When using the ircbot, it should be limited to the access of the user which is specified in the advanced options.
When I installed Jenkins and configured the ircbot to login, it simply accepts any command from any user in query or in a channel.
It appears to never be limited to its user, even when the user is invalid, and instead complains in the log about invalid user, but the command is executed anyway.
Might have missed something, but AFAICT it simply isn't working.