jenkinsci / jenkinsci/credentials-plugin
[JENKINS-65090] withCredentials is not honoring authorization role base strategy
- Dominant language
- Java
- Stars
- 134
- Forks
- 258
- Avg merge
- 48m
- Merged PRs (30d)
- 1
Description
When using withCredentials in a pipeline job the operation is successful even if the user don't have the Credentials Read policy.
In my option users who don't have permission to read credentials shouldn't be able the read them in a job either.
---
Originally reported by oribenhur, imported from: withCredentials is not honoring authorization role base strategy
Raw content of original issue
When using withCredentials in a pipeline job the operation is successful even if the user don't have the Credentials Read policy.
In my option users who don't have permission to read credentials shouldn't be able the read them in a job either.
environment
```
Jenkins 2.277.1
Role-based Authorization Strategy 3.1
Jenkins on GKE (kube version 1.17)
```
Contributor guide
Assessment
This issue has not been assessed yet.