-
Bug
-
Resolution: Fixed
-
High
-
2.10.3
-
None
- Add a page
- Set viewing restrictions to user1 only
- Add an attachment - 'Sample.doc'
- Log in as user2 - confirm that you cannot see the restricted page
- Add a page, and use the viewfile macro
- Enter the location of the attachment on the restricted page
The contents of the attachment can now be viewed by user2. This is a serious violation of page permissions.
[CONFSERVER-15809] Viewfile macros do not respect page restrictions
Workflow | Original: JAC Bug Workflow v3 [ 2895380 ] | New: CONFSERVER Bug Workflow v4 [ 2987780 ] |
Workflow | Original: JAC Bug Workflow v2 [ 2784439 ] | New: JAC Bug Workflow v3 [ 2895380 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JAC Bug Workflow [ 2714721 ] | New: JAC Bug Workflow v2 [ 2784439 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2380639 ] | New: JAC Bug Workflow [ 2714721 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2272070 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2380639 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2216603 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2272070 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2168667 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2216603 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1928024 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2168667 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1729022 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1928024 ] |
Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1686517 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1729022 ] |