jenkinsci / build-monitor-plugin

Jenkins Build Monitor Plugin
https://plugins.jenkins.io/build-monitor-plugin/
MIT License
725 stars 279 forks source link

Unable to display the jobs when not authenticated #6

Closed beraneck closed 9 years ago

beraneck commented 11 years ago

Hello !

The build monitor view works perfectly when I'm authenticated. But It only shows the title and settings button when I'm not authenticated. On our server, anonymous users can see the jobs on the standard Jenkins UI.

Our configuration : Jenkins ver. 1.526 Authentication is done by Atlassian Crowd with matrix based access right.

Anonymous users have the following rights : Global : read Slave : nothing Job : read + discover Views : Read Version : nothing

Thanks Best Regards Nicolas

jan-molak commented 11 years ago

Hi, you're right, it looks like Jenkins returns a 404 if you try to access build monitor as an anonymous user with the setup you described. I'll have a look into this issue, cheers for reporting that.

jan-molak commented 10 years ago

It looks like a possible issue with the Jenkins Crowd 2 plugin filtering out the request, combined with the fact that Jenkins itself returns 404 rather than 401 when there's a problem with authentication/authorisation (https://issues.jenkins-ci.org/browse/JENKINS-8214). I'll need to check if there's any AJAX-based Jenkins plugin that managed to overcome this issue.

It seems like even though I've given all the possible permissions to the "Anonymous", Crowd plugin (?) still filters out the request because of the lack of the auth token? https://github.com/jenkinsci/crowd2-plugin/blob/master/src/main/java/de/theit/jenkins/crowd/CrowdServletFilter.java#L146

I'll try to contact @theit, who's the author of the Crowd Plugin

jan-molak commented 10 years ago

Hi @beraneck, there's been several releases of the Crowd 2 Plugin since we last spoke. Are you still experiencing the issue you described using the latest builds of Build Monitor and Crowd 2 plugins?

Looking forward to hearing from you!

jan-molak commented 9 years ago

Closing the ticket as it seems that the described problem is solved with an upgraded Crowd2 plugin.