diff --git a/roles/jenkins/master/files/config.xml b/roles/jenkins/master/files/config.xml
index 7cc7ab765b..55843eef22 100644
--- a/roles/jenkins/master/files/config.xml
+++ b/roles/jenkins/master/files/config.xml
@@ -5,7 +5,38 @@
   <numExecutors>2</numExecutors>
   <mode>NORMAL</mode>
   <useSecurity>true</useSecurity>
-  <authorizationStrategy class="hudson.security.FullControlOnceLoggedInAuthorizationStrategy"/>
+  <authorizationStrategy class="hudson.security.ProjectMatrixAuthorizationStrategy">
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Create:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Delete:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.ManageDomains:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.Update:mizdebsk</permission>
+    <permission>com.cloudbees.plugins.credentials.CredentialsProvider.View:mizdebsk</permission>
+    <permission>hudson.model.Computer.Build:mizdebsk</permission>
+    <permission>hudson.model.Computer.Configure:mizdebsk</permission>
+    <permission>hudson.model.Computer.Connect:mizdebsk</permission>
+    <permission>hudson.model.Computer.Create:mizdebsk</permission>
+    <permission>hudson.model.Computer.Delete:mizdebsk</permission>
+    <permission>hudson.model.Computer.Disconnect:mizdebsk</permission>
+    <permission>hudson.model.Hudson.Administer:mizdebsk</permission>
+    <permission>hudson.model.Hudson.ConfigureUpdateCenter:mizdebsk</permission>
+    <permission>hudson.model.Hudson.Read:mizdebsk</permission>
+    <permission>hudson.model.Hudson.RunScripts:mizdebsk</permission>
+    <permission>hudson.model.Hudson.UploadPlugins:mizdebsk</permission>
+    <permission>hudson.model.Item.Build:mizdebsk</permission>
+    <permission>hudson.model.Item.Cancel:mizdebsk</permission>
+    <permission>hudson.model.Item.Configure:mizdebsk</permission>
+    <permission>hudson.model.Item.Create:mizdebsk</permission>
+    <permission>hudson.model.Item.Delete:mizdebsk</permission>
+    <permission>hudson.model.Item.Discover:mizdebsk</permission>
+    <permission>hudson.model.Item.Read:mizdebsk</permission>
+    <permission>hudson.model.Item.Workspace:mizdebsk</permission>
+    <permission>hudson.model.Run.Delete:mizdebsk</permission>
+    <permission>hudson.model.Run.Update:mizdebsk</permission>
+    <permission>hudson.model.View.Configure:mizdebsk</permission>
+    <permission>hudson.model.View.Create:mizdebsk</permission>
+    <permission>hudson.model.View.Delete:mizdebsk</permission>
+    <permission>hudson.model.View.Read:mizdebsk</permission>
+  </authorizationStrategy>
   <securityRealm class="hudson.plugins.openid.OpenIdSsoSecurityRealm" plugin="openid@2.1.1">
     <endpoint>http://id.fedoraproject.org/</endpoint>
   </securityRealm>
@@ -33,4 +64,4 @@
   <label></label>
   <nodeProperties/>
   <globalNodeProperties/>
-</hudson>
+</hudson>
\ No newline at end of file