the system could be set to no security realm but with a valid authorization...

the system could be set to no security realm but with a valid authorization strategy. It is probably a mistake on behalf of the user, but it should still be treated as a secured Hudson.

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@11082 71c3de6d-444a-0410-be80-ed276b4c234a

core/src/main/java/hudson/model/Hudson.java

@@ -1040,7 +1040,7 @@ public final class Hudson extends View implements ItemGroup<TopLevelItem>, Node,
      * restrictions in place.
      */
     public boolean isUseSecurity() {
-        return securityRealm!=SecurityRealm.NO_AUTHENTICATION;
+        return securityRealm!=SecurityRealm.NO_AUTHENTICATION || authorizationStrategy!=AuthorizationStrategy.UNSECURED;
     }
 
     /**