diff --git a/changelog.html b/changelog.html
index 1da3264dfe58a4a1df3656c72296e9d98aab0303..3bd3b2ae72cc0e0fd7af733afa35e162816c557b 100644
--- a/changelog.html
+++ b/changelog.html
@@ -55,6 +55,9 @@ Upcoming changes</a>
 <!-- Record your changes in the trunk here. -->
 <div id="trunk" style="display:none"><!--=TRUNK-BEGIN=-->
 <ul class=image>
+  <li class=bug>
+    Removing the "keep this build forever" lock on a build should require the DELETE permission.
+    (<a href="https://issues.jenkins-ci.org/browse/JENKINS-16417">issue 16417</a>)
   <li class=bug>
     Files added to zip archive are closed properly.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-20345">issue 20345</a>)
diff --git a/core/src/main/java/hudson/model/Run.java b/core/src/main/java/hudson/model/Run.java
index baffced4b044a2d7f1de5c1a0889c2c0b16c889c..d81c6be81752c5a0a3fda333b2c744ffac61238e 100644
--- a/core/src/main/java/hudson/model/Run.java
+++ b/core/src/main/java/hudson/model/Run.java
@@ -2086,7 +2086,7 @@ public abstract class Run <JobT extends Job<JobT,RunT>,RunT extends Run<JobT,Run
     }
 
     public void keepLog(boolean newValue) throws IOException {
-        checkPermission(UPDATE);
+        checkPermission(newValue ? UPDATE : DELETE);
         keepLog = newValue;
         save();
     }