hudson.security.AccessDeniedException2: anonymous is missing the Job/Configure permission

GitHub | v1v | 2 years ago
  1. 0

    GitHub comment 259#92322682

    GitHub | 2 years ago | v1v
    hudson.security.AccessDeniedException2: anonymous is missing the Job/Configure permission
  2. 0

    anonymous is missing the Overall/UploadPlugins permission

    GitHub | 2 years ago | xbeta
    hudson.security.AccessDeniedException2: anonymous is missing the Overall/UploadPlugins permission
  3. 0

    How to hook FLOW to an existing Jenkins instance ? : Flow

    zendesk.com | 4 months ago
    hudson.security.AccessDeniedException2: anonymous is missing the Overall/RunScripts permission
  4. Speed up your debug routine!

    Automated exception search integrated into your IDE

  5. 0

    Previously (Jenkins 1.534) we were using jenkins-cli to automate safe shutdown. But after upgrade to ver. 1.544 it stopped working. Our configuration uses Project-based Matrix Authorization Strategy. Here are 3 main users who involved into the shutdown procedure: * Anonymous - all permissions unset. * authenticated - Overall/Read, Job/Read, Job/Build * special jenkins-cli user - with Overall/Administer permission And here is the command to perform a safe shutdown {code} java -jar jenkins-cli.jar -s http://localhost:8080 safe-shutdown --username "$JCLIUSER" --password "$JCLIPASSWD" {code} So it has been working perfectly with the above configuration until I upgraded Jenkins to 1.544 Now the command throws the error {quote} hudson.security.AccessDeniedException2: anonymous is missing the Overall/Read permission at hudson.security.ACL.checkPermission(ACL.java:54) at hudson.model.Node.checkPermission(Node.java:418) at hudson.cli.declarative.CLIRegisterer$1.main(CLIRegisterer.java:180) at hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:622) at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:299) at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:280) at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:239) at hudson.remoting.UserRequest.perform(UserRequest.java:118) at hudson.remoting.UserRequest.perform(UserRequest.java:48) at hudson.remoting.Request$2.run(Request.java:328) at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72) at hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63) at hudson.remoting.InterceptingExecutorService$2.call(InterceptingExecutorService.java:95) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:701) {quote} Of course, if I grant the permission to Anonymous, it will work. But I assume this is unsafe.

    Jenkins JIRA | 3 years ago | Roman Shiryaev
    hudson.security.AccessDeniedException2: anonymous is missing the Overall/Read permission
  6. 0

    Previously (Jenkins 1.534) we were using jenkins-cli to automate safe shutdown. But after upgrade to ver. 1.544 it stopped working. Our configuration uses Project-based Matrix Authorization Strategy. Here are 3 main users who involved into the shutdown procedure: * Anonymous - all permissions unset. * authenticated - Overall/Read, Job/Read, Job/Build * special jenkins-cli user - with Overall/Administer permission And here is the command to perform a safe shutdown {code} java -jar jenkins-cli.jar -s http://localhost:8080 safe-shutdown --username "$JCLIUSER" --password "$JCLIPASSWD" {code} So it has been working perfectly with the above configuration until I upgraded Jenkins to 1.544 Now the command throws the error {quote} hudson.security.AccessDeniedException2: anonymous is missing the Overall/Read permission at hudson.security.ACL.checkPermission(ACL.java:54) at hudson.model.Node.checkPermission(Node.java:418) at hudson.cli.declarative.CLIRegisterer$1.main(CLIRegisterer.java:180) at hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:622) at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:299) at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:280) at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:239) at hudson.remoting.UserRequest.perform(UserRequest.java:118) at hudson.remoting.UserRequest.perform(UserRequest.java:48) at hudson.remoting.Request$2.run(Request.java:328) at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72) at hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63) at hudson.remoting.InterceptingExecutorService$2.call(InterceptingExecutorService.java:95) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:701) {quote} Of course, if I grant the permission to Anonymous, it will work. But I assume this is unsafe.

    Jenkins JIRA | 3 years ago | Roman Shiryaev
    hudson.security.AccessDeniedException2: anonymous is missing the Overall/Read permission

    Not finding the right solution?
    Take a tour to get the most out of Samebug.

    Tired of useless tips?

    Automated exception search integrated into your IDE

    Root Cause Analysis

    1. hudson.security.AccessDeniedException2

      anonymous is missing the Job/Configure permission

      at hudson.security.ACL.checkPermission()
    2. Hudson
      CliManagerImpl.main
      1. hudson.security.ACL.checkPermission(ACL.java:55)
      2. hudson.model.AbstractItem.checkPermission(AbstractItem.java:476)
      3. hudson.model.AbstractItem.updateByXml(AbstractItem.java:619)
      4. hudson.cli.UpdateJobCommand.run(UpdateJobCommand.java:47)
      5. hudson.cli.CLICommand.main(CLICommand.java:234)
      6. hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92)
      6 frames
    3. Java RT
      Method.invoke
      1. sun.reflect.GeneratedMethodAccessor385.invoke(Unknown Source)
      2. sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
      3. java.lang.reflect.Method.invoke(Method.java:606)
      3 frames
    4. Hudson :: Remoting Layer
      InterceptingExecutorService$1.call
      1. hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:309)
      2. hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:290)
      3. hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:249)
      4. hudson.remoting.UserRequest.perform(UserRequest.java:118)
      5. hudson.remoting.UserRequest.perform(UserRequest.java:48)
      6. hudson.remoting.Request$2.run(Request.java:328)
      7. hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72)
      7 frames
    5. Hudson
      CliManagerImpl$1.call
      1. hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63)
      1 frame
    6. Hudson :: Remoting Layer
      InterceptingExecutorService$2.call
      1. hudson.remoting.InterceptingExecutorService$2.call(InterceptingExecutorService.java:95)
      1 frame
    7. jenkins.util
      ContextResettingExecutorService$2.call
      1. jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46)
      1 frame
    8. Java RT
      Thread.run
      1. java.util.concurrent.FutureTask.run(FutureTask.java:262)
      2. java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      3. java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      4. java.lang.Thread.run(Thread.java:745)
      4 frames