Details
-
Bug
-
Resolution: Won't Fix
-
Medium
-
None
-
2.1.3
-
None
Description
EXPLANATION: PLEASE READ BEFORE COMMENTING.
In order for Confluence layouts to display the information they do, the templates must be given access to a wide range of internal Confluence data and functionality. This means, however, that a the templates themselves are actually more powerful (can see more information and perform more operations) than a space administrator.
It is feasable, given a well-written layout, that a space administrator could grant themselves the power to do anything a global administrator can do.
Because of this, layout editing has been limited to global administrators only. If you want to give someone the power to edit space-level layouts you may as well give them global administrative access, because effectively, that's what you would be doing anyway!
The only real solution to this problem is to redesign, from the ground up, how space look and feel customisation works, providing a limited, safe set of capabilities (and probably a custom templating language). This is something we're considering for future Confluence development, but obviously it's a significant task and not something we can just implement overnight.
Attachments
Issue Links
- is blocked by
-
CONFSERVER-4103 Remove modify layout functionality from space administrators
- Closed
- is duplicated by
-
CONFSERVER-7382 Space Admins cannot administer the Space Layout
- Closed
- relates to
-
CONFSERVER-5808 Allow Space Administrators Access to the Space Layout
- Gathering Interest