Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-1572

Page Revision Security and Permissions

XMLWordPrintable

    • We collect Confluence feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion.

      We can currently restrict the visibility of a space from being viewed by other people. I have suggested before (CONF-938) that a page / blog be restrictable in a similar way, but the idea can go a level further.

      Should a well established page (eg: change log, or press release page) be revised and a new revision created - it would be extraordinarily useful to be able to restrict the visibility of that page to "editors" (or another specified group) so that it can be vetted.

      The editor would then be able to review it and set it to be publicly visible (after any alternations he deemed to be nessesary).

            [CONFSERVER-1572] Page Revision Security and Permissions

            BillA added a comment -

            Thank you for raising this issue. While we can see how this feature would be useful, we have no plans to implement it in the foreseeable future. In order to set expectations, we're closing this request now.

            Thanks again for your idea.

            Bill Arconati,
            Confluence Group Product Manager

            BillA added a comment - Thank you for raising this issue. While we can see how this feature would be useful, we have no plans to implement it in the foreseeable future. In order to set expectations, we're closing this request now. Thanks again for your idea. Bill Arconati, Confluence Group Product Manager

            AudraA added a comment - - edited

            from Ben Vaughn (United Airlines):

            There's no fine-grained Partial Page Access Restriction. PPAR allows companies that have confidential information to write one article (for us, say, about bomb threats) and share the information inside the article to different employee groups based on group membership — being able to show Paragraphs 1 and 2 to all employees while displaying Paragraph 3 only to pilots and members of corporate security would be entirely useful both for us and for a lot of other companies that work with sensitive data. As it is we had to deploy the show-to macros that were written by an outsider.

            • Referencing the earlier point, there's no way to restrict viewing of source content to end-users. This is a problem when you're using a SQL query plug-in and have database credentials exposed in the article source, or when you are doing PPAR and don't want people to see your original content. Our solution to this problem: edit the viewPageSource and other related pages to not permit viewing unless you have EDIT permissions.

            AudraA added a comment - - edited from Ben Vaughn (United Airlines): There's no fine-grained Partial Page Access Restriction. PPAR allows companies that have confidential information to write one article (for us, say, about bomb threats) and share the information inside the article to different employee groups based on group membership — being able to show Paragraphs 1 and 2 to all employees while displaying Paragraph 3 only to pilots and members of corporate security would be entirely useful both for us and for a lot of other companies that work with sensitive data. As it is we had to deploy the show-to macros that were written by an outsider. Referencing the earlier point, there's no way to restrict viewing of source content to end-users. This is a problem when you're using a SQL query plug-in and have database credentials exposed in the article source, or when you are doing PPAR and don't want people to see your original content. Our solution to this problem: edit the viewPageSource and other related pages to not permit viewing unless you have EDIT permissions.

            Volker Kleinschmidt added a comment -

            Yes, moderation would be very useful - but one would need to be able to specify per-page as well as per-space whether moderation should be enabled. And if a new revision of a moderated page has been created, the current revision needs to remain visible, with perhaps a little indicator that a newer revision is pending review (might want an admin-option to turn that indicator off). Also there needs to be a quick interface listing all review-pending pages in the space.

            Volker Kleinschmidt added a comment - Yes, moderation would be very useful - but one would need to be able to specify per-page as well as per-space whether moderation should be enabled. And if a new revision of a moderated page has been created, the current revision needs to remain visible, with perhaps a little indicator that a newer revision is pending review (might want an admin-option to turn that indicator off). Also there needs to be a quick interface listing all review-pending pages in the space.

              Unassigned Unassigned
              dhardiker Dan Hardiker
              Votes:
              5 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: