-
Bug
-
Resolution: Not a bug
-
Low
-
None
-
No-Version
-
2
-
Severity 3 - Minor
-
NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.
Hi everyone, thank you for your interest in this ticket. After carefully reviewing it, we have decided that this is not a bug. To explain why, we need to understand how team calendars works. We have calendars, which have their own permissions, which are associated with one space. In a space's calendar view, you can add a bunch of existing calendars. According to this ticket, when a user is in this view, they should be restricted by what they can do based on where they are viewing the calendars from. In reality each calendar has its own permissions. It may make sense for each calendar to respect the individual space permissions for the space that it is associated with. I'm raising a suggestion that a view like this (which is made up of several calendars) should take into account edit permissions. This is tracked here: https://jira.atlassian.com/browse/CONFSERVER-58616
Thanks for your understanding.
Regards,
Niraj Bhawnani
Senior Development Team Lead, Confluence Server
Steps to replicate :
- Login to Confluence
- Create a new calendar and tie it to the space named "TEST"
- Create a new group named "confluence-test"
- Create a user named testing and add it to "confluence-test"
- Now grant space view permission for that individual user to the user named testing via Space tools >> Permissions
- Login as the newly create user named "testing" and access the "TEST" space Calendar section.
Current Result : The user is able to add new or import a calendar
Expected Result : The user should not be able to add new calendar since they only have view permission.
- is related to
-
CONFSERVER-58616 Team Calendars should take space edit permissions into account
- Gathering Interest
- relates to
-
-
- Closed
-