diff --git a/content/doc/book/managing/system-properties.adoc b/content/doc/book/managing/system-properties.adoc index 2ca399001a54..1e380904ca83 100644 --- a/content/doc/book/managing/system-properties.adoc +++ b/content/doc/book/managing/system-properties.adoc @@ -1931,6 +1931,17 @@ properties: Enable the optional Overall/Manage permission that allows limited access to administrative features suitable for a hosted Jenkins environment. See https://github.com/jenkinsci/jep/tree/master/jep/223[JEP-223]. +- name: jenkins.security.ResourceDomainRootAction.allowAuthenticatedUser + tags: + - security + - escape hatch + def: | + `false` + since: 2.475 + description: | + Allow authenticated user access to link:/doc/book/security/user-content/#resource-root-url[Resource URLs]. + Escape hatch for a security improvement related to the link:/security/advisory/2024-01-24/#SECURITY-3314[2024-01-24 security advisory]. + - name: jenkins.security.ResourceDomainRootAction.validForMinutes tags: - tuning