-
Bug
-
Resolution: Fixed
-
Low
-
7.1.2, 7.1.1, 7.1.3
-
None
-
4
-
Severity 3 - Minor
-
0
-
Issue Summary
Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents.
Steps to Reproduce
What permissions are needed?
Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions:
- Access permission under the Bamboo admin > Overview > Security > Global permissions page.
- View and Edit permissions on the deployment project.
- View permission on the deployment environment they're trying to clone.
As a Bamboo admin
- Create an environment inside one of your deployment projects.
- Dedicate an agent to build that environment.
- Create a new user (e.g. test-user).
- Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin.
As a regular user
- Log in to Bamboo with the user account created in the previous step.
- Edit the deployment project.
- Clone the deployment environment created in the previous step.
Expected Results
I can think of a few scenarios that differ from the results we have today.
- Let users clone the environment and remove the agent dedication in the cloned environment.
- Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage.
- Do not display the 'Clone' option to the user in the first place.
Actual Results
Users get the following Access Denied error and do not understand why they're unable to clone the environment.
Workaround
- Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again.
- Ask an admin to clone the environment for you and remove the agent dedication in the cloned environment.
- Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment.
[BAM-21152] Cloning a deployment environment with dedicated agents leads to Access Denied errors
Remote Link | Original: This issue links to "Page (Confluence)" [ 599805 ] |
Remote Link | New: This issue links to "Page (Confluence)" [ 600091 ] |
Remote Link | New: This issue links to "Page (Confluence)" [ 599805 ] |
Remote Link | New: This issue links to "Page (Confluence)" [ 570146 ] |
Description |
Original:
h3. Issue Summary
Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents. h3. Steps to Reproduce h5. What permissions are needed? Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions: # *Access* permission under the _Bamboo admin > Overview > Security > Global permissions_ page. # *View* and *Edit* permissions on the deployment project. # *View* permission on the deployment environment they're trying to clone. h5. As a Bamboo admin # Create an environment inside one of your deployment projects. # Dedicate an agent to build that environment. # Create a new user (e.g. test-user). # Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin. h5. As a regular user # Log in to Bamboo with the user account created in the previous step. # Edit the deployment project. # Clone the deployment environment created in the previous step. h3. Expected Results I can think of a few scenarios that differ from the results we have today. # Let users clone the environment and remove the agent dedication in the cloned environment. # Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage. # Do not display the 'Clone' option to the user in the first place. h3. Actual Results Users get the following Access Denied error and do not understand why they're unable to clone the environment. !Screenshot 2020-11-05 at 11.32.55.png|thumbnail! h3. Workaround # Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again. # Ask an admin or restricted admin to clone the environment for you and remove the agent dedication in the cloned environment. # Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment. |
New:
h3. Issue Summary
Non-admin users get Access Denied errors when trying to clone a deployment environment with dedicated agents. h3. Steps to Reproduce h5. What permissions are needed? Regular users (i.e. users without administrative access) can clone deployment environments in Bamboo provided they have the following permissions: # *Access* permission under the _Bamboo admin > Overview > Security > Global permissions_ page. # *View* and *Edit* permissions on the deployment project. # *View* permission on the deployment environment they're trying to clone. h5. As a Bamboo admin # Create an environment inside one of your deployment projects. # Dedicate an agent to build that environment. # Create a new user (e.g. test-user). # Make sure the user has the permissions mentioned above and is NOT an admin or restricted admin. h5. As a regular user # Log in to Bamboo with the user account created in the previous step. # Edit the deployment project. # Clone the deployment environment created in the previous step. h3. Expected Results I can think of a few scenarios that differ from the results we have today. # Let users clone the environment and remove the agent dedication in the cloned environment. # Display a more meaningful error message to let users know why they cannot clone the environment i.e. because there are dedicated agents they don't have access to manage. # Do not display the 'Clone' option to the user in the first place. h3. Actual Results Users get the following Access Denied error and do not understand why they're unable to clone the environment. !Screenshot 2020-11-05 at 11.32.55.png|thumbnail! h3. Workaround # Ask an admin or restricted admin to remove the agent dedication and try to clone the environment again. # Ask an admin to clone the environment for you and remove the agent dedication in the cloned environment. # Dedicate the agent to build the deployment project instead of the deployment environment. This will allow regular users to clone the deployment environment. |
Fix Version/s | New: 8.0.0 EAP1 [ 95495 ] |
Remote Link | New: This issue links to "Page (Confluence)" [ 546331 ] |
Resolution | New: Fixed [ 1 ] | |
Status | Original: Waiting for Release [ 12075 ] | New: Closed [ 6 ] |
UIS | Original: 1 | New: 0 |
If agent assignment is blocked by administrator then user will see validation error that environment can't be cloned without administrator assistance.