-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Permissions - Space
-
None
-
2
-
1
Issue
Currently, the space admin can remove setting of content restrictions from [Space Settings] > [Restricted]. However, they can't add a user or group to that setting.
In this situation, if the space admin attempts to view a page with content restrictions, they might remove the restriction and thereby gain access to the page. This is not ideal for security.
To avoid this risk, it would be beneficial to allow space admins not only to remove content restrictions but also to add them.
Suggestion
Given this background, here are my suggestions
- Allow space admins to use a feature similar to a admin key to grant them access to pages with content restrictions when they attempt to view them.
- Allow the addition of permissions from Space Settings, not just the removal of content restrictions.