In case of views, permissions are checked during form submission allowing to show config page also for unauthorized users.
Code changed in jenkins
User: Vojtech Juranek
[Fixed JENKINS-15277] Check permissions before showing config page as we did in all other cases
Changed to critical to spot it when searching for LTS backports, as it has some security consequences.
Integrated in jenkins_main_trunk #1947
[Fixed JENKINS-15277] Check permissions before showing config page as we did in all other cases (Revision 452f4f1c74dd8369644218cd808a16a6376b728b)
Result = SUCCESS
Vojtech Juranek : 452f4f1c74dd8369644218cd808a16a6376b728b