The recovery admin account has limited access to administrative functions

XMLWordPrintable

    • 1
    • Severity 3 - Minor
    • 0

      Issue Summary

      The recovery admin account has limited access to administrative functions in Confluence v9.2.6. 

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Stop Confluence.
      2. Add the following system property, replacing <your-password> with a unique, temporary password. 
        {{CATALINA_OPTS="-Datlassian.recovery.password=<your-password> ${CATALINA_OPTS}"}} 
      3. Start Confluence
      4. Check the atlassian-confluence-security.log file and find a newly generated recovery username:
         {{2025-10-14 12:48:42,757 INFO [perm-delta-cache-receiver] [crowd.manager.recovery.SystemPropertyRecoveryModeService] isRecoveryModeOn Recovery mode is ON. Recovery admin username: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'}} 
      5. Log in with the recovery username from the log and the temporary password you specified in the system property.

      Actual Results

      • When navigated to the General Configuration administration page using the recovery admin credentials, all the administrative tasks such as 'User Directories', 'Cache Management' are visible.

      Expected Results

      • When navigated to the General Configuration administration page using the recovery admin credentials, administrative tasks such as 'User Directories', 'Cache Management' are not visible.

      Workaround

      • Currently there is no workaround for this issue.

            Assignee:
            Unassigned
            Reporter:
            Sunil Kumar C
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: