-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 7.2.3
-
Component/s: Bamboo Specs, Permissions
-
None
-
2
-
Severity 3 - Minor
Issue Summary
User with admin permissions for the project does not have permissions to view build results of jobs that are no more in specs.
Steps to Reproduce
- Set up a specs repo with a stage having 2 jobs: one and two
- Grant admin permissions for a user called, say, user1
- Wait for the first build to run
- Login with user user1, make sure you can access build logs for both jobs, one and two
- Remove job two from specs. Commit and push changes.
- Wait for the build to finish
- When logged in as user1 try to access build logs of job two of a previous build
Expected Results
Logs, tests and other build results are accessible
Actual Results
Access denied is displayed in UI:
The below error is seen in logs:
2021-04-15 12:47:12,231 WARN [http-nio-8085-exec-8] [PlanAwareInterceptor] Action 'com.atlassian.bamboo.build.ViewBuildResults@23aa093' is plan aware but no plan can be found. PlanKey was 'PLAN-PLANSPECS-OLKJHG'
2021-04-15 12:47:12,274 INFO [http-nio-8085-exec-8] [WebworkAclVoter] Voter(WW_READ, [READ]) voting to deny access to user 'user' - domainObject on com.atlassian.bamboo.build.ViewBuildResults@23aa093 is null
2021-04-15 12:47:12,274 WARN [http-nio-8085-exec-8] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Access is denied; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@4448ed9b: Username: EmbeddedCrowdUser{name='user', displayName='User Userovich', directoryId=65537}; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER; secure object: com.atlassian.bamboo.build.ViewBuildResults@23aa093; configuration attributes: [WW_READ, GLOBAL_READ]
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
