Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-16626

Profile images throughout Confluence are broken when anonymous view profile permission is off

    XMLWordPrintable

Details

    Description

      Steps to reproduce:

      1. Upload a profile image
      2. Make a change in a public space
      3. Modify global permissions so that anonymous doesn't have access to user profiles
      4. Log out
      5. Go to the dashboard

      A broken image will be present next to your user name in the recently updated section.

      In firefox this is issue is not visible (broken image just doesn't render), but in Safari and possibly IE there is a broken image placeholder rendered instead of the image.

      The same issue affects comments on wiki pages which will most likely affect more users than the dashboard alone.

      An unfortunate side effect of this bug a significant performance penalty that is a result of http redirection to the login page and retrieval of this page for all links to profile images. Under normal circumstances all profile images are cached in the browser, so this is not an issue. Browsers however won't cache 302 redirections.

      Attachments

        1. broken-profile-image.png
          broken-profile-image.png
          2 kB
        2. firefox.png
          firefox.png
          6 kB
        3. ie.png
          ie.png
          9 kB

        Issue Links

          Activity

            People

              akdominguez Katrina Walser (Inactive)
              15d9a6950818 Igor Minar
              Votes:
              6 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: