Move page link refactoring sends "page_updated" response, triggering Automations and Anonymous User entries in the Audit log

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Low
    • Component/s: Page - Linking
    • None
    • 1
    • Severity 3 - Minor

      Issue Summary

      •  The Organization Audit Logs are showing "Edited Confluence page" events with Anonymous User as Actor when pages are moved between spaces

      ▪  Even if the Site has Anonymous Access disabled
      •  Confluence Automations are triggered for pages that contain links to the moved page

      ▪  Even without any user action on those pages
      •  This is a separate code path from CONFCLOUD-84308 (which fixed title renames only). The page move link refactoring path was not covered by the fix.

      Steps to Reproduce

        1.  Setup a Confluence Automation, with the trigger being Page Edited in a Space
        2.  Create Space A and Space B
        3.  In Space A, create a new page as "Page A" and publish it
        4.  Copy the link / URL of "Page A"
        5.  In Space A, create a new page as "Page B"
        6.  Paste the URL to "Page A" and add it as a Smart Link (Inline, Card or Embed views)
        7.  Publish "Page B"
        8.  Move "Page A" from Space A to Space B
        9.  Navigate to "Page B" and notice the Smart Link has been updated to reflect the new location of "Page A"
       10.  Review the Org Audit Logs for the Site → We see an entry saying an "Anonymous User has edited Page B"
       11.  Review the Automation → We see that the "Automation was triggered for Page B"

      Expected Results

      Link refactoring during page moves should not trigger a "page_updated" response for pages that reference the moved page.

      Actual Results

      Link refactoring during page moves sends "page_updated" response:

      •  Triggering automations for pages without user action
      •  Adds entries in the Org Audit logs, wrongly attributed to Anonymous Users
      Note: The fix for CONFCLOUD-84308 (link_refactoring_suppress_events gate) only covers the title rename path (updateReferrersForContentTitleUpdate). The page move path (updateReferrersForMovingPage and contractAbsoluteReferencesInContent) does not check the gate and always uses DefaultSaveContext.REFACTORING with suppressEvents=false.

      Workaround

      Add a condition to the Automation rule to filter out anonymous/system triggers: "User IS NOT anonymous" or "User IS IN GROUP confluence-users".

              Assignee:
              Unassigned
              Reporter:
              Ben Keene
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: