"$user is missing the Job/Configure permission" error when using Role-Based Authorization Strategy

[ghost]

Jenkins and plugins versions report

Environment

OS: Linux - 5.15.0-78-generic
Java: 21.0.2 - Private Build (OpenJDK 64-Bit Server VM)
---
active-directory:2.35
antisamy-markup-formatter:162.v0e6ec0fcfcf6
apache-httpcomponents-client-4-api:4.5.14-208.v438351942757
authentication-tokens:1.53.v1c90fd9191a_b_
bootstrap5-api:5.3.2-4
bouncycastle-api:2.30.1.77-225.v26ea_c9455fd9
branch-api:2.1152.v6f101e97dd77
caffeine-api:3.1.8-133.v17b_1ff2e0599
checks-api:2.0.2
cloudbees-bitbucket-branch-source:877.vb_b_d5243f6794
cloudbees-folder:6.901.vb_4c7a_da_75da_3
commons-lang3-api:3.13.0-62.v7d18e55f51e2
commons-text-api:1.11.0-95.v22a_d30ee5d36
configuration-as-code:1775.v810dc950b_514
credentials:1337.v60b_d7b_c7b_c9f
credentials-binding:657.v2b_19db_7d6e6d
display-url-api:2.200.vb_9327d658781
docker-commons:439.va_3cb_0a_6a_fb_29
docker-workflow:572.v950f58993843
durable-task:550.v0930093c4b_a_6
echarts-api:5.4.3-4
font-awesome-api:6.5.1-3
git:5.2.1
git-client:4.6.0
gson-api:2.10.1-15.v0d99f670e0a_7
handy-uri-templates-2-api:2.1.8-30.v7e777411b_148
instance-identity:185.v303dc7c645f9
ionicons-api:56.v1b_1c8c49374e
jackson2-api:2.16.1-373.ve709c6871598
jakarta-activation-api:2.0.1-3
jakarta-mail-api:2.0.1-3
javax-activation-api:1.2.0-6
javax-mail-api:1.6.2-9
jaxb:2.3.9-1
jfrog:1.5.0
joda-time-api:2.12.7-29.v5a_b_e3a_82269a_
jquery3-api:3.7.1-2
json-api:20240205-27.va_007549e895c
junit:1259.v65ffcef24a_88
mailer:463.vedf8358e006b_
mina-sshd-api-common:2.12.0-90.v9f7fb_9fa_3d3b_
mina-sshd-api-core:2.12.0-90.v9f7fb_9fa_3d3b_
pipeline-build-step:540.vb_e8849e1a_b_d8
pipeline-graph-analysis:216.vfd8b_ece330ca_
pipeline-groovy-lib:704.vc58b_8890a_384
pipeline-input-step:491.vb_07d21da_1a_fb_
pipeline-milestone-step:111.v449306f708b_7
pipeline-model-api:2.2175.v76a_fff0a_2618
pipeline-model-definition:2.2175.v76a_fff0a_2618
pipeline-model-extensions:2.2175.v76a_fff0a_2618
pipeline-rest-api:2.34
pipeline-stage-step:305.ve96d0205c1c6
pipeline-stage-tags-metadata:2.2175.v76a_fff0a_2618
pipeline-stage-view:2.34
plain-credentials:143.v1b_df8b_d3b_e48
plugin-util-api:4.1.0
prism-api:1.29.0-13
role-strategy:711.vf33a_d2c994b_a_
scm-api:683.vb_16722fb_b_80b_
script-security:1326.vdb_c154de8669
snakeyaml-api:2.2-111.vc6598e30cc65
ssh-credentials:308.ve4497b_ccd8f4
ssh-slaves:2.948.vb_8050d697fec
structs:337.v1b_04ea_4df7c8
trilead-api:2.133.vfb_8a_7b_9c5dd1
variant:60.v7290fc0eb_b_cd
workflow-aggregator:596.v8c21c963d92d
workflow-api:1291.v51fd2a_625da_7
workflow-basic-steps:1042.ve7b_140c4a_e0c
workflow-cps:3880.vb_ef4b_5cfd270
workflow-durable-task-step:1331.vc8c2fed35334
workflow-job:1400.v7fd111b_ec82f
workflow-multibranch:773.vc4fe1378f1d5
workflow-scm-step:415.v434365564324
workflow-step-api:657.v03b_e8115821b_
workflow-support:865.v43e78cc44e0d

What Operating System are you using (both controller, and any agents involved in the problem)?

Ubuntu Linux 22.04

Reproduction steps

1. Install the Role-based Authorization Strategy plugin.
2. Create a new Organization Folder with a "Bitbucket Team/Project" repository source.
3. Navigate to a repository inside the Organization Folder and click "View Configuration."

Expected Results

The "Branch sources" section of the Configuration page shows the current Bitbucket configuration.

Actual Results

An iframe (?) of the Jenkins instance is shown instead, with the following error message: $user is missing the Job/Configure permission (where $user is the username of the currently logged in user). None of the fields are clickable.

This happens even if the current user has that permission, and even if the current user has the admin role.

See attached screenshot.

Anything else?

No response

Are you interested in contributing a fix?

Yes, see linked PR.

[brianmhowell]

Was it the Role-based Authorization Strategy plugin that caused this issue, or a change in the Bitbucket Branch Source plugin? Do we know exactly which version caused the problem? I need to rollback, and can't figure this out.

[Yuvalsilver]

I have this error too. Did you find a solution?

[douglasawh]

Is there any fix to this?

[nfalco79]

The same author of this issue has proposed a PR that has been merged. Unfortunately the github user has been deleted so we will never get a feedback for this issue.
To analyse the issue I need steps to reproduce, plugin version, kind of project, job configuration, how to setup user and permission.
In our production environment we had configure a matrix security with devops, admin and developer permission. We have organization folder and never get this kind of error, that's why I need all the steps to reproduce this issue.

[nfalco79]

I'm not able to replicate the issue with suggested steps
Step lacks of some basic step for which I think was:

1. set matrix security as Authorization in security page of Jenkins
2. create a user with ... unknown permission

The user I create with the following permission

I had create an Organization Folder than I had navigate branch job feature/test and click on View Configuration http://localhost:8090/jenkins/job/test/job/feature%252Ftest/configure