-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Component/s: Account - Identity Manager
-
None
-
1
-
Minor
Issue Summary
The security configuration "User email visibility" is not being respected on Confluence cloud.
Steps to Reproduce
As a Confluence admin, set the User email visibility security configuration to only visible to site administrators'
As a regular Confluence user, configure the Atlassian account's profile visibility setting and set Email Address = Anyone (visible to any user in cloud)
As the regular user above, create a page in the Confluence site
As another Confluence user without site-admin access, inspect the activity logged by the user above.
Expected Results
Based on the site's User email visibility settings, the email address of the user should not be visible to other users.
https://support.atlassian.com/confluence-cloud/docs/configure-user-email-visibility/
Only visible to site administrators only Confluence administrators can see the email addresses. Note that, if you select this option, email addresses will not be available in the 'User Search' popup (e.g. when setting Add or Remove Page Restrictions).
Actual Results
The email address of the account is listed.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available