Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-14255

Disallow adding a child page under a page it cannot view in default theme

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Low
    • 2.10.2
    • None
    • None

    Description

      (2) Confluence allows a user to add a child page under a page it cannot view (by choosing Add Page from the context menu while viewing the not accessible error message)

      1. I have created a page with viewing restricted just to me.
      2. I have tried access the page under a different account. I got the "You cannot view this page" message.
      3. From the Add, menu, I have selected Page.
      4. I got to the new page editor - I create a new page as a child of the restricted page I am not allowed to view.
      5. After I save the page, instead of seeing the page contents, I get the message " You cannot view this page due to inherited restrictions "

      For this issue, it's questionable whether it's a bug or a feature.

      It can be perfectly explained - the new page was created as a child of a restricted page, and after it was saved, the inherited restrictions kicked in.

      But if a user gets into this situation accidentally - the user just chooses "Add Page" to create a new page, without realizing he's currently trying to view an inaccessible page, the user could feel tricked that the content just posted is not accessible.

      I personally think it's a bug and users should not be allowed to create child pages under pages they are not allowed to access.....

      Attachments

        Issue Links

          Activity

            People

              cmiller CharlesA
              ivan@atlassian.com Ivan Benko [Atlassian]
              Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: