From 2f579179bb1a20d75b686ef936dc9f5cc2bc735d Mon Sep 17 00:00:00 2001
From: "James E. Blair" <jeblair@openstack.org>
Date: Fri, 7 Jun 2013 10:36:57 -0700
Subject: [PATCH] Fix build description permission error.

Impersonate the system user while setting build description because
the gearman plugin runs outside of a user context.

Change-Id: Ib8a0eacd44c067a22e6c5afc7a0984a247792f1e
---
 .../plugins/gearman/SetDescriptionWorker.java    | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/src/main/java/hudson/plugins/gearman/SetDescriptionWorker.java b/src/main/java/hudson/plugins/gearman/SetDescriptionWorker.java
index 7bb245d..2127092 100644
--- a/src/main/java/hudson/plugins/gearman/SetDescriptionWorker.java
+++ b/src/main/java/hudson/plugins/gearman/SetDescriptionWorker.java
@@ -20,11 +20,14 @@
 package hudson.plugins.gearman;
 
 import hudson.model.Run;
+import hudson.security.ACL;
 
 import java.io.IOException;
 import java.io.UnsupportedEncodingException;
 import java.util.Map;
 
+import org.acegisecurity.context.SecurityContextHolder;
+import org.acegisecurity.context.SecurityContext;
 import org.gearman.client.GearmanJobResult;
 import org.gearman.client.GearmanJobResultImpl;
 import org.gearman.worker.AbstractGearmanFunction;
@@ -81,11 +84,16 @@ public class SetDescriptionWorker extends AbstractGearmanFunction {
             // find build then update its description
             Run<?,?> build = GearmanPluginUtil.findBuild(jobName, Integer.parseInt(buildNumber));
             if (build != null) {
+                SecurityContext oldContext = ACL.impersonate(ACL.SYSTEM);
                 try {
-                    build.setDescription(buildDescription);
-                } catch (IOException e) {
-                    throw new IllegalArgumentException("Unable to set description for " +
-                                                       jobName + ": " + buildNumber);
+                    try {
+                        build.setDescription(buildDescription);
+                    } catch (IOException e) {
+                        throw new IllegalArgumentException("Unable to set description for " +
+                                                           jobName + ": " + buildNumber);
+                    }
+                } finally {
+                    SecurityContextHolder.setContext(oldContext);
                 }
                 jobResultMsg = "Description for Jenkins build " +buildNumber+" was updated to " + buildDescription;
                 jobResult = true;