-
Bug
-
Resolution: Fixed
-
Critical
the matrix reloaded plugin allows anonymous (and all users) to issue builds even when its not allowed by matrix authorization or project based matrix authorization.
reproduced on minimal server with jenkins internal user database using (project-based) matrix authorization and a minimal matrix job where only a certain user has build rights.
If matrix reloaded is installed any user can just click on the reloaded link and issue builds even if they do not have the rights to do so.