Details
-
Bug
-
Resolution: Fixed
-
Low
-
5.4, 5.4.1
-
None
Description
In Confluence 5.4.x versions, the user is getting comment notifications in a page that he's restricted to view. If you restrict an user to view or edit the page through 'Tools > Restrictions' and then comment in a page, the user will get the notification about it in the Workbox.
Steps to Reproduce:
- In a page go to 'Tools > Restrictions'
- Allow only the creator/administrator to view the page
- Comment mentioning an user in that page
- Login with the mentioned user
- Check the comment notification
- By accessing the page, you don't have permissions to see it
This case seems to be related/a regression of CONFDEV-17188 which was affecting the mention in a page. However, for this one, it's caused only by mentions in comments. Also looks similar as JRA-29354 which is affecting JIRA.
Note that it only happens with Confluence 5.4.x versions. Other versions doesn't even display the notification for the user. For both the page and the comments.
Attachments
Issue Links
- is related to
-
JRASERVER-29354 Mention notifications do not respect the "Viewable by" security level restriction set on a comment
- Closed
- relates to
-
CONFSERVER-39835 Users who contribute to a page (watch/upload attachment) get comment notification even the page have been restricted to only some user.
- Gathering Impact