Hello Jeff, > Was there a bug maybe that was fixed that allowed a user to call the schedule > api on a pipeline or pipeline group without needing at least "operator" > permissions?
Maybe it is this? <https://www.gocd.org/releases/#20-4-0> It says it was in 20.4.0. Other relevant conversations: <https://github.com/gocd/gocd/issues/4940> and <https://github.com/gocd/docs.go.cd/pull/437>. > Is there a way to create/set role permissions on a pipeline group using the > JSON config plugin? All my pipelines and pipeline groups are created via the > JSON plugin. No. I know there was discussion related to this. I think the consensus was, by doing that it will allow anyone with access to a config repository to add a pipeline in any group and give themselves permissions to the group. Something of that sort. Cheers, Aravind -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/go-cd/m2h7nrrbcl.fsf%40arvindsv.com.
