[FIXED JENKINS-25400] Rework fix of JENKINS-22769 (c04cdcd9) to put the burden...

[FIXED JENKINS-25400] Rework fix of JENKINS-22769 (c04cdcd9) to put the burden on each listener to impersonate ACL.SYSTEM if it needs to.

changelog.html

@@ -55,6 +55,9 @@ Upcoming changes</a>
 <!-- Record your changes in the trunk here. -->
 <div id="trunk" style="display:none"><!--=TRUNK-BEGIN=-->
 <ul class=image>
+  <li class=bug>
+    Some plugins broken since 1.584 if they expected certain events to be fired under a specific user ID.
+    (<a href="https://issues.jenkins-ci.org/browse/JENKINS-25400">issue 25400</a>)
   <li class=bug>
     Fixed various real or potential resource leaks.
     (<a href="https://github.com/jenkinsci/jenkins/pull/1434">pull request 1434</a>)  

core/src/main/java/hudson/model/Fingerprint.java

@@ -39,6 +39,7 @@ import hudson.BulkChange;
 import hudson.Extension;
 import hudson.model.listeners.ItemListener;
 import hudson.model.listeners.SaveableListener;
+import hudson.security.ACL;
 import hudson.util.AtomicFileWriter;
 import hudson.util.HexBinaryConverter;
 import hudson.util.Iterators;
@@ -729,7 +730,14 @@ public class Fingerprint implements ModelObject, Saveable {
     @Extension
     public static final class ProjectRenameListener extends ItemListener {
         @Override
-        public void onLocationChanged(Item item, String oldName, String newName) {
+        public void onLocationChanged(final Item item, final String oldName, final String newName) {
+            ACL.impersonate(ACL.SYSTEM, new Runnable() {
+                @Override public void run() {
+                    locationChanged(item, oldName, newName);
+                }
+            });
+        }
+        private void locationChanged(Item item, String oldName, String newName) {
             if (item instanceof AbstractProject) {
                 AbstractProject p = Jenkins.getInstance().getItemByFullName(newName, AbstractProject.class);
                 if (p != null) {

core/src/main/java/hudson/model/ListView.java

@@ -29,6 +29,7 @@ import hudson.Util;
 import hudson.diagnosis.OldDataMonitor;
 import hudson.model.Descriptor.FormException;
 import hudson.model.listeners.ItemListener;
+import hudson.security.ACL;
 import hudson.util.CaseInsensitiveComparator;
 import hudson.util.DescribableList;
 import hudson.util.FormValidation;
@@ -431,7 +432,14 @@ public class ListView extends View implements DirectlyModifiableView {
 
     @Restricted(NoExternalUse.class)
     @Extension public static final class Listener extends ItemListener {
-        @Override public void onLocationChanged(Item item, String oldFullName, String newFullName) {
+        @Override public void onLocationChanged(final Item item, final String oldFullName, final String newFullName) {
+            ACL.impersonate(ACL.SYSTEM, new Runnable() {
+                @Override public void run() {
+                    locationChanged(item, oldFullName, newFullName);
+                }
+            });
+        }
+        private void locationChanged(Item item, String oldFullName, String newFullName) {
             final Jenkins jenkins = Jenkins.getInstance();
             for (View view: jenkins.getViews()) {
                 if (view instanceof ListView) {
@@ -469,7 +477,14 @@ public class ListView extends View implements DirectlyModifiableView {
             }
         }
 
-        @Override public void onDeleted(Item item) {
+        @Override public void onDeleted(final Item item) {
+            ACL.impersonate(ACL.SYSTEM, new Runnable() {
+                @Override public void run() {
+                    deleted(item);
+                }
+            });
+        }
+        private void deleted(Item item) {
             final Jenkins jenkins = Jenkins.getInstance();
             for (View view: jenkins.getViews()) {
                 if (view instanceof ListView) {

core/src/main/java/hudson/model/listeners/ItemListener.java

@@ -31,8 +31,10 @@ import hudson.model.Item;
 import hudson.model.ItemGroup;
 import hudson.model.Items;
 import hudson.security.ACL;
+import java.util.List;
 import java.util.logging.Level;
 import java.util.logging.Logger;
+import jenkins.security.NotReallyRoleSensitiveCallable;
 
 /**
  * Receives notifications about CRUD operations of {@link Item}.
@@ -158,9 +160,7 @@ public class ItemListener implements ExtensionPoint {
     }
 
     // TODO JENKINS-21224 generalize this to a method perhaps in ExtensionList and use consistently from all listeners
-    private static void forAll(final /* java.util.function.Consumer<ItemListener> */Function<ItemListener,Void> consumer, boolean asSystem) {
-        Runnable r = new Runnable() {
-            @Override public void run() {
+    private static void forAll(final /* java.util.function.Consumer<ItemListener> */Function<ItemListener,Void> consumer) {
         for (ItemListener l : all()) {
             try {
                 consumer.apply(l);
@@ -169,13 +169,6 @@ public class ItemListener implements ExtensionPoint {
             }
         }
     }
-        };
-        if (asSystem) {
-            ACL.impersonate(ACL.SYSTEM, r);
-        } else {
-            r.run();
-        }
-    }
 
     public static void fireOnCopied(final Item src, final Item result) {
         forAll(new Function<ItemListener,Void>() {
@@ -183,7 +176,7 @@ public class ItemListener implements ExtensionPoint {
                 l.onCopied(src, result);
                 return null;
             }
-        }, true);
+        });
     }
 
     public static void fireOnCreated(final Item item) {
@@ -192,7 +185,7 @@ public class ItemListener implements ExtensionPoint {
                 l.onCreated(item);
                 return null;
             }
-        }, true);
+        });
     }
 
     public static void fireOnUpdated(final Item item) {
@@ -201,7 +194,7 @@ public class ItemListener implements ExtensionPoint {
                 l.onUpdated(item);
                 return null;
             }
-        }, true);
+        });
     }
 
     /** @since 1.548 */
@@ -211,7 +204,7 @@ public class ItemListener implements ExtensionPoint {
                 l.onDeleted(item);
                 return null;
             }
-        }, true);
+        });
     }
 
     /**
@@ -221,13 +214,6 @@ public class ItemListener implements ExtensionPoint {
      * @since 1.548
      */
     public static void fireLocationChange(final Item rootItem, final String oldFullName) {
-        ACL.impersonate(ACL.SYSTEM, new Runnable() {
-            @Override public void run() {
-                doFireLocationChange(rootItem, oldFullName);
-            }
-        });
-    }
-    private static void doFireLocationChange(final Item rootItem, final String oldFullName) {
         String prefix = rootItem.getParent().getFullName();
         if (!prefix.isEmpty()) {
             prefix += '/';
@@ -244,16 +230,20 @@ public class ItemListener implements ExtensionPoint {
                     l.onRenamed(rootItem, oldName, newName);
                     return null;
                 }
-            }, false);
+            });
         }
         forAll(new Function<ItemListener, Void>() {
             @Override public Void apply(ItemListener l) {
                 l.onLocationChanged(rootItem, oldFullName, newFullName);
                 return null;
             }
-        }, false);
+        });
         if (rootItem instanceof ItemGroup) {
-            for (final Item child : Items.getAllItems((ItemGroup) rootItem, Item.class)) {
+            for (final Item child : ACL.impersonate(ACL.SYSTEM, new NotReallyRoleSensitiveCallable<List<Item>,RuntimeException>() {
+                @Override public List<Item> call() {
+                    return Items.getAllItems((ItemGroup) rootItem, Item.class);
+                }
+            })) {
                 final String childNew = child.getFullName();
                 assert childNew.startsWith(newFullName);
                 assert childNew.charAt(newFullName.length()) == '/';
@@ -263,7 +253,7 @@ public class ItemListener implements ExtensionPoint {
                         l.onLocationChanged(child, childOld, childNew);
                         return null;
                     }
-                }, false);
+                });
             }
         }
     }

core/src/main/java/hudson/tasks/BuildTrigger.java

@@ -406,7 +406,14 @@ public class BuildTrigger extends Recorder implements DependencyDeclarer {
         @Extension
         public static class ItemListenerImpl extends ItemListener {
             @Override
-            public void onLocationChanged(Item item, String oldFullName, String newFullName) {
+            public void onLocationChanged(final Item item, final String oldFullName, final String newFullName) {
+                ACL.impersonate(ACL.SYSTEM, new Runnable() {
+                    @Override public void run() {
+                        locationChanged(item, oldFullName, newFullName);
+                    }
+                });
+            }
+            private void locationChanged(Item item, String oldFullName, String newFullName) {
                 // update BuildTrigger of other projects that point to this object.
                 // can't we generalize this?
                 for( Project<?,?> p : Jenkins.getInstance().getAllItems(Project.class) ) {