Uploaded image for project: 'Confluence Server'
  1. Confluence Server
  2. CONFSERVER-45352

Hidden content of Page Properties macro is available in search when you user have read permissions

    Details

    • Symptom Severity:
      Major
    • Support reference count:
      1
    • QA Demo Status:
      Not Done
    • QA Kickoff Status:
      Not Done

      Description

      Summary

      The content of Page Properties macro is available from the search even if it's hidden (with Hidden property) on the page if the user has View permissions on space or "Read Only" restriction for the page.
      The issue is reproducible with anonymous access as well.

      Steps to Reproduce

      1. Create space
      2. Assign View permission on this space to one of the groups
      3. Create a page in that space and add Page Properties macro with hidden attribute
      4. Search for the word used as an attribute or as as value in Page Properties macro

      Expected Results

      The text from hidden Page Properties macro is available in search only for the users with Edit permissions

      Actual Results

      The hidden text is available in search results for all users with View permissions

      Workaround

      No workaround currently avaialble.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              ashaleev Anton Shaleev
              Participants:
              Last Touched By:
              Katherine Yabut
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Last commented:
                21 weeks, 3 days ago