From fdaee7eba3eb2e4fae59255138fa70aa5ada19dc Mon Sep 17 00:00:00 2001
From: Kohsuke Kawaguchi <kk@kohsuke.org>
Date: Wed, 25 Apr 2012 15:16:57 -0700
Subject: [PATCH] [FIXED JENKINS-13600] API token authentication was broken in
 1.461.

---
 changelog.html                              | 3 +++
 core/src/main/java/hudson/security/ACL.java | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/changelog.html b/changelog.html
index fa46e2059b..ae23694c35 100644
--- a/changelog.html
+++ b/changelog.html
@@ -63,6 +63,9 @@ Upcoming changes</a>
 <div id="rc" style="display:none;"><!--=BEGIN=-->
 <h3><a name=v1.462>What's new in 1.462</a> <!--=DATE=--></h3>
 <ul class=image>
+  <li class=bug>
+    API token authentication was broken in 1.461
+    (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13600">issue 13600</a>)
   <li class=rfe>
     Added the filter textbox to the update center selector.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13476">issue 13476</a>)
diff --git a/core/src/main/java/hudson/security/ACL.java b/core/src/main/java/hudson/security/ACL.java
index 1d4e47992e..05b7c33ac4 100644
--- a/core/src/main/java/hudson/security/ACL.java
+++ b/core/src/main/java/hudson/security/ACL.java
@@ -130,7 +130,7 @@ public abstract class ACL {
      */
     public static SecurityContext impersonate(Authentication auth) {
         SecurityContext old = SecurityContextHolder.getContext();
-        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(ACL.SYSTEM));
+        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(auth));
         return old;
     }
 }