Description
(2) Confluence allows a user to add a child page under a page it cannot view (by choosing Add Page from the context menu while viewing the not accessible error message)
1. I have created a page with viewing restricted just to me.
2. I have tried access the page under a different account. I got the "You cannot view this page" message.
3. From the Add, menu, I have selected Page.
4. I got to the new page editor - I create a new page as a child of the restricted page I am not allowed to view.
5. After I save the page, instead of seeing the page contents, I get the message " You cannot view this page due to inherited restrictions "
For this issue, it's questionable whether it's a bug or a feature.
It can be perfectly explained - the new page was created as a child of a restricted page, and after it was saved, the inherited restrictions kicked in.
But if a user gets into this situation accidentally - the user just chooses "Add Page" to create a new page, without realizing he's currently trying to view an inaccessible page, the user could feel tricked that the content just posted is not accessible.
I personally think it's a bug and users should not be allowed to create child pages under pages they are not allowed to access.....
Attachments
Issue Links
- is related to
-
CONFSERVER-14453 Disallow adding a child page under a page it cannot view for non default themes
- Closed