Uploaded image for project: 'Atlassian Intelligence'
  1. Atlassian Intelligence
  2. AI-1010

Unexpected results using Search while impersonating user

XMLWordPrintable

    • 1
    • Major
    • Confluence

      Issue Summary

      When the org admin and/or Support logs in as/impersonates a certain user and conducts a search in Confluence, the returned results are not reflective of that impersonated user's perms and access.

       

      Steps to Reproduce

      1. Log in as a user through the instance's admin UI.
      2. Once logged into Confluence as the impersonated user, conduct a quick search or advanced search on information that the impersonated user does not have access to.
      3. Observe that the returned results include information normally restricted from the impersonated user.

      Expected Results

      The search should not return information that the impersonated user does not have access to.

      Actual Results

      The search returns information normally not included in the impersonated user's access/permissions.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available.

            [AI-1010] Unexpected results using Search while impersonating user

            Kier Lomugdang added a comment -

            We are able to reproduce the bug on our end and will be prioritising this bug to be fixed, apologies for the misconfiguration and thank you for raising this bug.

            For the moment, please consider the following:

            As only organization admins are able to use the impersonation feature (link), please restrict the number of organization admins to users who need full access.

            Kier Lomugdang added a comment - We are able to reproduce the bug on our end and will be prioritising this bug to be fixed, apologies for the misconfiguration and thank you for raising this bug. For the moment, please consider the following: As only organization admins are able to use the impersonation feature ( link ), please restrict the number of organization admins to users who need full access.

              691c5ad1d997 Richard Washer
              30ca2e4a47d1 Matt Hansen
              Affected customers:
              1 This affects my team
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: