[JENKINS-42516] Parameterized Trigger doesn't respect project-based permissions that override folder level permissions

When I create a job that has "Enable project-based security" turned on and "Block inheritance of global authorization matrix" turned on, triggering a build of the job from another job can be done by anyone that can build the upstream job, regardless of the permissions set on the downstream job. 

---
Originally reported by mrchristooley, imported from: Parameterized Trigger doesn't respect project-based permissions that override folder level permissions

• assignee: huybrechts
  
• status: Open
  
• priority: Minor
  
• component(s): parameterized-trigger-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 2
  
• imported: 2025-12-07
  

Raw content of original issue

When I create a job that has "Enable project-based security" turned on and "Block inheritance of global authorization matrix" turned on, triggering a build of the job from another job can be done by anyone that can build the upstream job, regardless of the permissions set on the downstream job. 

environment

```
[root@jenkins01 ~]# cat /etc/os-release

PRETTY_NAME="Oracle Linux Server 7.2"

[root@jenkins01 ~]# /etc/alternatives/java -version

openjdk version "1.8.0_102"

[root@jenkins01 ~]# rpm -qa | grep jenkins

jenkins-2.49-1.1.noarch

```