GitRoot

 1---
 2id: "9c67"
 3priority: 100
 4sprint: ""
 5status: close
 6assignee: null
 7kind: issue
 8---
 9
10# Security breach in right to write
11
12The right to write is good to check that a plugin don't make dangerous write. But a malicious user can change that in its branch and write...
13
14A possible solution is to mount the pluginRun from defaultBranch, but complexe scenarios where user want to try something in branch will be not possible.
15
16Maybe check that the push user has the right to do what it try to do?
17
18---
19
20After too long debug it's not possible to hack by modifying conf. We use always `defaultBranch` plugins conf.
21
22I close this issue, but one day, user will want to try some conf in other conf before merge!