'User is missing the Overall/Read permission' error with Jenkins GitHub OAuth Plugin

Question

I\'m using the github oauth plugin for our logins but for all of our users in the Organisation I get an error:

Access Denied

 is missing the Ov         


        

Answer 1

We hit this same error when a github organization administrator changed the organization's settings for "Third-party access" to "restrict third-party application access". Reverting to the previous settings within the github organization resolved the problem.

See github oauth-app-access-restrictions for details on how to configure that properly.

Answer 2

I had the same problem with "... is missing the Overall/Read permission" on Jenkins (1.651.2) with activated Credentials Plugin.

But it was my own failure: I only configured the user on project side (by credential plugin) but missed to configure the global security.

So I fixed it by selecting:

Jenkins -> Manage Jenkins -> Configure Global Security

And did setup missing global settings (or project matrix based one)

Answer 3

I had exactly the same problem and adding the plugin Role Strategy Plugin fixed the problem.

All I had to do was install the plugin, create two groups - admin / developer and then add users to the groups.

A much much better solution than recreating the whole permissions matrix :)

Answer 4

I had the same problem here, but it affected only some users, not all of them. Anyway, you should check public organization membership : documentation of the plugin states that "You have to be a public member of the organization for the authorization to work correctly." (https://wiki.jenkins-ci.org/display/JENKINS/Github+OAuth+Plugin).

Follow instructions from GitHub (https://help.github.com/articles/publicizing-or-hiding-organization-membership/) in order to make organization membership public, and this might fix your issue.

Answer 5

Fix it by these 2 shell commands on the server (sudo permission is required):

sudo ex +g/useSecurity/d +g/authorizationStrategy/d -scwq /var/lib/jenkins/config.xml
sudo /etc/init.d/jenkins restart

This will remove useSecurity and authorizationStrategy lines from your config file.

See also: Disable security at Jenkins website

Answer 6

Edit file /var/lib/jenkins/config.xml and add the following lines :

  <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
    <permission>hudson.model.Hudson.Read:john.smith</permission>
  </authorizationStrategy> 

Restart Jenkins