Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-8877

Security issue: user can copy page with only view permissions

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • High
    • 2.5.5
    • 2.5.4
    • None

    • Conf 2.5.4, Tomcat, Windows, SlqlServer

    Description

      I have a user who only has view permissions to a space.
      Logging on as that user, I went to the Info tab of a page.
      The Copy operation appeared, and I was able click the link, edit the copied page, and save it.

      This must be a security hole?

      Attachments

        Issue Links

          is related to

          Suggestion - CONFSERVER-33031 copy page is not possible if the user has only read access to a space

          • Closed

          Activity

            People

              sleberrigaud Samuel Le Berrigaud
              9f7dc9981cd2 Jon Nermut
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: