jenkinsci / jenkinsci/gitlab-branch-source-plugin

[JENKINS-68166] GitLab Branch Source Plugin: Plugin does not honor project or folder ACLs

Open
#707 0 comments 0 reactions 0 assignees View on GitHub
component:gitlab-branch-source-plugin imported-jira-issue priority:blocker resolution:unresolved
Dominant language
Java
Stars
134
Forks
113
PR merge metrics
No merged PRs in 30d

Description

Create a new Multipipeline job. The user does not have global build permissions but does have permissions to create and build jobs in the sub folders

Expected Result:



  • See Available projects 

Result: 



  • see attached screenshot

  • The below error

****************************

Error while serving https://jenkins.wa.spectranetix.com:8443/job/ComScan/job/gitLab/descriptorByName/io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource/fillProjectPathItemshudson.security.AccessDeniedException3: c*************r is missing the Job/Build permission  at hudson.security.ACL.checkPermission(ACL.java:80)  at hudson.security.AccessControlled.checkPermission(AccessControlled.java:52)  at io.jenkins.plugins.gitlabserverconfig.servers.GitLabServer.getCredentials(GitLabServer.java:234)  at io.jenkins.plugins.gitlabbranchsource.helpers.GitLabHelper.apiBuilder(GitLabHelper.java:25)  at io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource$DescriptorImpl.doFillProjectPathItems(GitLabSCMSource.java:841)  at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:710)  at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:398)Caused: java.lang.reflect.InvocationTargetException  at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:402)  at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:410)  at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:208)  at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:141)  at org.kohsuke.stapler.MetaClass$11.doDispatch(MetaClass.java:558)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:694)  at org.kohsuke.stapler.Stapler.service(Stapler.java:240)  at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)  at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)  at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1626)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:157)  at org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:248)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at hudson.plugins.audit_trail.AuditTrailFilter.doFilter(AuditTrailFilter.java:112)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at jenkins.security.ResourceDomainFilter.doFilter(ResourceDomainFilter.java:81)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at jenkins.telemetry.impl.UserLanguages$AcceptLanguageFilter.doFilter(UserLanguages.java:129)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at io.jenkins.blueocean.ResourceCacheControl.doFilter(ResourceCacheControl.java:134)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at io.jenkins.blueocean.auth.jwt.impl.JwtAuthenticationFilter.doFilter(JwtAuthenticationFilter.java:60)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:160)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:154)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:94)  at jenkins.security.AcegiSecurityExceptionFilter.doFilter(AcegiSecurityExceptionFilter.java:52)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:54)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:122)  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:116)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:109)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:102)  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:93)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:219)  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:213)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110)  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80)  at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111)  at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548)  at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)  at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:578)  at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)  at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)  at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)  at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)  at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1434)  at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)  at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501)  at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)  at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)  at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1349)  at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)  at org.eclipse.jetty.server.handler.RequestLogHandler.handle(RequestLogHandler.java:54)  at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)  at org.eclipse.jetty.server.Server.handle(Server.java:516)  at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:388)  at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:633)  at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:380)  at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277)  at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)  at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)  at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.onFillable(SslConnection.java:555)  at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:410)  at org.eclipse.jetty.io.ssl.SslConnection$2.succeeded(SslConnection.java:164)  at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)  at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)  at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:386)  at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883)  at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034)  at java.base/java.lang.Thread.run(Thread.java:829)

---
Originally reported by cvanhoosear, imported from: GitLab Branch Source Plugin: Plugin does not honor project or folder ACLs


  • assignee: baymac
  • status: Open
  • priority: Blocker
  • component(s): gitlab-branch-source-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 20251216-182730

Raw content of original issue

Create a new Multipipeline job. The user does not have global build permissions but does have permissions to create and build jobs in the sub folders

Expected Result:



  • See Available projects 

Result: 



  • see attached screenshot

  • The below error

****************************
Error while serving https://jenkins.wa.spectranetix.com:8443/job/ComScan/job/gitLab/descriptorByName/io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource/fillProjectPathItemshudson.security.AccessDeniedException3: c*************r is missing the Job/Build permission  at hudson.security.ACL.checkPermission(ACL.java:80)  at hudson.security.AccessControlled.checkPermission(AccessControlled.java:52)  at io.jenkins.plugins.gitlabserverconfig.servers.GitLabServer.getCredentials(GitLabServer.java:234)  at io.jenkins.plugins.gitlabbranchsource.helpers.GitLabHelper.apiBuilder(GitLabHelper.java:25)  at io.jenkins.plugins.gitlabbranchsource.GitLabSCMSource$DescriptorImpl.doFillProjectPathItems(GitLabSCMSource.java:841)  at java.base/java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:710)  at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:398)Caused: java.lang.reflect.InvocationTargetException  at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:402)  at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:410)  at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:208)  at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:141)  at org.kohsuke.stapler.MetaClass$11.doDispatch(MetaClass.java:558)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.MetaClass$4.doDispatch(MetaClass.java:289)  at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:59)  at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:766)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:898)  at org.kohsuke.stapler.Stapler.invoke(Stapler.java:694)  at org.kohsuke.stapler.Stapler.service(Stapler.java:240)  at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)  at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)  at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1626)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:157)  at org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:248)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at hudson.plugins.audit_trail.AuditTrailFilter.doFilter(AuditTrailFilter.java:112)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at jenkins.security.ResourceDomainFilter.doFilter(ResourceDomainFilter.java:81)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at jenkins.telemetry.impl.UserLanguages$AcceptLanguageFilter.doFilter(UserLanguages.java:129)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at io.jenkins.blueocean.ResourceCacheControl.doFilter(ResourceCacheControl.java:134)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at io.jenkins.blueocean.auth.jwt.impl.JwtAuthenticationFilter.doFilter(JwtAuthenticationFilter.java:60)  at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)  at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:160)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:154)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:94)  at jenkins.security.AcegiSecurityExceptionFilter.doFilter(AcegiSecurityExceptionFilter.java:52)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at hudson.security.UnwrapSecurityExceptionFilter.doFilter(UnwrapSecurityExceptionFilter.java:54)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:122)  at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:116)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:109)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:102)  at org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter.doFilter(RememberMeAuthenticationFilter.java:93)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:219)  at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:213)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at jenkins.security.BasicHeaderProcessor.doFilter(BasicHeaderProcessor.java:97)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:110)  at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:80)  at hudson.security.HttpSessionContextIntegrationFilter2.doFilter(HttpSessionContextIntegrationFilter2.java:63)  at hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:99)  at hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:111)  at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:172)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:53)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:86)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.kohsuke.stapler.DiagnosticThreadNameFilter.doFilter(DiagnosticThreadNameFilter.java:30)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at jenkins.security.SuspiciousRequestFilter.doFilter(SuspiciousRequestFilter.java:38)  at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)  at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)  at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548)  at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)  at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:578)  at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)  at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235)  at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624)  at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)  at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1434)  at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)  at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501)  at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594)  at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)  at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1349)  at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)  at org.eclipse.jetty.server.handler.RequestLogHandler.handle(RequestLogHandler.java:54)  at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)  at org.eclipse.jetty.server.Server.handle(Server.java:516)  at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:388)  at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:633)  at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:380)  at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:277)  at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)  at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)  at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.onFillable(SslConnection.java:555)  at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:410)  at org.eclipse.jetty.io.ssl.SslConnection$2.succeeded(SslConnection.java:164)  at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)  at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:338)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:315)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:173)  at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)  at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:386)  at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883)  at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034)  at java.base/java.lang.Thread.run(Thread.java:829)

environment

```
Jenkins: 2.332.1

OS: VM Centos 8

Web Browser: Chrome

Java: Zulu open jdk 11

--------

JavaScript GUI Lib: ACE Editor bundle plugin (ace-editor): 1.1

* Active Directory plugin (active-directory): 2.25.1

* Analysis Model API Plugin (analysis-model-api): 10.9.1

* Ansible plugin (ansible): 1.1

* Ant Plugin (ant): 1.13

* OWASP Markup Formatter Plugin (antisamy-markup-formatter): 2.7

* Apache HttpComponents Client 4.x API Plugin (apache-httpcomponents-client-4-api): 4.5.13-1.0

* Artifactory Plugin (artifactory): 3.15.2

* Audit Trail (audit-trail): 3.10

* Authentication Tokens API Plugin (authentication-tokens): 1.4

* Authorize Project (authorize-project): 1.4.0

* Blue Ocean (blueocean): 1.25.2

* Autofavorite for Blue Ocean (blueocean-autofavorite): 1.2.4

* Bitbucket Pipeline for Blue Ocean (blueocean-bitbucket-pipeline): 1.25.2

* Common API for Blue Ocean (blueocean-commons): 1.25.2

* Config API for Blue Ocean (blueocean-config): 1.25.2

* Blue Ocean Core JS (blueocean-core-js): 1.25.2

* Dashboard for Blue Ocean (blueocean-dashboard): 1.25.2

* Display URL for Blue Ocean (blueocean-display-url): 2.4.1

* Events API for Blue Ocean (blueocean-events): 1.25.2

* Git Pipeline for Blue Ocean (blueocean-git-pipeline): 1.25.2

* GitHub Pipeline for Blue Ocean (blueocean-github-pipeline): 1.25.2

* i18n for Blue Ocean (blueocean-i18n): 1.25.2

* JWT for Blue Ocean (blueocean-jwt): 1.25.2

* Personalization for Blue Ocean (blueocean-personalization): 1.25.2

* Pipeline implementation for Blue Ocean (blueocean-pipeline-api-impl): 1.25.2

* Blue Ocean Pipeline Editor (blueocean-pipeline-editor): 1.25.2

* Pipeline SCM API for Blue Ocean (blueocean-pipeline-scm-api): 1.25.2

* REST API for Blue Ocean (blueocean-rest): 1.25.2

* REST Implementation for Blue Ocean (blueocean-rest-impl): 1.25.2

* Web for Blue Ocean (blueocean-web): 1.25.2

* Bootstrap 4 API Plugin (bootstrap4-api): 4.6.0-3

* Bootstrap 5 API Plugin (bootstrap5-api): 5.1.3-4

* bouncycastle API Plugin (bouncycastle-api): 2.25

* Branch API Plugin (branch-api): 2.7.0

* Build Blocker Plugin (build-blocker-plugin): 1.7.7

* Build Timeout (build-timeout): 1.20

* Caffeine API Plugin (caffeine-api): 2.9.2-29.v717aac953ff3

* Checks API plugin (checks-api): 1.7.2

* Bitbucket Branch Source Plugin (cloudbees-bitbucket-branch-source): 751.vda_24678a_f781

* CloudBees Disk Usage Simple Plugin (cloudbees-disk-usage-simple): 0.10

* Folders Plugin (cloudbees-folder): 6.17

* Code Coverage API Plugin (code-coverage-api): 2.0.4

* Command Agent Launcher Plugin (command-launcher): 1.6

* Conditional BuildStep (conditional-buildstep): 1.4.1

* Config File Provider Plugin (config-file-provider): 3.8.1

* Configuration as Code Plugin (configuration-as-code): 1.55.1

* Credentials Plugin (credentials): 2.6.1

* Credentials Binding Plugin (credentials-binding): 1.27.1

* DataTables.net API Plugin (data-tables-api): 1.11.3-6

* Display URL API (display-url-api): 2.3.5

* Docker Commons Plugin (docker-commons): 1.18

* Docker API Plugin (docker-java-api): 3.1.5.2

* Docker plugin (docker-plugin): 1.2.6

* Docker Swarm Plugin (docker-swarm): 1.11

* Docker Pipeline (docker-workflow): 1.27

* Durable Task Plugin (durable-task): 493.v195aefbb0ff2

* ECharts API Plugin (echarts-api): 5.2.2-2

* Email Extension Plugin (email-ext): 2.87

* Extended Read Permission Plugin (extended-read-permission): 3.2

* External Monitor Job Type Plugin (external-monitor-job): 191.v363d0d1efdf8

* Favorite (favorite): 2.3.3

* Font Awesome API Plugin (font-awesome-api): 5.15.4-5

* Forensics API Plugin (forensics-api): 1.7.0

* Git plugin (git): 4.10.3

* Git client plugin (git-client): 3.11.0

* GIT server Plugin (git-server): 1.10

* GitHub plugin (github): 1.34.1

* GitHub API Plugin (github-api): 1.301-378.v9807bd746da5

* GitHub Branch Source Plugin (github-branch-source): 2.11.4

* Gitlab API Plugin (gitlab-api): 1.0.6

* GitLab Branch Source Plugin (gitlab-branch-source): 1.5.9

* GitLab Plugin (gitlab-plugin): 1.5.27

* Gradle Plugin (gradle): 1.38

* JavaScript GUI Lib: Handlebars bundle plugin (handlebars): 3.0.8

* Handy Uri Templates 2.x API Plugin (handy-uri-templates-2-api): 2.1.8-1.0

* HTML Publisher plugin (htmlpublisher): 1.28

* InfluxDB Plugin (influxdb): 3.0.2

* Ivy Plugin (ivy): 2.1

* Jackson 2 API Plugin (jackson2-api): 2.13.1-246.va8a9f3eaf46a

* Javadoc Plugin (javadoc): 1.6

* JavaBeans Activation Framework (JAF) API (javax-activation-api): 1.2.0-2

* JavaMail API (javax-mail-api): 1.6.2-5

* Oracle Java SE Development Kit Installer Plugin (jdk-tool): 1.5

* Design Language (jenkins-design-language): 1.25.2

* Jersey 2 API (jersey2-api): 2.35-3

* Java JSON Web Token (JJWT) Plugin (jjwt-api): 0.11.2-9.c8b45b8bb173

* Job Restrictions Plugin (job-restrictions): 0.8

* Job Configuration History Plugin (jobConfigHistory): 2.31-rc1098.b666422863b2

* JQuery3 API Plugin (jquery3-api): 3.6.0-2

* JSch dependency plugin (jsch): 0.1.55.2

* JUnit Plugin (junit): 1.53

* LDAP Plugin (ldap): 2.7

* Lockable Resources plugin (lockable-resources): 2.13

* Mailer Plugin (mailer): 408.vd726a_1130320

* MapDB API Plugin (mapdb-api): 1.0.9.0

* Matrix Authorization Strategy Plugin (matrix-auth): 3.0.1

* Matrix Project Plugin (matrix-project): 1.20

* Maven Integration plugin (maven-plugin): 3.16

* JavaScript GUI Lib: Moment.js bundle plugin (momentjs): 1.1.1

* OkHttp Plugin (okhttp-api): 4.9.3-105.vb96869f8ac3a

* PAM Authentication plugin (pam-auth): 1.6.1

* Parameterized Trigger plugin (parameterized-trigger): 2.43

* Pipeline: Build Step (pipeline-build-step): 2.15

* Pipeline: GitHub Groovy Libraries (pipeline-github-lib): 36.v4c01db_ca_ed16

* Pipeline Graph Analysis Plugin (pipeline-graph-analysis): 1.11

* Pipeline: Input Step (pipeline-input-step): 446.vf27b_0b_83500e

* Pipeline: Milestone Step (pipeline-milestone-step): 1.3.2

* Pipeline: Model API (pipeline-model-api): 1.9.3

* Pipeline: Declarative (pipeline-model-definition): 1.9.3

* Pipeline: Declarative Extension Points API (pipeline-model-extensions): 1.9.3

* Pipeline: REST API Plugin (pipeline-rest-api): 2.21

* Pipeline: Stage Step (pipeline-stage-step): 291.vf0a8a7aeeb50

* Pipeline: Stage Tags Metadata (pipeline-stage-tags-metadata): 1.9.3

* Pipeline: Stage View Plugin (pipeline-stage-view): 2.21

* Plain Credentials Plugin (plain-credentials): 1.8

* Plugin Utilities API Plugin (plugin-util-api): 2.13.0

* Popper.js API Plugin (popper-api): 1.16.1-2

* Popper.js 2 API Plugin (popper2-api): 2.11.2-1

* Prism API Plugin (prism-api): 1.25.0-2

* Infrastructure plugin for Publish Over X (publish-over): 0.22

* Publish Over SSH (publish-over-ssh): 1.22

* Pub-Sub light Bus (pubsub-light): 1.16

* Resource Disposer Plugin (resource-disposer): 0.17

* Role-based Authorization Strategy (role-strategy): 3.2.0

* Run Condition Plugin (run-condition): 1.5

* Safe Restart Plugin (saferestart): 0.3

* SCM API Plugin (scm-api): 595.vd5a_df5eb_0e39

* Script Security Plugin (script-security): 1131.v8b_b_5eda_c328e

* Snakeyaml API Plugin (snakeyaml-api): 1.29.1

* SonarQube Scanner for Jenkins (sonar): 2.14

* Server Sent Events (SSE) Gateway Plugin (sse-gateway): 1.24

* SSH Agent Plugin (ssh-agent): 1.24.1

* SSH Credentials Plugin (ssh-credentials): 1.19

* SSH Build Agents plugin (ssh-slaves): 1.33.0

* SSH server (sshd): 3.1.0

* Structs Plugin (structs): 308.v852b473a2b8c

* Subversion Plug-in (subversion): 2.15.2

* ThinBackup (thinBackup): 1.10

* Timestamper (timestamper): 1.16

* Token Macro Plugin (token-macro): 267.vcdaea6462991

* Trilead API Plugin (trilead-api): 1.0.13

* Variant Plugin (variant): 1.4

* Warnings Next Generation Plugin (warnings-ng): 9.11.0

* WMI Windows Agents Plugin (windows-slaves): 1.8

* Pipeline (workflow-aggregator): 2.6

* Pipeline: API (workflow-api): 1136.v7f5f1759dc16

* Pipeline: Basic Steps (workflow-basic-steps): 2.24

* Pipeline: Groovy (workflow-cps): 2648.va9433432b33c

* Pipeline: Shared Groovy Libraries (workflow-cps-global-lib): 2.21

* Pipeline: Nodes and Processes (workflow-durable-task-step): 2.40

* Pipeline: Job (workflow-job): 1145.v7f2433caa07f

* Pipeline: Multibranch (workflow-multibranch): 706.vd43c65dec013

* Pipeline: SCM Step (workflow-scm-step): 2.13

* Pipeline: Step API (workflow-step-api): 622.vb_8e7c15b_c95a_

* Pipeline: Supporting APIs (workflow-support): 813.vb_d7c3d2984a_0

* Workspace Cleanup Plugin (ws-cleanup): 0.40

```

1 attachment

- [Jenkins_gitlab_error.png](https://issues.jenkins.io/secure/attachment/57588/Jenkins_gitlab_error.png)
> ![Jenkins_gitlab_error.png](https://issues.jenkins.io/secure/attachment/57588/Jenkins_gitlab_error.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.