Jenkins Replay Option Disabling

[Vishnu-Priya05]

Jenkins and plugins versions report

Jenkins: Chart Version: jenkins-4.5.0 App Version: 2.401.3

Steps taken:

  JCasC:
    configScripts:
      azure-ad-settings: |
        jenkins:
          securityRealm:
            azure:
              cacheDuration: 0
              clientId: ${appId}
              clientSecret: ${password}
              tenant: ${tenant}
          authorizationStrategy:
            azureAdMatrix:
              permissions:

In the above controller config, removed the Run/ Replay option permission.

Even after removing the permission, I'm able to use the replay option.

What Operating System are you using (both controller, and any agents involved in the problem)?

N/A

Reproduction steps

N/A

Expected Results

Replay option should be disabled.

Actual Results

Even after removing the in the code, the replay option is still available.

Anything else?

No response

Are you interested in contributing a fix?

No response

[Vishnu-Priya05]

Hi,

Do we have any update? Can someone look into it?

[timja]

I would suggest reconfiguring in the UI and exporting the permissions you want then store them in your helm chart configuration.

[Vishnu-Priya05]

@timja What do you exactly mean by reconfiguring in the UI?

[timja]

On the security page setup the configuration you want and then go to the Configuration as Code page and export the configuration, copying out what you need, I expect the configuration you are using isn't quite right and you can export the correct configuration.

[Vishnu-Priya05]

As mentioned above, I have made the configurations properly. I have removed the Job/ Build, Job/ Configure and Run/Replay configurations from the respective group. Attaching the screenshot for your reference.

Even after removing the permissions from that group, I'm still able to use the Replay option.

Is there anything we need to check with the Azure AD team?

[timja]

Untick Administer it's a special permission that will grant everything else, even if you've somehow managed to untick it, it won't do anything.