jenkinsci / jenkinsci/credentials-plugin

[JENKINS-65090] withCredentials is not honoring authorization role base strategy

Open
#887 3 comments 0 reactions 0 assignees View on GitHub
component:credentials-binding-plugin component:credentials-plugin imported-jira-issue priority:minor resolution:unresolved
Dominant language
Java
Stars
134
Forks
258
Avg merge
48m
Merged PRs (30d)
1

Description

When using withCredentials in a pipeline job the operation is successful even if the user don't have the Credentials Read policy.

In my option users who don't have permission to read credentials shouldn't be able the read them in a job either.   

---
Originally reported by oribenhur, imported from: withCredentials is not honoring authorization role base strategy


  • status: Open
  • priority: Minor
  • component(s): credentials-binding-plugin, credentials-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 2
  • imported: 2025-12-08

Raw content of original issue

When using withCredentials in a pipeline job the operation is successful even if the user don't have the Credentials Read policy.

In my option users who don't have permission to read credentials shouldn't be able the read them in a job either.   

environment

```
Jenkins 2.277.1

Role-based Authorization Strategy 3.1

Jenkins on GKE (kube version 1.17)
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.