Fixed a security issue. The security should be on by default. (#926)

git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@5364 71c3de6d-444a-0410-be80-ed276b4c234a

core/src/main/java/hudson/model/BuildAuthorizationToken.java

@@ -28,7 +28,7 @@ public final class BuildAuthorizationToken {
     }
 
     public static void startBuildIfAuthorized(BuildAuthorizationToken token, BuildableItem job, StaplerRequest req, StaplerResponse rsp) throws IOException, ServletException {
-        if(token==null || token.authorizedToStartBuild(req,rsp)) {
+        if(!Hudson.getInstance().isUseSecurity() || (token!=null && token.authorizedToStartBuild(req,rsp))) {
             job.scheduleBuild();
             rsp.forwardToPreviousPage(req);
         }