Skip to content

[JENKINS-2380] "SCM - Tag" Matrix security option doesn't work #14064

Closed

Description

@jenkins-infra-bot

If you enable Matrix-based security and configure a use to disallow tagging, then log in as that user, the
tagging UI is still available to the user. What should happen is that the tagging UI should not be available
to a user configured to disallow tagging.


Originally reported by acronce, imported from: "SCM - Tag" Matrix security option doesn't work
  • status: Closed
  • priority: Critical
  • component(s): core
  • resolution: Fixed
  • resolved: 2008-09-24T11:05:48+00:00
  • votes: 0
  • watchers: 0
  • imported: 2025-11-24
Raw content of original issue

If you enable Matrix-based security and configure a use to disallow tagging, then log in as that user, the tagging UI is still available to the user. What should happen is that the tagging UI should not be available to a user configured to disallow tagging.

  • environment: Platform: Macintosh, OS: All

Activity

  1. jenkins-infra-bot commented on Sep 24, 2008

    @jenkins-infra-bot
    Author
    kohsuke:

    Reccurrence of this in
    http://www.nabble.com/Anonymous-user-are-allowed-to-tag-a-build-td19620954.html

    From looking at the code, I believe the actual tagging is protected, but I agree
    that UI shouldn't be visible.

  2. jenkins-infra-bot commented on Sep 24, 2008

    @jenkins-infra-bot
    Author
    scm_issue_link:
    • Original comment link
    • Raw content of original comment:

      Code changed in hudson User: : kohsuke Path: trunk/hudson/main/core/src/main/java/hudson/scm/SubversionTagAction.java trunk/hudson/main/test/src/test/java/hudson/scm/SubversionSCMTest.java trunk/www/changelog.html http://fisheye4.cenqua.com/changelog/hudson/?cs=12323 Log: [FIXED JENKINS-2380] "Tag this build" link shouldn't show up in the navigation bar if the user doesn't have a permission.

    Code changed in hudson
    User: : kohsuke
    Path:
    trunk/hudson/main/core/src/main/java/hudson/scm/SubversionTagAction.java
    trunk/hudson/main/test/src/test/java/hudson/scm/SubversionSCMTest.java
    trunk/www/changelog.html
    http://fisheye4.cenqua.com/changelog/hudson/?cs=12323
    Log:
    [FIXED JENKINS-2380]
    "Tag this build" link shouldn't show up in the navigation bar if the user doesn't have a permission.

  3. removed
    bugFor changelog: Minor bug. Will be listed after features
    on Nov 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions