Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-9239

"Page not found" (404) is displayed to users without view permissions, should be "Access denied"

    XMLWordPrintable

Details

    Description

      When a user doesn't have view permission to view a space, he/she receives 404 page when accessing URLs from this space.

      This is a bad UI design. Instead an "Access denied" error should be displayed to communicate clearly what the user needs to do to resolve the problem (request for space permissions).

      When a user tries access a page with page level restrictions, and this user is not authorized to view the page, an "Access Denied" error is displayed. This is exactly this same behavior that should be used when user doesn't have space level permissions.

      Attachments

        Issue Links

          is duplicated by

          Suggestion - CONFSERVER-7073 Link to restricted pages that don't reveal page space/title - make tinyURLs give 'Page Not Found' if user lacks View permission

          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-14985 Handling of non-viewable spaces is inconsistent and leaks information

          • Medium - Medium priority issues
          • Closed

          Suggestion - CONFSERVER-21022 Provide option to return unauthorized message rather than 404 when user does not have permissions for page

          • Closed
          relates to

          Suggestion - CONFSERVER-6328 Hide page links when the user lacks permission to view the page

          • Closed

          Activity

            People

              cmiller CharlesA
              15d9a6950818 Igor Minar
              Votes:
              3 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: