-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 6.5.0
-
Component/s: Deployments, Permissions
-
Severity 3 - Minor
Summary
Non admin user can't edit docker configuration in deployment project even with full (View, Edit, Deploy) permissions over the environment.
Steps to Reproduce
- Create a Deployment project with an environment.
- Create a non-admin user.
- Give access to that deployment project to that user (full access at project level and environment level).
- In the deployment project configuration page, click on "Docker".
Expected Results
The page is displayed.
Actual Results
When visiting configureEnvironmentDocker.action:
Access denied
Sorry, you have insufficient permissions to view the page. Please contact an administrator if you believe this is an error.
The below is logged to atlassian-bamboo.log
2018-11-25 14:45:23,250 INFO [http-apr-8085-exec-8] [WebworkAclVoter] Voting to deny - domainObject on com.atlassian.bamboo.deployments.environments.actions.docker.ConfigureEnvironmentDocker@4c7768f2 is null 2018-11-25 14:45:23,251 INFO [http-apr-8085-exec-8] [WebworkNewObjectAclVoter] Voting to deny - domainObject on com.atlassian.bamboo.deployments.environments.actions.docker.ConfigureEnvironmentDocker@4c7768f2 is null 2018-11-25 14:45:23,252 WARN [http-apr-8085-exec-8] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Access is denied; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@5b73ef08: Username: id:1179649 name:deploy fullName:deploy email:deploy@deploy.com created:2018-11-25 14:18:59.286; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER; secure object: com.atlassian.bamboo.deployments.environments.actions.docker.ConfigureEnvironmentDocker@4c7768f2; configuration attributes: [WW_EDIT, WW_NEWOBJECT, GLOBAL_READ]
Notes
Giving admin privileges to that user will permit the user to access that page.
