Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-20037

All projects visible regardless of user permission

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • High
    • None
    • 6.6.1
    • Permissions

    Description

      User management

      • userA belongs to groupA
      • userB belongs to groupB

      Global permissions

      User access
      Name Access Create Create repository Admin

      No users have been given explicit permissions

      Group access
      Name Access Create Create repository Admin
      bamboo-admin [x] [x] [x] [x]
      Other
      Name Access Create Create repository Admin
      Logged in users [x] [ ] [ ] [ ]
      Anonymous users [ ]      

      Project A - Project permissions

      User access
      Name Create plan Admin
      Admin Istrator [x] [x]
      Group access
      Name Create plan Admin
      groupA [x] [x]
      Other
      Name Create plan Admin
      Logged in users [ ] [ ]

      Project A - Plan permissions inheritance 

      User access
      Name View Edit Build Clone Admin

      No users have been given explicit permissions

      Group access
      Name View Edit Build Clone Admin
      groupA [x] [x] [x] [x] [x]
      Other
      Name View Edit Build Clone Admin
      Logged in users [ ] [ ] [ ] [ ] [ ]
      Anonymous users [ ]        

      Project B - Project permissions

      User access
      Name Create plan Admin
      Admin Istrator [x] [x]
      Group access
      Name Create plan Admin
      groupB [x] [x]
      Other
      Name Create plan Admin
      Logged in users [ ] [ ]

      Project B - Plan permissions inheritance

      User access
      Name View Edit Build Clone Admin

      No users have been given explicit permissions

      Group access
      Name View Edit Build Clone Admin
      groupB [x] [x] [x] [x] [x]
      Other
      Name View Edit Build Clone Admin
      Logged in users [ ] [ ] [ ] [ ] [ ]
      Anonymous users [ ]        

      Based on the scenario above, when visiting http://localhost:8085/allProjects.action :

      • When logging in with userA, only Project A should be displayed
      • When logging in with userB, only Project B should be displayed

      However, all projects are being listed instead. Meaning that when logging in with userA, Project A and Project B are listed

      Attachments

        Issue Links

          is duplicated by

          Suggestion - BAM-19612 As an Administrator I do not want Bamboo to expose the list of all projects to all users

          • Closed

          Suggestion - BAM-19815 Introduce new permissions to restrict users from viewing only the Projects they have access to

          • Closed
          is related to

          Suggestion - BAM-19815 Introduce new permissions to restrict users from viewing only the Projects they have access to

          • Closed

          Activity

            People

              Unassigned Unassigned
              roliveira@atlassian.com Ricardo
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: