NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.
Unable to move a restricted page under another page within space. Reproducible by the following steps:
- Create a user and a group, assign the user to the group
- Create a space
- Assign all permissions for the created space to the newly created user except Space Admin
- Create two pages within that space with the newly created user
- Set Edit and View restrictions on one of the pages for the newly created group
- Go to Browse > Pages > View: Tree and try moving the page with restictions set under the other page
- Operation will fail with the message "You can not restrict pages in the destination space. Remove restrictions before moving page."
According to documentation it should not require any other permissions.
- relates to
-
CONFSERVER-28839 Copying, restricting then moving a page produces stacktrace
-
- Closed
-
-
-
- Closed
-
[CONFSERVER-26138] Cannot move restricted page under another page within space
smaddox@atlassian.com, The fix for CONF-28839 changes the behaviour back to an earlier version of https://confluence.atlassian.com/display/DOC/Moving+a+Page
You need to have restrict page permission on the target space, not space admin permission. This still solves the scenario Sam describes.
It is a bug. The code is checking for space admin permissions but its intention is to check for restrict page permission.
In this instance, the documentation is incorrect and the code is behaving as expected.
In order to move content with restrictions, one needs to have Admin permission on the space to which the content is being moved. I believe this is a security feature, to stop someone from moving page A from a space that they can't change permissions in to one that they can change permissions in, modifying the permissions and then moving it back.
The documentation should be updated to say that Space Admin permission is required to move pages with restrictions.
This is inherently fixed by fixing
CONF-28839.In 5.2, when moving a restricted page, you need permission to restrict pages in the target space.
In previous versions you needed space-admin permission in the target space.