[JIRA] (JENKINS-55772) No access without Overall/Read

[jenk...@mockies.de (JIRA)]

Title: Message Title

Christoph Vogtländer created an issue   Jenkins / JENKINS-55772 No access without Overall/Read Issue Type: Bug Assignee: Unassigned Components: core Created: 2019-01-25 01:06 Environment: Jenkins ver. 2.150.2 Matrix Authorization Strategy Plugin 2.3 Role-based Authorization Strategy 2.9.0 Priority: Major Reporter: Christoph Vogtländer An authenticated user is not able to access a job even if job read/discover permission is granted. Jenkins will simply show   Access Denied <user> is missing the Overall/Read permission But, with overall/read permission the user is able to access ALL jobs (and views), which contradicts the project based matrix authorization or role based authorization strategy (when using project roles).   With these strategies it should be possible to deny overall read and allow only access to specific jobs. Even adding job discover/read permission in global context will not give an authenticated user read access to a job. Tested with Matrix Authorization Strategy and Role-based Authorization Strategy. Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.