-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Permissions - Global, Search - Automation and Indexing, Site - Admin Key
-
6
-
4
Issue Summary
CQL queries do not return restricted content even when a valid admin key is used with the appropriate header.
Steps to Reproduce
- Generate an admin key via POST /wiki/api/v2/admin-key.
- Use the key to perform a space lookup for a restricted space using GET /wiki/api/v2/spaces.
-
- Result: Space is returned when the Atl-Confluence-With-Admin-Key: true header is set.
- Perform a CQL search for content in the same restricted space using the header Atl-Confluence-With-Admin-Key: true.
-
- Result: No results returned.
Expected Results
CQL should return restricted content if a valid admin key is present in the request header.
Actual Results
CQL returns no content, even though it exists and is accessible via other endpoints.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available