-
Bug
-
Resolution: Won't Fix
-
Medium
-
None
-
4.3
-
None
If an Admin visits a page that has edit restrictions and selects either "Creately Diagram" (Creately plugin) or "UI Mockup" (Balsimiq plugin) then the page is changed and the image is inserted. Note that the admin has no elevate permissions at the current time.
To demonstrate the problem do the following.
- Install Confluence 4.3 (unsure if it happens with later versions)
- Install either or both the Creately and/or Balsamiq plugins.
- Have any user create a page and restrict the edit permissions to himself.
- Have the admin go to that page.
- Admin tries to edit the page and receives an error they don't have permissions (this is bug
CONF-25210) - this step is not required, included to show there are access restrictions. - Under Add menu select either "Creately Diagram" or "UI Mockup". In both cases a diagram is inserted by the plugin at the top of the page. No errors.
- relates to
-
CONFSERVER-25210 "Not Permitted" page when members of confluence-administrators attempt to edit pages on which they do not have edit permission
- Closed