting to Block users from being able to Dedicate Agents to Build Plans and Deployment Enviroments
- Closed
- relates to
-
BAM-15856 decouple deployment project permissions
- Closed
-
BAM-17418 Dedicate agent not in audit log
- Closed
- mentioned in
-
Page Loading...