-
Bug
-
Resolution: Not a bug
-
Medium
-
None
-
5.1.5
-
13
-
Severity 2 - Major
-
10
-
Don't use Copy Page function for copying restricted pages. If the space is watched (through Space watch and RSS); notifications are sent even if restrictions are set that should inhibit such notifications.
To reproduce:
1. Restrict viewing for a page to some individuals.
2. Log in with an account that is not allowed to see the page. Watch the space containing the page (through Space watch and RSS).
3. Log in with an account that has viewing access and editing permission for the page. Copy the page.
4.The watcher will be notified although the watcher has no viewing permission.
Expectation:
If a a page viewing restriction is set, it is also applied to page copies before notifications are sent.
Technical issue:
It seems that page restrictions are set or checked after (instead of before) the copy-page notification is generated.
- is duplicated by
-
CONFSERVER-36152 User receiving notification from a restricted space
- Closed
- is related to
-
CONFSERVER-37096 After removing the space permissions from a user, that user is still receiving notification
- Closed
- mentioned in
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...