This validator returns info about the filesystem so should be protected.
Working on this along with issue #2715.
Issue also applies to WorkspaceFilePath and WorkspaceDirectory. Changing it to require CONFIGURE permission on this job.
Fixed by changes in hudson/util/FormFieldValidator.java included in fix for issue #2715 (r13838).
Working on this along with issue #2715.