-
Suggestion
-
Resolution: Answered
-
None
NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion.
Confluence will display all groups registered on it when users access any group picker and put * value as its search parameter.
This is not a good implementation from security point of view as normal users would be able to see the whole groups. It would be better if group picker listed only the groups that the users are member of, which is how it is implemented in JIRA.
- is related to
-
CONFSERVER-26600 Group Picker Should Not Listed All Groups
- Closed
- relates to
-
CONFCLOUD-1882 Restricting access to user names and profiles
- Gathering Interest