-
Bug
-
Resolution: Fixed
-
Low
-
1
-
Minor
-
Issue Summary
Users who do not have permission to edit a page, either based on space permissions or page restrictions, can still create a Jira issue using the "Create Issue" feature, thus creating a new version in the page history.
Creating a new Jira issue will be expected to publish a new version, but if a user does not have edit permissions on a page, they shouldn't get the option to create a new issue.
Steps to Reproduce
- In a Jira + Confluence site, create a new page, add some text. Publish the page.
- Add edit restrictions to only your user.
- Access that page as a different user, select the text, and you will see the Create Issue button pop-up. Select that button, and proceed with creating a Jira issue.
- Next, check the page history. You will see Confluence created a new page version under the second user's name. They should not have had permission to edit that page.
Expected Results
The Create Issue button shouldn't show for people who do not have page edit permissions.
Actual Results
Anyone with view permissions can create a new page version using the Create Issue button.
Workaround
Without removing view permissions, there is currently no known workaround for this behavior. However, a workaround will be added here when available.
- is related to
-
CONFCLOUD-69470 Ability to disable the create JIRA issue option by spaces in Confluence.
- Closed