We couldn't load all Actvitity tabs. Refresh the page to try again.
If the problem persists, contact your Jira admin.
IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
Uploaded image for project: 'Confluence Cloud'
  1. Confluence Cloud
  2. CONFCLOUD-68290

Questions for Confluence: questions can be deleted by anyone with access to the space

      Issue Summary

      As far as it is understood in this documentation, questions and their answers should obey the space permissions which the questions are, but if a user/group has the view permission on the space, it is enough to get the answers and the questions deleted.

      Steps to Reproduce

      1. Make sure you have Questions for Confluence installed on your site;
      2. Using your main user, create a question on a space;
      3. Change the space permissions to the confluence-users group allowing only the view one;
      4. Using a different user that is a member of only confluence-users, access this space and go to the questions.

      Expected Results

      The second user is only able to see the question and its answers

      Actual Results

      The second user can delete the questions and its answers.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

            Loading...
            IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
            Uploaded image for project: 'Confluence Cloud'
            1. Confluence Cloud
            2. CONFCLOUD-68290

            Questions for Confluence: questions can be deleted by anyone with access to the space

                Issue Summary

                As far as it is understood in this documentation, questions and their answers should obey the space permissions which the questions are, but if a user/group has the view permission on the space, it is enough to get the answers and the questions deleted.

                Steps to Reproduce

                1. Make sure you have Questions for Confluence installed on your site;
                2. Using your main user, create a question on a space;
                3. Change the space permissions to the confluence-users group allowing only the view one;
                4. Using a different user that is a member of only confluence-users, access this space and go to the questions.

                Expected Results

                The second user is only able to see the question and its answers

                Actual Results

                The second user can delete the questions and its answers.

                Workaround

                Currently there is no known workaround for this behavior. A workaround will be added here when available

                        Unassigned Unassigned
                        vsiqueira Vinicius
                        Affected customers:
                        3 This affects my team
                        Watchers:
                        6 Start watching this issue

                          Created:
                          Updated:
                          Resolved:

                            Unassigned Unassigned
                            vsiqueira Vinicius
                            Affected customers:
                            3 Vote for this issue
                            Watchers:
                            6 Start watching this issue

                              Created:
                              Updated:
                              Resolved: