[JIRA] (JENKINS-15277) Check view permissions before showing config page

vjuranek created JENKINS-15277

Check view permissions before showing config page

Issue Type:	Bug
Assignee:	vjuranek
Components:	core
Created:	22/Sep/12 9:45 AM
Description:	In case of views, permissions are checked during form submission allowing to show config page also for unauthorized users.
Project:	Jenkins
Priority:	Major
Reporter:	vjuranek

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

SCM/JIRA link daemon commented on JENKINS-15277

Check view permissions before showing config page

Code changed in jenkins User: Vojtech Juranek Path: core/src/main/resources/hudson/model/View/configure.jelly http://jenkins-ci.org/commit/jenkins/452f4f1c74dd8369644218cd808a16a6376b728b Log: [Fixed JENKINS-15277] Check permissions before showing config page as we did in all other cases

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

vjuranek updated JENKINS-15277

Check view permissions before showing config page

Change By:	vjuranek (22/Sep/12 10:08 AM)
Priority:	Major Critical

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

vjuranek commented on JENKINS-15277

Check view permissions before showing config page

Changed to critical to spot it when searching for LTS backports, as it has some security consequences.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

vjuranek resolved JENKINS-15277 as Fixed

Check view permissions before showing config page

Change By:	vjuranek (22/Sep/12 10:10 AM)
Status:	Open Resolved
Resolution:	Fixed

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

dogfood commented on JENKINS-15277

Check view permissions before showing config page

Integrated in jenkins_main_trunk #1947 [Fixed JENKINS-15277] Check permissions before showing config page as we did in all other cases (Revision 452f4f1c74dd8369644218cd808a16a6376b728b) Result = SUCCESS Vojtech Juranek : 452f4f1c74dd8369644218cd808a16a6376b728b Files : core/src/main/resources/hudson/model/View/configure.jelly

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira