Build expiration is broken since upgrade to Crowd auth

[Paul Sokolovsky]

Since we switched a-b Jenkins to Crowd auth, we get cron errors:

Subject: Cron <ubuntu@ip-10-114-74-147> java -jar jenkins-cli.jar -s http://localhost:9090/jenkins/ -i /home/ubuntu/.ssh/jenkinscli groovy linaro-android-build-tools/utils/diskspace/expire-builds.groovy (failed)
Date: Mon, 22 Jul 2013 19:00:05 +0000 (UTC)

hudson.security.AccessDeniedException2: build-expire is missing the RunScripts permission
 at hudson.security.ACL.checkPermission(ACL.java:54)
 at hudson.model.Node.checkPermission(Node.java:394)
 at hudson.cli.GroovyCommand.run(GroovyCommand.java:74)
 at hudson.cli.CLICommand.main(CLICommand.java:229)
 at hudson.cli.CliManagerImpl.main(CliManagerImpl.java:92)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
 at java.lang.reflect.Method.invoke(Method.java:616)
 at hudson.remoting.RemoteInvocationHandler$RPCRequest.perform(RemoteInvocationHandler.java:275)
 at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:256)
 at hudson.remoting.RemoteInvocationHandler$RPCRequest.call(RemoteInvocationHandler.java:215)
 at hudson.remoting.UserRequest.perform(UserRequest.java:118)
 at hudson.remoting.UserRequest.perform(UserRequest.java:48)
 at hudson.remoting.Request$2.run(Request.java:326)
 at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:72)
 at hudson.cli.CliManagerImpl$1.call(CliManagerImpl.java:63)
 at hudson.remoting.InterceptingExecutorService$2.call(InterceptingExecutorService.java:95)
 at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
 at java.util.concurrent.FutureTask.run(FutureTask.java:166)
 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
 at java.lang.Thread.run(Thread.java:636)

[Paul Sokolovsky (pfalcon)]

Ok, this actually started to send error emails ~week ago, and I checked that expiration indeed works.