Uploaded image for project: 'Confluence Cloud'
  1. Confluence Cloud
  2. CONFCLOUD-57587

Ability to restrict page export permissions from specific users or groups

    • 34
    • 128
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem Definition

      In Confluence Server, the users can disable the add-ons responsible for content export, like PDF.

      However, in Cloud, this would be a restricted function due to needing to disable add-on modules. This is a suggestion to have a bundled option to disable the page export option for specific users or pages, for content like PDF, Word, XML.

      Suggested Solution

      Provide a way to restrict certain users or groups from exporting pages of specific spaces while still allowing them to have view access.

      Updates/Notes (Jan/2024)

      Hello everyone,

      For all the watchers of this request, we want to share an update that we have released functionality that allows the page export to be blocked based on policies configured by organization administrators:

      We understand that this is not solving this suggestion, but wanted to take the opportunity to learn about this new feature and use it, depending on how crucial blocking this function could be for your company.

      We appreciate your patience and feedback. Please, keep it coming!

      Wish you the best, 
      Giuliano C.

            [CONFCLOUD-57587] Ability to restrict page export permissions from specific users or groups

            Hi, as an organization, you want to have a central log, when, which user, exported which space or page. Such a log would be more important compared to only restrict users by permission, if you think of sensitive customer information, that you have in Confluence.

            Furthermore, there should be kind of an event or trigger, to be able to configure an approval workflow (with Jira). By that the 4-eye-principle will be adopted.

            This FR should be aligned with https://jira.atlassian.com/browse/CONFCLOUD-79017 

            Alexander Ziegltrum added a comment - Hi, as an organization, you want to have a central log, when, which user, exported which space or page. Such a log would be more important compared to only restrict users by permission, if you think of sensitive customer information, that you have in Confluence. Furthermore, there should be kind of an event or trigger, to be able to configure an approval workflow (with Jira). By that the 4-eye-principle will be adopted. This FR should be aligned with https://jira.atlassian.com/browse/CONFCLOUD-79017  

            I would also like this option, there will be many occasions where users will need read access to information but will have no need to print or export to PDF where it could then be re-distributed.

            Some basic functionality that would allow the ability to restrict the use of marketplace apps in spaces for specific users would also be an advantage where the app may circumvent default or inbuilt confluence permission.

            For example the Scroll PDF exporter has set templates to ensure any export or printed content meets the company format. It would be good to be able to restrict generic PDF export or print in favour of using a 3rd part app where printing or exporting maybe allowed, but where spaces and pages should be read only then the option to restrict print and export or all apps or even a selection of apps would be ideal.

            This would also make the use of the guest feature more secure. We all appreciate there is little control on users taking screen shots or photos, It would perhaps be good if right click context could also be turned off to avoid a select all and copy scenario.

            There are several things security related like this that should not be restricted to the premium subscriptions in favour of offering a robust base security suite on all versions, with enhances reporting and features on offer on the higher levels. 

            Hope this is something that can be introduced with some speed as more and more of our customers are asking how DLP is implemented and at present Confluence cloud is lacking some quite basic features on security or protection on what it out of the box a great platform

            Paul Burville added a comment - I would also like this option, there will be many occasions where users will need read access to information but will have no need to print or export to PDF where it could then be re-distributed. Some basic functionality that would allow the ability to restrict the use of marketplace apps in spaces for specific users would also be an advantage where the app may circumvent default or inbuilt confluence permission. For example the Scroll PDF exporter has set templates to ensure any export or printed content meets the company format. It would be good to be able to restrict generic PDF export or print in favour of using a 3rd part app where printing or exporting maybe allowed, but where spaces and pages should be read only then the option to restrict print and export or all apps or even a selection of apps would be ideal. This would also make the use of the guest feature more secure. We all appreciate there is little control on users taking screen shots or photos, It would perhaps be good if right click context could also be turned off to avoid a select all and copy scenario. There are several things security related like this that should not be restricted to the premium subscriptions in favour of offering a robust base security suite on all versions, with enhances reporting and features on offer on the higher levels.  Hope this is something that can be introduced with some speed as more and more of our customers are asking how DLP is implemented and at present Confluence cloud is lacking some quite basic features on security or protection on what it out of the box a great platform

            The Prevent Data Export should be modified to still allow Site Admins to export, 

            Tracy Stimac added a comment - The Prevent Data Export should be modified to still allow Site Admins to export, 

            Hello everyone,

            For all the watchers of this request, we want to share an update that we have released functionality that allows the page export to be blocked based on policies configured by organization administrators:

            We understand that this is not solving this suggestion, but wanted to take the opportunity to learn about this new feature and use it, depending on how crucial blocking this function could be for your company.

            We appreciate your patience and feedback. Please, keep it coming!

            Wish you the best, 
            Giuliano C.
            Atlassian Team

            Giuliano C. added a comment - Hello everyone, For all the watchers of this request, we want to share an update that we have released functionality that allows the page export to be blocked based on policies configured by organization administrators: Prevent Data Export We understand that this is not solving this suggestion, but wanted to take the opportunity to learn about this new feature and use it, depending on how crucial blocking this function could be for your company. We appreciate your patience and feedback. Please, keep it coming! Wish you the best,  Giuliano C. Atlassian Team

            Hello

            Please implement this feature.

            We really need it.

            Thank you

            Nguyen Phi Long added a comment - Hello Please implement this feature. We really need it. Thank you

            Very keen on this also please Atlassian. It will assist with DLP.

            Evan Taylor added a comment - Very keen on this also please Atlassian. It will assist with DLP.

            Just updating, the function Ben was referring to became Data Security Policies released this past month by Atlassian (although you will need Atlassian Access as mentioned) https://support.atlassian.com/security-and-access-policies/docs/what-is-a-data-security-policy/

            Belinda Baker added a comment - Just updating, the function Ben was referring to became Data Security Policies released this past month by Atlassian (although you will need Atlassian Access as mentioned) https://support.atlassian.com/security-and-access-policies/docs/what-is-a-data-security-policy/

            This is great news Ben.

            Nice to see ONE of these function request cases progressing to being fixed. Thanks for the update.

            Scott Windus added a comment - This is great news Ben. Nice to see ONE of these function request cases progressing to being fixed. Thanks for the update.

            Hello All,

            We have a similar feature in Beta that will allow Org Admins of Confluence Cloud to block pdf export from particular instances. It will be available for customers with an active Access Subscription. If you are interested in being part of the Early Access Program please email me at bmagro@atlassian.com

            Ben Magro
            Product Manager: Cloud Security

            Ben Magro (Inactive) added a comment - Hello All, We have a similar feature in Beta that will allow Org Admins of Confluence Cloud to block pdf export from particular instances. It will be available for customers with an active Access Subscription. If you are interested in being part of the Early Access Program please email me at bmagro@atlassian.com Ben Magro Product Manager: Cloud Security

            For what it's worth, I posted this question in January in the forums with our reasons why this feature would be good to have...

            Raymond Wan added a comment - For what it's worth, I posted this question in January in the forums with our reasons why this feature would be good to have...

              ee1911a8f30a Marie Casabonne
              gdecampos Giuliano C.
              Votes:
              220 Vote for this issue
              Watchers:
              165 Start watching this issue

                Created:
                Updated: