Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-37260

Restricted blog posts are not listed in the Restricted Pages list

    XMLWordPrintable

Details

    Description

      Summary

      Restricted blog posts are not listed in the Restricted Pages list and cannot be seen by Confluence Administrators. This is against the description in the documentation,

      The Confluence admin is not able to view the blog post as well from the space blog post stream page

      Space Administrator should be able to view the list of restricted pages in a space

      Steps to Reproduce

      1. Create a new space
      2. Create a blog in this space
      3. Restrict this blog post to yourself
      4. Log in as Confluence Administrator user
      5. Go to the space > Space Tools > Permissions > Restricted Pages
      6. Access the blog post streams for the space with the Confluence admin account. Admin will not be able to view the blog post.

      Expected Results

      1. All the restricted pages are displayed in the list

      Actual Results

      The blog post is not listed there and admin is not able to view the blog post as well

      Notes

      Any restricted normal pages will be listed there

      Comment from customer:

      On restricted pages the space/confluence admin is able to display the restricted pages in space administration -> permissions -> restricted pages
      This is not possible for blog posts.
      Our internal controlling MUST be able to at least be aware that there are blog posts not visible to them. This is not possible by now (5.7.3)

      Workaround

      1. Use the following SQL query to find out any blog post that has a "View" restriction set in the space level:

      SELECT
      s.SPACENAME,
      s.SPACEID,
      c.CONTENTID,
      c.CONTENTTYPE,
      c.TITLE,
      o.CONT_PERM_TYPE
      
      FROM
      SPACES s
      LEFT JOIN CONTENT c
      
      ON
      s.SPACEID = c.SPACEID
      LEFT JOIN CONTENT_PERM_SET o
      
      ON
      c.CONTENTID = o.CONTENT_ID
      WHERE c.CONTENTTYPE = 'BLOGPOST'
      AND CONT_PERM_TYPE = 'View'
      AND s.SPACENAME = '<name of space>'
      ORDER BY 2 DESC, 1 ASC;
      

      Take note of the "contentID" shown in the SQL result. Using Admin rights, access this page by its URL:

      <base_URL>/pages/viewpage.action?pageId=<contentID obtained>
      

      2. Disable normal users to restrict all contents in the space level:
      Go to Space Tools > Permission > Remove the "Add/Delete" Restriction rights from normal users

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              160e57dc4064 Jan-Peter Rusch
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated: