Issue with jenkins security

Question

I installed a fresh copy of jenkins 1.609 and configured one job (I had multiple instances of previous jenkins versions earlier). I wanted to protect this instance, in particular protect the jobs and everything, since it runs on the internet.

When I activate security, and check jenkins-own user database checkbox as well as logged-in users can do everything checkbox and save it, it seems to have no effect, as anonymous user is still able to access the job and the workspace of the job.

When I active use-matrix-based security and give my user admin (actually all) rights, the job isn't visible anymore, but I lose all privileges and I see

<username> is missing the Overall/Administer permission

immediately. After that I have no access to administration overview anymore.

So question from my side, what should I choose if I want the anonymous user to see a blank page, and logged in user to do everything.

Answer 1

The solution is choose the "Matrix-based security" option with the configuration below:

Then, you just have to set the relevant permissions to authenticated users.

Anonymous users will not be able to access your Jenkins server :)