Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-34990

Copy Page: Notifications are sent to receivers that cannot view the page

XMLWordPrintable

      Don't use Copy Page function for copying restricted pages. If the space is watched (through Space watch and RSS); notifications are sent even if restrictions are set that should inhibit such notifications.

      To reproduce:
      1. Restrict viewing for a page to some individuals.

      2. Log in with an account that is not allowed to see the page. Watch the space containing the page (through Space watch and RSS).

      3. Log in with an account that has viewing access and editing permission for the page. Copy the page.

      4.The watcher will be notified although the watcher has no viewing permission.

      Expectation:
      If a a page viewing restriction is set, it is also applied to page copies before notifications are sent.

      Technical issue:
      It seems that page restrictions are set or checked after (instead of before) the copy-page notification is generated.

            Unassigned Unassigned
            6b30a95687b5 Arnold Späing
            Votes:
            31 Vote for this issue
            Watchers:
            40 Start watching this issue

              Created:
              Updated:
              Resolved: