[JIRA] [authorize-project-plugin] (JENKINS-28298) Can bypass the security check of authorize-project with CLI and REST of Jenkins 1.580.1

[de...@ikedam.jp (JIRA)]

Title: Message Title

ikedam created an issue   Jenkins / JENKINS-28298 Can bypass the security check of authorize-project with CLI and REST of Jenkins 1.580.1 Issue Type: Bug Assignee: ikedam Components: authorize-project-plugin Created: 07/May/15 10:23 PM Environment: Jenkins 1.580.1 authorize-project 1.0.3 Priority: Major Reporter: ikedam When running tests of authorize-project with Jenkins 1.580.1, tests failed as following: SpecificUsersAuthorizationStrategyTest.testCliFailure:689 Values should be different. Actual: 0 SpecificUsersAuthorizationStrategyTest.testRestInterfaceFailure:525 null This might mean you can bypass the security checks of authorize-project. Add Comment   This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.