Show only accessible links in sidepanel for new manage Jenkins UI

core/src/main/java/hudson/AboutJenkins.java

@@ -49,6 +49,11 @@ public Permission getRequiredPermission() {
         return Jenkins.READ;
     }
 
+    @Override
+    public boolean hasRequiredPermission() {
+        return Jenkins.get().hasAnyPermission(Jenkins.MANAGE_AND_SYSTEM_READ);
+    }
+
     @NonNull
     @Override
     public Category getCategory() {

core/src/main/java/hudson/model/ManagementLink.java

@@ -127,6 +127,19 @@ public boolean getRequiresConfirmation() {
         return Jenkins.ADMINISTER;
     }
 
+    /**
+     * Checks if the current user has the minimum required permission to view this Management Link.
+     * <p>
+     * Subclasses may override this method instead of {@link #getRequiredPermission()} to perform more complex permission checks,
+     * for example, checking either {@link Jenkins#MANAGE} or {@link Jenkins#SYSTEM_READ}.
+     * </p>
+     * @see #getRequiredPermission()
+     * @since TODO
+     */
+    public boolean hasRequiredPermission() {
+        return Jenkins.get().hasPermission(getRequiredPermission());
+    }
+
     /**
      * Define if the rendered link will use the default GET method or POST.
      * @return true if POST must be used

core/src/main/java/jenkins/management/ConfigureLink.java

@@ -58,6 +58,11 @@ public Permission getRequiredPermission() {
         return Jenkins.READ;
     }
 
+    @Override
+    public boolean hasRequiredPermission() {
+        return Jenkins.get().hasAnyPermission(Jenkins.MANAGE_AND_SYSTEM_READ);
+    }
+
     @Override
     public String getUrlName() {
         return "configure";

core/src/main/java/jenkins/management/StatisticsLink.java

@@ -55,7 +55,7 @@ public String getDescription() {
     @NonNull
     @Override
     public Permission getRequiredPermission() {
-        return Jenkins.MANAGE;
+        return Jenkins.READ;
     }
 
     @Override

core/src/main/java/jenkins/management/SystemInfoLink.java

@@ -59,6 +59,11 @@ public Permission getRequiredPermission() {
         return Jenkins.READ;
     }
 
+    @Override
+    public boolean hasRequiredPermission() {
+        return Jenkins.get().hasAnyPermission(Jenkins.MANAGE_AND_SYSTEM_READ);
+    }
+
     @Override
     public String getUrlName() {
         return "systemInfo";

core/src/main/java/jenkins/model/Jenkins.java

@@ -5173,7 +5173,7 @@
             if (link.getIconFileName() == null) {
                 continue;
             }
-            if (!Jenkins.get().hasPermission(link.getRequiredPermission())) {
+            if (!link.hasRequiredPermission()) {
                 continue;
             }
             byCategory.computeIfAbsent(link.getCategory(), c -> new ArrayList<>()).add(link);
@@ -5860,7 +5860,7 @@
             new PermissionScope[]{PermissionScope.JENKINS});
 
     @Restricted(NoExternalUse.class) // called by jelly
     public static final Permission[] MANAGE_AND_SYSTEM_READ =
             new Permission[] { MANAGE, SYSTEM_READ };
 
     public static final Permission READ = new Permission(PERMISSIONS, "Read", Messages._Hudson_ReadPermission_Description(), Permission.READ, PermissionScope.JENKINS);