[JENKINS-66211] jenkins pipeline jobs running outside groovy sandbox

[jenkins-infra-bot]

Hi Team,

I want to restrict users to run their jobs in groovy sandbox only.

In pipeline job if I unchecked Use Groovy Sandbox  then job should not run
it should come for approval to jenkins administrator.

but currently it is happening reverse way.

I*f Use Groovy Sandbox is checked : It is asking for approval of jenkins administator*
If Use Groovy Sandbox is uncheck : Pipeline job is getting executing.

can you please help the same.

jenkins version : 2.263.1

---

Originally reported by nq00155492, imported from: jenkins pipeline jobs running outside groovy sandbox

• assignee: vjuranek
• status: Open
• priority: Minor
• component(s): groovy-plugin
• resolution: Unresolved
• votes: 0
• watchers: 2
• imported: 20260604-161841

Raw content of original issue

Hi Team,

I want to restrict users to run their jobs in groovy sandbox only.

In pipeline job if I unchecked Use Groovy Sandbox  then job should not run
it should come for approval to jenkins administrator.

but currently it is happening reverse way.

I*f Use Groovy Sandbox is checked : It is asking for approval of jenkins administator*
If Use Groovy Sandbox is uncheck : Pipeline job is getting executing.

can you please help the same.

jenkins version : 2.263.1

[jenkins-infra-bot]

nq00155492:

• Original comment link
• Raw content of original comment:

  vjuranek : Can you please check the same and help me the same.
  

vjuranek : Can you please check the same and help me the same.

[jenkins-infra-bot]

kon:

• Original comment link
• Raw content of original comment:

  You filed this issue on the groovy-plugin component, i.e. the Groovy plugin. However, you also write about a ”pipeline job”, and I don’t think that plugin is used for Groovy scripts in pipeline jobs. Perhaps the component should be one of the following, instead:
  
  
  	
  workflow-cps-plugin for the Pipeline: Groovy plugin
  	
  script-security-plugin for the Script Security plugin
  
  
  

You filed this issue on the groovy-plugin component, i.e. the Groovy plugin. However, you also write about a ”pipeline job”, and I don’t think that plugin is used for Groovy scripts in pipeline jobs. Perhaps the component should be one of the following, instead:

• workflow-cps-plugin for the Pipeline: Groovy plugin
• script-security-plugin for the Script Security plugin

[jenkins-infra-bot]

kon:

• Original comment link
• Raw content of original comment:

  If Use Groovy Sandbox is uncheck : Pipeline job is getting executing.
  
  Are all users able to uncheck ”Use Groovy Sandbox”, or are only administrators able to do so?
  

If Use Groovy Sandbox is uncheck : Pipeline job is getting executing.

Are all users able to uncheck ”Use Groovy Sandbox”, or are only administrators able to do so?

[jenkins-infra-bot]

nq00155492:

• Original comment link
• Raw content of original comment:

  kon : as all users are able to check and uncheck the "Use Groovy Sandbox”
  
  can we make it to permanent checked. 
  

kon : as all users are able to check and uncheck the "Use Groovy Sandbox”

can we make it to permanent checked.