It's possible under a specific set of circumstances that a user could perform actions they may otherwise be unauthorized to perform using the document import feature of the Office Connector. The specific actions would be editing or deleting a page they don't have permission to change.
Note that this bug doesn't expose content to unauthorized users.
- mentioned in
-
Wiki Page Failed to load
[CONFSERVER-14014] Word import with Office Connector can overwrite existing content without permission
Workflow | Original: JAC Bug Workflow v3 [ 2880343 ] | New: CONFSERVER Bug Workflow v4 [ 2977079 ] |
Workflow | Original: JAC Bug Workflow v2 [ 2780607 ] | New: JAC Bug Workflow v3 [ 2880343 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JAC Bug Workflow [ 2724874 ] | New: JAC Bug Workflow v2 [ 2780607 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2388214 ] | New: JAC Bug Workflow [ 2724874 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2285187 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2388214 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2225234 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2285187 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2179202 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2225234 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1945347 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2179202 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1741906 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1945347 ] |
Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1702513 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1741906 ] |