Confluence HipChat integration ignores page permissions, exposing sensitive information

XMLWordPrintable

    • Type: Bug
    • Resolution: Duplicate
    • Priority: High
    • None
    • Affects Version/s: None
    • Component/s: None

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      1. Configure Confluence to notify a HipChat channel when a page gets created in a space.
      2. Create a new Page titled "Steps to fire Bob the Slacker". Don't save it yet.
      3. Change the restrictions on the page so only you can see it.
      4. Save the page.
      5. See the entire HipChat channel get notified that you have created a page called "Steps to fire Bob the Slacker".

      The reason I used page permissions is because I didn't want people to know about it. I didn't even know there was HipChat integration in the space. I am sad.

            Assignee:
            Unassigned
            Reporter:
            Justus Pendleton (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: