diff --git a/runbot/controllers/frontend.py b/runbot/controllers/frontend.py index f186a1fe..3c5a252a 100644 --- a/runbot/controllers/frontend.py +++ b/runbot/controllers/frontend.py @@ -224,7 +224,7 @@ class Runbot(Controller): '/runbot/bundle//force/', ], type='http', auth="user", methods=['GET', 'POST'], csrf=False) def force_bundle(self, bundle, auto_rebase=False, **_post): - if not request.env.user.has_group('runbot.group_runbot_advanced_user'): + if not request.env.user.has_group('runbot.group_runbot_advanced_user') and ':' not in bundle.name: raise Forbidden("Only users with a specific group can do that. Please contact runbot administrators") _logger.info('user %s forcing bundle %s', request.env.user.name, bundle.name) # user must be able to read bundle batch = bundle.sudo()._force() diff --git a/runbot/templates/bundle.xml b/runbot/templates/bundle.xml index 7ceab1d2..bae1dd70 100644 --- a/runbot/templates/bundle.xml +++ b/runbot/templates/bundle.xml @@ -17,7 +17,7 @@ - +