Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[JENKINS-70703] Expose in the UI that the DownloadBundle permission is deprecated, as per SECURITY-2804 #444

Merged
merged 1 commit into from
Feb 28, 2023

Conversation

rkivisto
Copy link
Contributor

@rkivisto rkivisto commented Feb 28, 2023

JENKINS-70703

In https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2804 the Support/DownloadBundle permission was deprecated. The Overall/Administer permission is now required to download support bundles.
84ae1b3

This change exposes the deprecation in the UI when viewing the Permission.

Here is a screenshot showing the new alt-text using the https://plugins.jenkins.io/role-strategy/ plugin with mvn clean hpi:run:
Screen Shot 2023-02-28 at 11 26 12 AM

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • [ ] Ensure you have provided tests - that demonstrates feature works or fixes the issue

@rkivisto rkivisto requested a review from a team as a code owner February 28, 2023 15:56
@rkivisto rkivisto changed the title Expose in the UI that the DownloadBundle permission is deprecated as per SECURITY-2804 [JENKINS-70703] Expose in the UI that the DownloadBundle permission is deprecated as per SECURITY-2804 Feb 28, 2023
@rkivisto rkivisto changed the title [JENKINS-70703] Expose in the UI that the DownloadBundle permission is deprecated as per SECURITY-2804 [JENKINS-70703] Expose in the UI that the DownloadBundle permission is deprecated, as per SECURITY-2804 Feb 28, 2023
@Dohbedoh Dohbedoh merged commit c248605 into jenkinsci:master Feb 28, 2023
@rkivisto rkivisto deleted the deprecated-downloadbundle branch March 1, 2023 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants