We're using this plugin in order to disable the manual building of jobs that are built by (i.e. under control of) a pipeline job, by setting the inheritance strategy to not inherit, and then enabling all permissions except job building. This worked beautifully up through version 1.7, but broke with the 2.0 upgrade. I presume this breakage is related to the change that administrators always have access to the object (JENKINS-24878)? Can this be made optional, or some other mechanism provided so that even admins can't manually build?

Btw., I tried using the JobRestrictions plugin, but that doesn't cut it, as it only aborts the job after trying to start it, rather than nicely disabling the build buttons in the first place as this was doing.