Details
-
Bug
-
Resolution: Won't Fix
-
Medium
-
None
-
3.2, 6.8.2
-
None
Description
Copied from CONF-19534
This might be by design, but when a user adds individuals or groups to the Edit Space Permissions page, they are immediately granted View privileges. If a user hits the Cancel button on the page, it only resets the checkboxes. It does not revert to the original permissions state from before the operation began.
While it is easy to remove these individuals and groups after the fact, it creates a dangerous expectation when administrators are learning the interface, as they might hit the cancel button and immediately navigate away from the page before noticing that the permission changes were added.
Normally, I could even consider this part of the learning curve for Confluence administrators, but with my end-users starting to look into Personal Spaces, it is starting to become a security risk.
Would it be possible to save the Permissions configuration when an edit operation is performed, and have the Cancel button revert to that?
Attachments
Issue Links
- relates to
-
CONFSERVER-19534 "Cancel" on Edit Permissions page does not clear added users/groups
- Closed