title: Jenkins user permissions wiped on restart?
body: <p>I hope someone can point out some schoolboy error I'm making here as I'm about to lose my mind.</p>
  
  <ul>
  <li>Fresh install of jenkins jenkins-1.590-1.1.noarch.rpm on red hat from <a href="http://pkg.jenkins-ci.org/redhat/" rel="noreferrer">here</a></li>
  <li>I can set up build jobs fine and they run as expected interacting with svn</li>
  <li>I set up user access as described <a href="https://wiki.jenkins-ci.org/display/JENKINS/Standard+Security+Setup" rel="noreferrer">here on the jenkins wiki</a></li>
  <li>I can log in and out as I please, and all jobs still run fine</li>
  <li><strong>HOWEVER</strong> after a server restart I can still log in, but all my access permissions are gone (this happens to all users)</li>
  </ul>
  
  <p>Any idea why the permissions are vanishing? </p>
  
  <p>To get around this I have to clean out all users and set them up again, but these are again wiped on restart.</p>
  
  <p>Thanks in advance</p>
  
  <p><strong>EDIT</strong></p>
  
  <p>I am using Jenkins own user db and have tried both matrix-based permissions and project based matrix authorisation.</p>
  
  <p>After restart when I try to access an jenkins config page I get the error "t143ahe is missing the Overall/Administer permission" </p>
  
  <p>My config.xml after restart is (Looks like I do have administer according to this):</p>
  
  <pre><code>&lt;?xml version='1.0' encoding='UTF-8'?&gt;
  &lt;hudson&gt;
    &lt;disabledAdministrativeMonitors/&gt;
    &lt;version&gt;1.0&lt;/version&gt;
     &lt;numExecutors&gt;2&lt;/numExecutors&gt;
    &lt;mode&gt;NORMAL&lt;/mode&gt;
    &lt;useSecurity&gt;true&lt;/useSecurity&gt;
    &lt;authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy"&gt;
      &lt;permission&gt;com.cloudbees.plugins.credentials.CredentialsProvider.Create:T143AHE&lt;/permission&gt;
      &lt;permission&gt;com.cloudbees.plugins.credentials.CredentialsProvider.Delete:T143AHE&lt;/permission&gt;
      &lt;permission&gt;com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:T143AHE&lt;/permission&gt;
      &lt;permission&gt;com.cloudbees.plugins.credentials.CredentialsProvider.Update:T143AHE&lt;/permission&gt;
      &lt;permission&gt;com.cloudbees.plugins.credentials.CredentialsProvider.View:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Build:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Configure:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Connect:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Create:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Delete:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Computer.Disconnect:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.Administer:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.ConfigureUpdateCenter:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.Read:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.Read:anonymous&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.RunScripts:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Hudson.UploadPlugins:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Build:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Cancel:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Configure:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Create:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Delete:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Discover:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Read:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Item.Workspace:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Run.Delete:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.Run.Update:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.View.Configure:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.View.Create:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.View.Delete:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.model.View.Read:T143AHE&lt;/permission&gt;
      &lt;permission&gt;hudson.scm.SCM.Tag:T143AHE&lt;/permission&gt;
    &lt;/authorizationStrategy&gt;
    &lt;securityRealm class="hudson.security.HudsonPrivateSecurityRealm"&gt;
      &lt;disableSignup&gt;false&lt;/disableSignup&gt;
      &lt;enableCaptcha&gt;false&lt;/enableCaptcha&gt;
    &lt;/securityRealm&gt;
    &lt;disableRememberMe&gt;false&lt;/disableRememberMe&gt;
    &lt;projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/&gt;
    &lt;workspaceDir&gt;${ITEM_ROOTDIR}/workspace&lt;/workspaceDir&gt;
    &lt;buildsDir&gt;${ITEM_ROOTDIR}/builds&lt;/buildsDir&gt;
    &lt;markupFormatter class="hudson.markup.EscapedMarkupFormatter"/&gt;
    &lt;jdks/&gt;
    &lt;viewsTabBar class="hudson.views.DefaultViewsTabBar"/&gt;
    &lt;myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/&gt;
    &lt;clouds/&gt;
    &lt;slaves/&gt;
    &lt;scmCheckoutRetryCount&gt;0&lt;/scmCheckoutRetryCount&gt;
    &lt;views&gt;
      &lt;hudson.model.AllView&gt;
        &lt;owner class="hudson" reference="../../.."/&gt;
        &lt;name&gt;All&lt;/name&gt;
        &lt;filterExecutors&gt;false&lt;/filterExecutors&gt;
        &lt;filterQueue&gt;false&lt;/filterQueue&gt;
       &lt;properties class="hudson.model.View$PropertyList"/&gt;
      &lt;/hudson.model.AllView&gt;
    &lt;/views&gt;
    &lt;primaryView&gt;All&lt;/primaryView&gt;
    &lt;slaveAgentPort&gt;0&lt;/slaveAgentPort&gt;
    &lt;label&gt;&lt;/label&gt;
    &lt;nodeProperties/&gt;
    &lt;globalNodeProperties/&gt;
  &lt;/hudson&gt;
  </code></pre>
  
  <p>My user specific config.xml is:</p>
  
  <pre><code>&lt;user&gt;
    &lt;fullName&gt;scribe1010&lt;/fullName&gt;
    &lt;properties&gt;
      &lt;hudson.model.PaneStatusProperties&gt;
        &lt;collapsed/&gt;
      &lt;/hudson.model.PaneStatusProperties&gt;
      &lt;jenkins.security.ApiTokenProperty&gt;
        &lt;apiToken&gt;lnqauTbOZ0xuAK9qBuh6/UG3RRmzN4mxkiSADlYmQD7jkqN1XswzKmqEOLpvBVsG&lt;/apiToken&gt;
      &lt;/jenkins.security.ApiTokenProperty&gt;
      &lt;com.cloudbees.plugins.credentials.UserCredentialsProvider_-UserCredentialsProperty plugin="credentials@1.18"&gt;
        &lt;domainCredentialsMap class="hudson.util.CopyOnWriteMap$Hash"/&gt;
      &lt;/com.cloudbees.plugins.credentials.UserCredentialsProvider_-UserCredentialsProperty&gt;
      &lt;hudson.model.MyViewsProperty&gt;
        &lt;views&gt;
          &lt;hudson.model.AllView&gt;
            &lt;owner class="hudson.model.MyViewsProperty" reference="../../.."/&gt;
            &lt;name&gt;All&lt;/name&gt;
            &lt;filterExecutors&gt;false&lt;/filterExecutors&gt;
            &lt;filterQueue&gt;false&lt;/filterQueue&gt;
            &lt;properties class="hudson.model.View$PropertyList"/&gt;
          &lt;/hudson.model.AllView&gt;
        &lt;/views&gt;
      &lt;/hudson.model.MyViewsProperty&gt;
      &lt;hudson.search.UserSearchProperty&gt;
        &lt;insensitiveSearch&gt;false&lt;/insensitiveSearch&gt;
      &lt;/hudson.search.UserSearchProperty&gt;
      &lt;hudson.security.HudsonPrivateSecurityRealm_-Details&gt;
        &lt;passwordHash&gt;#jbcrypt:$2a$10$29UCLwZafb8TTSsGvsWYBunY034m1q.Wjgl5JfbCJR83Dcvvs1Dh2&lt;/passwordHash&gt;
      &lt;/hudson.security.HudsonPrivateSecurityRealm_-Details&gt;
      &lt;hudson.tasks.Mailer_-UserProperty plugin="mailer@1.12"&gt;
        &lt;emailAddress&gt;a.b@c.com&lt;/emailAddress&gt;
      &lt;/hudson.tasks.Mailer_-UserProperty&gt;
      &lt;jenkins.security.LastGrantedAuthoritiesProperty&gt;
        &lt;roles&gt;
          &lt;string&gt;authenticated&lt;/string&gt;
        &lt;/roles&gt;
        &lt;timestamp&gt;1416992003750&lt;/timestamp&gt;
      &lt;/jenkins.security.LastGrantedAuthoritiesProperty&gt;
    &lt;/properties&gt;
  &lt;/user&gt;
  </code></pre>
  
  <p><em>NOTE:</em> Here the role is listed as 'authenticated' rather than anything like 'administrator' etc... (don't know if this is an issue or not).</p>
  
  <p><em>EDIT 2</em> I've upgraded to the latest rpm but no fix.</p>