Check ADMINISTER on /fingerprintCleanup and /workspaceCleanup.
@@ -3620,6 +3620,7 @@ public class Jenkins extends AbstractCIBase implements DirectlyModifiableTopLeve
@RequirePOST
public void doFingerprintCleanup(StaplerResponse rsp) throws IOException {
+ checkPermission(ADMINISTER);
FingerprintCleanupThread.invoke();
rsp.setStatus(HttpServletResponse.SC_OK);
rsp.setContentType("text/plain");
@@ -3628,6 +3629,7 @@ public class Jenkins extends AbstractCIBase implements DirectlyModifiableTopLeve
@RequirePOST
public void doWorkspaceCleanup(StaplerResponse rsp) throws IOException {
+ checkPermission(ADMINISTER);
WorkspaceCleanupThread.invoke();
rsp.setStatus(HttpServletResponse.SC_OK);
rsp.setContentType("text/plain");
