@LocalData
  public void testNoConfigAccessWithPermissionEnabled() throws Exception {
    setPermissionEnabled(true);

    AuthorizationStrategy as = jenkins.getAuthorizationStrategy();
    assertTrue(
        "Expecting GlobalMatrixAuthorizationStrategy",
        (as instanceof GlobalMatrixAuthorizationStrategy));
    GlobalMatrixAuthorizationStrategy gas = (GlobalMatrixAuthorizationStrategy) as;
    assertFalse(
        "Bob should not have extended read for this test",
        gas.hasExplicitPermission("bob", Item.EXTENDED_READ));

    WebClient wc = new WebClient().login("bob", "bob");
    wc.assertFails("job/a/configure", HttpURLConnection.HTTP_FORBIDDEN);
  }