Does bamboo cache permissions?

[Dave Grandon]

Hi all, I have been asked to lock down our LIVE deployment so only members of the DevOps group can deploy to our Live environment. I thought this would be easy :-

1. Create DevOps group
2. Assign users to that group
3. Adjust environment permissions so that only DevOps group has Deploy permission ticked

However despite this tie down, I can still deploy (and yes other team mates can) despite not being in the DevOps group.

Any hints or helpful information gratefully received.

Cheers

[Eduardo Alvarenga]

Hello @Dave Grandon

Welcome to Atlassian Community!

Bamboo has cached permissions but once they are modified, the cache is notified and updated.

To confirm your permissions settings are correct, have you restarted Bamboo after applying the changes? In case non-DevOps members are still able to deploy, you will have to double-check each Deployment Project and every Environment permission as those are distinct sets or rules.

Also, validate if the non-DevOps users are Admins as they will be able to deploy regardless of their Project/Environment clearance.

Kind regards,

Eduardo Alvarenga
Atlassian Support APAC

--please don't forget to Accept the answer if the reply is helpful--