[ http://jira.codehaus.org/browse/CONTINUUM-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Teodoro Cue Jr. updated CONTINUUM-1143: --------------------------------------- Attachment: CONTINUUM-1143-continuum-webapp.patch Patch attached. > user with only 'project user' role can start a project-level build > ------------------------------------------------------------------ > > Key: CONTINUUM-1143 > URL: http://jira.codehaus.org/browse/CONTINUUM-1143 > Project: Continuum > Issue Type: Bug > Components: Security > Affects Versions: 1.1 > Reporter: Wendy Smoak > Assigned To: Teodoro Cue Jr. > Priority: Critical > Attachments: CONTINUUM-1143-continuum-webapp.patch > > > The 'build now' icon for a project-level build is enabled for users without > the developer role. > See: > http://people.apache.org/~wsmoak/maven/continuum/continuum-project-user-role-can-build.jpg > Here, the guest user has been given the 'project user' role and should not be > able to start any builds. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira