User is able to successfully change node labels or bring node offline/online even if specific matrix permissions are not checked in configuration, like so:

The node doesn't have any permission overrides.

Bug manifested in tests of the following scenarios:

• anonymous user
• user logged in using github-oauth-plugin

Other cases may also apply.

Jenkins version: 2.94

matrix-auth plugin version: 2.2