[JENKINS-70746] Fix missing permission error when processing changes (#…

…288)
jenkinsci · Mar 20, 2023 · dee7766 · dee7766
1 parent b9560d6
commit dee7766
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/src/main/java/io/jenkins/plugins/gitlabserverconfig/servers/GitLabServer.java b/src/main/java/io/jenkins/plugins/gitlabserverconfig/servers/GitLabServer.java
@@ -7,6 +7,7 @@
 import com.cloudbees.plugins.credentials.SystemCredentialsProvider;
 import com.cloudbees.plugins.credentials.common.StandardCredentials;
 import com.cloudbees.plugins.credentials.common.StandardListBoxModel;
+import com.cloudbees.plugins.credentials.domains.DomainRequirement;
 import edu.umd.cs.findbugs.annotations.CheckForNull;
 import edu.umd.cs.findbugs.annotations.NonNull;
 import hudson.Extension;
@@ -24,6 +25,7 @@
 import java.net.MalformedURLException;
 import java.net.URL;
 import java.security.SecureRandom;
+import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 import java.util.logging.Level;
@@ -374,9 +376,12 @@ public Secret getSecretToken() {
 
     private StringCredentials getWebhookSecretCredentials(String webhookSecretCredentialsId) {
         Jenkins jenkins = Jenkins.get();
-        jenkins.checkPermission(Jenkins.ADMINISTER);
-        return StringUtils.isBlank(webhookSecretCredentialsId) ? null : CredentialsMatchers.firstOrNull(
-            lookupCredentials(StringCredentials.class, jenkins),
+        return StringUtils.isBlank(webhookSecretCredentialsId) ? null
+                : CredentialsMatchers.firstOrNull(lookupCredentials(
+                        StringCredentials.class,
+                        jenkins,
+                        ACL.SYSTEM,
+                        new ArrayList<DomainRequirement>()),
             withId(webhookSecretCredentialsId)
         );
     }