Clean up code around optional permissions #9275
Open
+28
−25
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Some cleanup around optional permissions:
permission
since onlyRun#ARTIFACTS
is supportedartifacts-index
view, the permission check was done outside ofl:layout
, which is what defines theh
variable. So, this permission check was not effective (note that it's not a vulnerability as theRun#ARTIFACTS
is not there to restrict the listing of artifacts but the access/download to them, see Clarify artifacts permission description #9276) .Testing done
I only tested the
artifacts-index
view as other changes are minimal.It can be reached by navigating to the endpoint
/job/myJob/1/artifacts-index
and require theRun#ARTIFACTS
permission to be enabled (Run.ARTIFACTS.enabled = true
on the script console)Before:
After:
Proposed changelog entries
N/A
Proposed upgrade guidelines
N/A
Submitter checklist
Desired reviewers
@daniel-beck
Before the changes are marked as
ready-for-merge
:Maintainer checklist