[jira] Updated: (CONTINUUM-1143) user with only 'project user' role can start a project-level build

["Teodoro Cue Jr. (JIRA)" <ji...@codehaus.org>]

     [ http://jira.codehaus.org/browse/CONTINUUM-1143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Teodoro Cue Jr. updated CONTINUUM-1143:
---------------------------------------

    Attachment: CONTINUUM-1143-continuum-webapp.patch

Patch attached.

> user with only 'project user' role can start a project-level build
> ------------------------------------------------------------------
>
>                 Key: CONTINUUM-1143
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1143
>             Project: Continuum
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 1.1
>            Reporter: Wendy Smoak
>         Assigned To: Teodoro Cue Jr.
>            Priority: Critical
>         Attachments: CONTINUUM-1143-continuum-webapp.patch
>
>
> The 'build now' icon for a project-level build is enabled for users without the developer role.
> See:  http://people.apache.org/~wsmoak/maven/continuum/continuum-project-user-role-can-build.jpg
> Here, the guest user has been given the 'project user' role and should not be able to start any builds.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira