-
Bug
-
Resolution: Fixed
-
Medium
-
4
-
Minor
-
0
-
Issue Summary
User is able to delete a calendar from calendar view despite only having view permission in the space.
Steps to Reproduce
- Find the calendar in a space or on your My Calendars page.
- Select next the calendar name and select Delete calendar.
- Select Delete to confirm.
Expected Results
Only calendar owner or site-admin, if configured, should be able to delete the calendar.
Actual Results
Any user that has access to the calendar view can delete calendars.
Workaround
Restrict editing directly in the calendar.
- is related to
-
CONFCLOUD-50319 Per calendar permission configuration.
- Closed
-
CONFSERVER-51029 Restrict Calendar Delete To Administrators
- Gathering Interest
- relates to
-
CONFCLOUD-51255 Event Delete Restriction
- Gathering Interest
-
CONFCLOUD-51381 Allow confluence-admin to update restrictions on a team-calendar
- Gathering Interest
- is addressed by
-
APOLLO-3184 Loading...