How is a brand new user able to deploy to live?

[Dave Grandon]

I have just created a user in Jira who is in no groups yet he can deploy to our Live environment surely they should not be able to do anything!!

[Eduardo Alvarenga]

Hello @Dave Grandon

Have you checked the user permissions in Bamboo? Perhaps that user has no permission in Jira but it is assigned to a group in Bamboo that has.

Cheers,

Eduardo Alvarenga
Atlassian Support APAC

--please don't forget to Accept the answer if the reply is helpful-- 

[Dave Grandon]

Hi @Eduardo Alvarenga ,

Thanks for the reply but that does not answer the question, as I said I have just created the user in Jira and not touched Bamboo other than to try a deployment so how could  that user have any permissions. We only create our users in  Jira.

Cheers

Dave

[Eduardo Alvarenga]

Hello @Dave Grandon

You haven't described how your Bamboo user base is configured. As you mentioned Jira, I assumed you are using Jira as the user database. You also have not provided any detail about how the deployment is being triggered (the integration).

If that's not the case, you will have to check how the integration between Jira and Bamboo is configured. Have you checked if that user is part of the Bamboo user base?

Sincerely,

Eduardo Alvarenga
Atlassian Support APAC 

[Dave Grandon]

Yes, we create all our users in Jira and assign groups where necessary on Jira too, our Bamboo deployment is normally triggered Monday to Thursday at 20:15 and the requirement is for only members of the DevOps group to be able to deploy outside that schedule. As I said in my previous reply the new user is currently not in ANY group(s), unless that happens without any sign or notification. This is to ensure we meet a certification standard so is very important that this issue is sorted

[Eduardo Alvarenga]

Hello @Dave Grandon

Bamboo does not share the same rules and permissions as Jira and it will not necessarily follow them unless manually configured. You have to check the Deployment Environment permission in Bamboo and understand if that same restriction for groups is also implemented there.

• Permissions for deployment environments

As this involves certification, has a time urgency and is a business requirement I recommend you reach out to Atlassian Support looking to get it sorted as soon as possible.

Please access https://support.atlassian.com/contact, and fill in a case with us. You need a valid/active Bamboo SEN.

Thank you,

Eduardo Alvarenga
Atlassian Support APAC

--please don't forget to Accept the answer if the reply is helpful--