From 0643bd7f8c6f58b9ba40c98e4de2abd35ad183e8 Mon Sep 17 00:00:00 2001
From: Ryan Campbell <ryan.campbell@gmail.com>
Date: Thu, 31 May 2012 11:04:36 -0500
Subject: [PATCH] Require the Jenkins.RUN_SCRIPTS permission for the Maven
 Probe groovy execution

---
 maven-plugin/src/main/java/hudson/maven/MavenProbeAction.java | 2 +-
 .../resources/hudson/maven/MavenProbeAction/sidepanel.jelly   | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/maven-plugin/src/main/java/hudson/maven/MavenProbeAction.java b/maven-plugin/src/main/java/hudson/maven/MavenProbeAction.java
index e55e4545ed..dbf4acf2bb 100644
--- a/maven-plugin/src/main/java/hudson/maven/MavenProbeAction.java
+++ b/maven-plugin/src/main/java/hudson/maven/MavenProbeAction.java
@@ -99,7 +99,7 @@ public final class MavenProbeAction implements Action {
     public void doScript( StaplerRequest req, StaplerResponse rsp ) throws IOException, ServletException {
         // ability to run arbitrary script is dangerous,
         // so tie it to the admin access
-        owner.checkPermission(Jenkins.ADMINISTER);
+        owner.checkPermission(Jenkins.RUN_SCRIPTS);
 
         String text = req.getParameter("script");
         if(text!=null) {
diff --git a/maven-plugin/src/main/resources/hudson/maven/MavenProbeAction/sidepanel.jelly b/maven-plugin/src/main/resources/hudson/maven/MavenProbeAction/sidepanel.jelly
index 2b38fb7e93..b69b0b5e98 100644
--- a/maven-plugin/src/main/resources/hudson/maven/MavenProbeAction/sidepanel.jelly
+++ b/maven-plugin/src/main/resources/hudson/maven/MavenProbeAction/sidepanel.jelly
@@ -29,7 +29,9 @@ THE SOFTWARE.
       <l:task icon="images/24x24/document.gif" href="systemProperties" title="${%System Properties}" />
       <l:task icon="images/24x24/document.gif" href="envVars" title="${%Environment Variables}" />
       <l:task icon="images/24x24/document.gif" href="threads" title="${%Thread Dump}" />
-      <l:task icon="images/24x24/notepad.gif" href="script" title="${%Script Console}" />
+      <l:hasPermission permission="${app.RUN_SCRIPTS}">
+        <l:task icon="images/24x24/notepad.gif" href="script" title="${%Script Console}" />
+      </l:hasPermission>
     </l:tasks>
   </l:side-panel>
 </j:jelly>
\ No newline at end of file
-- 
GitLab