Issue Summary

Confluence sends "Content Created/Updated" email notifications that attribute actions to deactivated users. This occurs when a system-to-system (S2S) metadata update triggers a new version of a Whiteboard, and the system defaults to the last known modifier as the "actor," even if that user is deactivated and has not accessed the site.

Steps to Reproduce

• Have a Confluence Whiteboard originally created or last modified by a user who is now deactivated.
• A system-level event occurs (e.g., a parent page permission change, a move, or an internal metadata sync).
• The system generates a new version of the Whiteboard (S2S request).
• Observe the resulting email notification sent to watchers/users.

Expected Results

The notification should either:

• Identify the action as a system update.
• Not attribute the action to a deactivated user.
• Not trigger a "Created" notification for a board that has existed for a long time.

Actual Results

An email notification is sent stating "[User Name] created [Whiteboard Name]", where the user is deactivated. This causes significant security concerns for customers who believe a deactivated account has been compromised or reactivated.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available