[JENKINS-73422] Document escape hatch for Authenticated user access t…

…o Resource URL (#7462) * [JENKINS-73422] Document escape hatch for Authenticated user access to Resource URL * [JENKINS-73422] Add weekly version * [JENKINS-73422] Apply documentation suggestions Co-authored-by: Daniel Beck <[email protected]> --------- Co-authored-by: Daniel Beck <[email protected]>
jenkins-infra · Sep 3, 2024 · 6e30646 · 6e30646
1 parent ed154c5
commit 6e30646
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/content/doc/book/managing/system-properties.adoc b/content/doc/book/managing/system-properties.adoc
@@ -1931,6 +1931,17 @@ properties:
     Enable the optional Overall/Manage permission that allows limited access to administrative features suitable for a hosted Jenkins environment.
     See https://github.com/jenkinsci/jep/tree/master/jep/223[JEP-223].
 
+- name: jenkins.security.ResourceDomainRootAction.allowAuthenticatedUser
+  tags:
+  - security
+  - escape hatch
+  def: |
+    `false`
+  since: 2.475
+  description: |
+    Allow authenticated user access to link:/doc/book/security/user-content/#resource-root-url[Resource URLs].
+    Escape hatch for a security improvement related to the link:/security/advisory/2024-01-24/#SECURITY-3314[2024-01-24 security advisory].
+
 - name: jenkins.security.ResourceDomainRootAction.validForMinutes
   tags:
   - tuning