Ability to read job config without changing it (re: matrix security)

Hello, How can I grant a user the ability to see a job configuration without also granting the ability to modify that configuration? This question has come up in the past and I'd just like to find out what the current status is. Apparently there is a plugin that will help, but then I read that

Re: Ability to read job config without changing it (re: matrix security)

The plugin is Extended Read Permission Plugin: https://wiki.jenkins-ci.org/display/JENKINS/Extended+Read+Permission+Plugin It does basically what passing -Dhudson.security.ExtendedReadPermission=true to java would do, documented here: