Details
-
Bug
-
Resolution: Fixed
-
Medium
-
4
-
Minor
-
0
-
Description
Issue Summary
User is able to delete a calendar from calendar view despite only having view permission in the space.
Steps to Reproduce
- Find the calendar in a space or on your My Calendars page.
- Select next the calendar name and select Delete calendar.
- Select Delete to confirm.
Expected Results
Only calendar owner or site-admin, if configured, should be able to delete the calendar.
Actual Results
Any user that has access to the calendar view can delete calendars.
Workaround
Restrict editing directly in the calendar.
Attachments
Issue Links
- is related to
-
CONFCLOUD-50319 Per calendar permission configuration.
- Closed
-
CONFSERVER-51029 Restrict Calendar Delete To Administrators
- Gathering Interest
- relates to
-
CONFCLOUD-51255 Event Delete Restriction
- Gathering Interest
-
CONFCLOUD-51381 Allow confluence-admin to update restrictions on a team-calendar
- Gathering Interest
- is addressed by
-
APOLLO-3184 Loading...