Permissions to allow users to add jobs with copy, but not edit folder

Using Jenkins Ask a question
1

I believe this was working previously (about 2 months ago), but no longer works, perhaps due to a change in Jenkins.

I want to allow users to add and configure jobs in a folder, but not rename or delete the folder. I have granted users all permissions on the folder except:

  • Job / Configure
  • Job / Delete

When my users try and create a new item in the folder it works.

However if they specify they want to create a new item and copy from another item they get the error that they need the permission Job / Configure.
I checked and the job they are copying from has the Job / Configure permission enabled for the user as well.

Is it the case that they need this permission on the folder or is this because Jenkins is doing something with the copy and not granting the Job / Configure permission to the destination of the copied job like it does with a new item?

I’m currently using Jenkins 2.479.1.

2

Could you check to see if the same problem is visible on Jenkins 2.485? A Stapler routing change was introduced in Jenkins 2.475 for item creation. It has been fixed in 2.485 and will be fixed in 2.479.2 when it releases 27 Nov 2024. More details are available in the pull request.

3

This is a production instance, so I’d rather not run a non-LTS release on it. Once the LTS comes out I can test then.

4

I was thinking that you could create a separate disposable instance that duplicates your environment outside the production environment.

5

I received the Jenkins update to 2.479.2 on my production system this week. I had the user test and they are still receiving the same error.

6

Thanks. That means the issue was not related to the Stapler routing fix that was included in 2.479.2. Your best path is to submit a bug report to issues.jenkins.io with enough information so that others can duplicate the problem. “How to report an issue” provides a detailed list of things to include in the bug report.

7

Issue reported at Loading...