Details
-
Bug
-
Resolution: Fixed
-
Low
-
6.4.1
-
Severity 3 - Minor
-
Description
Summary
A user with Admin permissions at plan level is unable to delete stages.
Environment
Problem found in Bamboo 6.4.1
Steps to Reproduce
- Create a user with "Admin" permissions in the "Permissions" section in the plan configuration page.
- Log in as the user.
- Try to delete a stage in that plan.
Expected Results
Stage is delete
Actual Results
Action fails with error
2018-04-23 11:55:20,519 INFO [http-nio-8085-exec-22] [AccessLogFilter] user1 POST http://bamboo641:8085/ajax/deleteStage.action 598535kb 2018-04-23 11:55:20,528 WARN [http-nio-8085-exec-22] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AuthorizationServiceException: Secure object: ReflectiveMethodInvocation: public abstract void com.atlassian.bamboo.deletion.DeletionService.deleteStage(com.atlassian.bamboo.chains.cache.ImmutableChainStage); target is of class [com.atlassian.bamboo.deletion.DeletionServiceImpl] did not provide any argument of type: interface com.atlassian.bamboo.chains.ChainStage; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@102d6ca: Username: id:819201 name:user1 fullName:user1 email:user@1.com created:Mon Apr 23 11:48:28 GMT 2018; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER; secure object: ReflectiveMethodInvocation: public abstract void com.atlassian.bamboo.deletion.DeletionService.deleteStage(com.atlassian.bamboo.chains.cache.ImmutableChainStage); target is of class [com.atlassian.bamboo.deletion.DeletionServiceImpl]; configuration attributes: [ACL_STAGE_ADMIN]
Workaround
Option 1:
Use Bamboo admin or restricted admin credentials to delete stage
Option 2:
Disable or delete all jobs within the stage. Whilst the Stage entity still exists as it can't be deleted, it won't have any affect on new builds.