Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-21152

Cloning a deployment environment with dedicated agents leads to Access Denied errors

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Low Low
    • 8.0.0, 7.2.3, 8.0.0 EAP1
    • 7.1.2, 7.1.1, 7.1.3
    • Permissions
    • None

      Issue Summary

      Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents.

      Steps to Reproduce

      What permissions are needed?

      Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions:

      1. Access permission under the Bamboo admin > Overview > Security > Global permissions page.
      2. View and Edit permissions on the deployment project.
      3. View permission on the deployment environment they're trying to clone.
      As a Bamboo admin
      1. Create an environment inside one of your deployment projects.
      2. Dedicate an agent to build that environment.
      3. Create a new user (e.g. test-user).
      4. Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin.
      As a regular user
      1. Log in to Bamboo with the user account created in the previous step.
      2. Edit the deployment project.
      3. Clone the deployment environment created in the previous step.

      Expected Results

      I can think of a few scenarios that differ from the results we have today.

      1. Let users clone the environment and remove the agent dedication in the cloned environment.
      2. Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage.
      3. Do not display the 'Clone' option to the user in the first place.

      Actual Results

      Users get the following Access Denied error and do not understand why they're unable to clone the environment.

      Workaround

      1. Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again.
      2. Ask an admin to clone the environment for you and remove the agent dedication in the cloned environment.
      3. Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment.

            [BAM-21152] Cloning a deployment environment with dedicated agents leads to Access Denied errors

            Zuzanna Struczewska made changes -
            Remote Link Original: This issue links to "Page (Confluence)" [ 599805 ]
            Zuzanna Struczewska made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 600091 ]
            Zuzanna Struczewska made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 599805 ]
            Rudy Slaiby made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 570146 ]
            Nagarjun S (Inactive) made changes -
            Description Original: h3. Issue Summary

            Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents.
            h3. Steps to Reproduce
            h5. What permissions are needed?

            Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions:
             # *Access* permission under the _Bamboo admin > Overview > Security > Global permissions_ page.
             # *View* and *Edit* permissions on the deployment project.
             # *View* permission on the deployment environment they're trying to clone.

            h5. As a Bamboo admin
             # Create an environment inside one of your deployment projects.
             # Dedicate an agent to build that environment.
             # Create a new user (e.g. test-user).
             # Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin.

            h5. As a regular user
             # Log in to Bamboo with the user account created in the previous step.
             # Edit the deployment project.
             # Clone the deployment environment created in the previous step.

            h3. Expected Results

            I can think of a few scenarios that differ from the results we have today.
             # Let users clone the environment and remove the agent dedication in the cloned environment.
             # Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage.
             # Do not display the 'Clone' option to the user in the first place.

            h3. Actual Results

            Users get the following Access Denied error and do not understand why they're unable to clone the environment.

            !Screenshot 2020-11-05 at 11.32.55.png|thumbnail!
            h3. Workaround
             # Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again.
             # Ask an admin or restricted admin to clone the environment for you and remove the agent dedication in the cloned environment.
             # Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment.
            New: h3. Issue Summary

            Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents.
            h3. Steps to Reproduce
            h5. What permissions are needed?

            Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions:
             # *Access* permission under the _Bamboo admin > Overview > Security > Global permissions_ page.
             # *View* and *Edit* permissions on the deployment project.
             # *View* permission on the deployment environment they're trying to clone.

            h5. As a Bamboo admin
             # Create an environment inside one of your deployment projects.
             # Dedicate an agent to build that environment.
             # Create a new user (e.g. test-user).
             # Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin.

            h5. As a regular user
             # Log in to Bamboo with the user account created in the previous step.
             # Edit the deployment project.
             # Clone the deployment environment created in the previous step.

            h3. Expected Results

            I can think of a few scenarios that differ from the results we have today.
             # Let users clone the environment and remove the agent dedication in the cloned environment.
             # Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage.
             # Do not display the 'Clone' option to the user in the first place.

            h3. Actual Results

            Users get the following Access Denied error and do not understand why they're unable to clone the environment.

            !Screenshot 2020-11-05 at 11.32.55.png|thumbnail!
            h3. Workaround
             # Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again.
             # Ask an admin to clone the environment for you and remove the agent dedication in the cloned environment.
             # Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment.
            Alexey Chystoprudov made changes -
            Fix Version/s New: 8.0.0 EAP1 [ 95495 ]
            Bruno Rosa made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 546331 ]
            Marcin Gardias made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Waiting for Release [ 12075 ] New: Closed [ 6 ]
            SET Analytics Bot made changes -
            UIS Original: 1 New: 0

            If agent assignment is blocked by administrator then user will see validation error that environment can't be cloned without administrator assistance.

            Alexey Chystoprudov added a comment - If agent assignment is blocked by administrator then user will see validation error that environment can't be cloned without administrator assistance.

              achystoprudov Alexey Chystoprudov
              brosa Bruno Rosa
              Affected customers:
              0 This affects my team
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: