From 8a98cbdf9c5e52ed12132d4bfee22a82ecaaf402 Mon Sep 17 00:00:00 2001
From: Somesh Kumar Singh <someshsingh2206@gmail.com>
Date: Sat, 10 Oct 2026 16:13:46 +0000
Subject: [PATCH] Warn about unsafe authorization strategy (#27499)

Issue #27465: warn about unsafe authorization strategy
---
 .../FullControlOnceLoggedInAuthorizationStrategy/config.jelly  | 3 +++
 .../config.properties                                          | 1 +
 2 files changed, 4 insertions(+)
 create mode 100644 core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties

diff --git a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
index b78129798b..50f0f7b6c9 100644
--- a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
+++ b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.jelly
@@ -1,6 +1,9 @@
 <?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson"
   xmlns:f="/lib/form">
+  <div class="jenkins-alert jenkins-alert-warning">
+    ${%warning}
+  </div>
   <f:entry field="allowAnonymousRead">
     <f:checkbox default="true" title="${%Allow anonymous read access}" />
   </f:entry>
diff --git a/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties
new file mode 100644
index 0000000000..11bcdb59b6
--- /dev/null
+++ b/core/src/main/resources/hudson/security/FullControlOnceLoggedInAuthorizationStrategy/config.properties
@@ -0,0 +1 @@
+warning=All authenticated users will be granted full administrative access. Only use this authorization strategy if all authenticated users are fully trusted.
\ No newline at end of file