Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-15267

Import Pages is not restricted to system admins

XMLWordPrintable

      The Import pages actions is currently restricted to space admins not system admins like it should.

      Caused by CONF-10039

        1. ImportPagesAction.class
          5 kB
        2. ImportPagesAction$1.class
          0.9 kB

            [CONFSERVER-15267] Import Pages is not restricted to system admins

            Azwandi Mohd Aris (Inactive) added a comment -

            Hi Xin,

            Allow me to clarify on this issue. I believe that the patch has now been included in Confluence 3.0 as I can verify it locally. I hope that you are aware of the difference of Confluence Administrator and System Administrator. These two are permissions you can grant to a user/group in the Global Permissions page. To get a picture of it, kindly please refer to our documentation:

            Previously, users/groups with the Confluence Administrator permission were able to run the "Import pages from disk". This did not streamline with the definition of these two permissions - Confluence Administrators should not be allowed to execute any actions that could compromise the security of the system.

            You might want to check if you have been granted a System Administrator permission. Ideally, if you/your group does not have that permission, you should not see the "Import pages from disk" link in the Space Admin.

            Cheers,
            Azwan

            Azwandi Mohd Aris (Inactive) added a comment - Hi Xin, Allow me to clarify on this issue. I believe that the patch has now been included in Confluence 3.0 as I can verify it locally. I hope that you are aware of the difference of Confluence Administrator and System Administrator. These two are permissions you can grant to a user/group in the Global Permissions page. To get a picture of it, kindly please refer to our documentation: http://confluence.atlassian.com/display/DOC/Global+Permissions+Overview#GlobalPermissionsOverview-ComparingtheSystemAdministratorwiththeConfluenceAdministratorPermission Previously, users/groups with the Confluence Administrator permission were able to run the "Import pages from disk". This did not streamline with the definition of these two permissions - Confluence Administrators should not be allowed to execute any actions that could compromise the security of the system. You might want to check if you have been granted a System Administrator permission. Ideally, if you/your group does not have that permission, you should not see the "Import pages from disk" link in the Space Admin. Cheers, Azwan

            xin added a comment -

            Why should we restrict the import pages actions to system admin? I installed confluence 3.0, I am still able to see the link Import Pages from Disk on space admin page.

            xin added a comment - Why should we restrict the import pages actions to system admin? I installed confluence 3.0, I am still able to see the link Import Pages from Disk on space admin page.

            Andrew Lynch (Inactive) added a comment - - edited

            To apply these patches for 2.10, please place the provided classes in WEB-INF/classes/com/atlassian/confluence/spaces/actions (you may need to create some of these directories).

            Please Note: You will need to shut down and restart your Confluence server in order for these patches to take effect.

            Regards,
            Andrew Lynch

            Andrew Lynch (Inactive) added a comment - - edited To apply these patches for 2.10, please place the provided classes in WEB-INF/classes/com/atlassian/confluence/spaces/actions (you may need to create some of these directories). Please Note: You will need to shut down and restart your Confluence server in order for these patches to take effect. Regards, Andrew Lynch

              bnguyen Brian Nguyen (Inactive)
              bnguyen Brian Nguyen (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: