restricted admins can't delete Bamboo plans

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Medium
    • Component/s: None

      Perhaps related to: http://jira.atlassian.com/browse/BAM-5260

      Restricted Admins should be able to delete build plans, right?

      To reproduce on test.jira.com:

      1. Sign in with a non-system-administrator account
      2. Try and delete a plan

      You'll get this error on the Web UI:

      Error deleting build DPJ-TRUNK: Secure object: ReflectiveMethodInvocation: public abstract void com.atlassian.bamboo.build.BuildManager.deleteBuild(java.lang.String); target is of class [com.atlassian.bamboo.build.HibernateBuildManager] did not provide any argument of type: interface com.atlassian.bamboo.build.Build
      

      And in the logs:

       2010-03-17 13:07:03,192 WARN [TP-Processor16] [AuthorizationLoggerListener] Authorization failed: org.acegisecurity.AccessDeniedException: Access is denied; authenticated principal: org.acegisecurity.adapters.PrincipalAcegiUserToken@f1b618e: Username: com.atlassian.bamboo.user.DefaultBambooUser@b844da55; Password: [PROTECTED]; Authenticated: true; Details: null; Granted Authorities: ROLE_USER, ROLE_RESTRICTEDADMIN; secure object: ReflectiveMethodInvocation: public abstract void com.atlassian.bamboo.build.BuildManager.saveBuild(com.atlassian.bamboo.build.Build); target is of class [com.atlassian.bamboo.build.HibernateBuildManager]; configuration attributes: [ACL_BUILD_EDIT]
       2010-03-17 13:07:03,192 ERROR [TP-Processor16] [DeleteBuilds] Error reseting deletion status for WEBSERVICE-TEST
       org.acegisecurity.AccessDeniedException: Access is denied
       	at org.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:68)
       	at org.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:292)
       	at org.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:63)
       	at com.atlassian.bamboo.security.acegi.intercept.aopalliance.AuthorityOverrideMethodSecurityInterceptor.invoke(AuthorityOverrideMethodSecurityInterceptor.java:36)
       	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
       	at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
       	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
       	at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
       	at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
       	at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
       	at $Proxy13.saveBuild(Unknown Source)
      

              Assignee:
              Alex Wei (DE) (Inactive)
              Reporter:
              Diane Yu
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: