[JIRA] (JENKINS-16103) If Anonymous has overall read access, anyone can connect as a slave over JNLP

[jgl...@cloudbees.com (JIRA)]

Jesse Glick commented on JENKINS-16103 If Anonymous has overall read access, anyone can connect as a slave over JNLP Reproducible. core/src/main/resources/hudson/slaves/SlaveComputer/slave-agent.jnlp.jelly has <l:isAdminOrTest test="true"> which is basically a no-op; it seems to have been this way for years. Should this just be <l:hasPermission permission="${Computer.CONNECT}"> or similar?

This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira