-
Bug
-
Resolution: Fixed
-
Medium
-
2.5.5, 2.5.6
-
None
When a user doesn't have view permission to view a space, he/she receives 404 page when accessing URLs from this space.
This is a bad UI design. Instead an "Access denied" error should be displayed to communicate clearly what the user needs to do to resolve the problem (request for space permissions).
When a user tries access a page with page level restrictions, and this user is not authorized to view the page, an "Access Denied" error is displayed. This is exactly this same behavior that should be used when user doesn't have space level permissions.
- is duplicated by
-
CONFSERVER-7073 Link to restricted pages that don't reveal page space/title - make tinyURLs give 'Page Not Found' if user lacks View permission
- Closed
- is related to
-
CONFSERVER-14985 Handling of non-viewable spaces is inconsistent and leaks information
-
- Closed
-
-
CONFSERVER-21022 Provide option to return unauthorized message rather than 404 when user does not have permissions for page
- Closed
- relates to
-
CONFSERVER-6328 Hide page links when the user lacks permission to view the page
- Closed