Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-34990

Copy Page: Notifications are sent to receivers that cannot view the page

    XMLWordPrintable

Details

    Description

      Don't use Copy Page function for copying restricted pages. If the space is watched (through Space watch and RSS); notifications are sent even if restrictions are set that should inhibit such notifications.

      To reproduce:
      1. Restrict viewing for a page to some individuals.

      2. Log in with an account that is not allowed to see the page. Watch the space containing the page (through Space watch and RSS).

      3. Log in with an account that has viewing access and editing permission for the page. Copy the page.

      4.The watcher will be notified although the watcher has no viewing permission.

      Expectation:
      If a a page viewing restriction is set, it is also applied to page copies before notifications are sent.

      Technical issue:
      It seems that page restrictions are set or checked after (instead of before) the copy-page notification is generated.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              6b30a95687b5 Arnold Späing
              Votes:
              31 Vote for this issue
              Watchers:
              40 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: