Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-16220

Remove page permission from View Info screen redirects to Space "listpermissionpages" on success but user might not have permission for that screen

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Medium
    • None
    • 3.0
    • None
    • EAC on 3.0.0_01

    Description

      From CONF-16131, which is caused by this problem.

      RemovePagePermissionAction, for remove page permissions via one of the View Info screen's "open padlock" links, is not a SpaceAdministrative action. When the remove succeeds, the user is redirected to listpermissionpages -> ListPermissionPagesAction which is SpaceAdministrative.

      Thus, if the user has permission to remove a permission on a page but not space admin permission, they will see the "Not Permitted" screen (e.g. for me, https://extranet.atlassian.com/pages/listpermissionpages.action?key=PM).

      The remove success either needs to redirect to a screen the user has permission to view, or (preferably) use AJAX to perform the removal without leaving the View Info screen.

      Attachments

        Issue Links

          Activity

            People

              dtaylor David Taylor (Inactive)
              dtaylor David Taylor (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: