[JIRA] (JENKINS-57267) Rebuild's "Remember Password" remembers non-stored Password Parameters

[matthew.k.sm...@viasat.com (JIRA)]

Title: Message Title

Matthew Smith created an issue   Jenkins / JENKINS-57267 Rebuild's "Remember Password" remembers non-stored Password Parameters Issue Type: Bug Assignee: ragesh_nair Attachments: password_remember.PNG Components: mask-passwords-plugin, rebuild-plugin Created: 2019-04-30 23:05 Environment: Jenkins 2.164.1 Rebuild Plugin 1.29 Mask Passwords Plugin 2.12.0 Labels: rebuild mask-passwords Priority: Minor Reporter: Matthew Smith When Jenkins is configured to remember passwords on a Rebuild, it remembers Non-Stored Password Parameters as well as normal Password Parameters. According to the description of the configuration option, it should not remember Non-Stored Passwords: If the remember password option is checked, the rebuild plugin will use the stored password parameter when a rebuild is triggered. If the remember password option is unchecked, the user will be prompted to enter the password every time a rebuild is triggered. This only applies for a parameterized build with parameters of type password. A simple test shows that this option also remembers Non-Stored Password Parameters. 1. Set up a simple job with a Non-Stored Password Parameter Example code: node("master") { println(params.PASSWORD) } 2. Build the job once as User A with parameter "test" 3. See "test" printed to console 4. Rebuild the first build 5. See "test" printed to console 6. Switch to User B 7. Rebuild the build 8. See "test" printed to console The Non-Stored Password should not persist across Rebuilds. Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.