Details
-
Bug
-
Resolution: Fixed
-
Medium
-
2.4.15
-
1
-
Severity 2 - Major
-
10
-
Description
Summary
Users if mentioned receive emails with answers/comments on questions in a restricted space they don't have permissions to view
Steps to reproduce
- Ask a question in a restricted space and mention a user that doesn't have permissions to access this space
- Add a comment to the question and mention the user
- Answer the question and mention the user
Expected result
The user should not receive emails with contents that he/she doesn't have permissions to view.
Actual result
The user receives emails of those answers/comments. If he/she clicks on the links sent in the emails, the links are blocked. However, the contents are still available in the emails.
Attachments
Issue Links
- duplicates
-
CONFSERVER-47192 Users without view permission to a private space may still see private questions in Popular tab, Topic counters, or search results
- Gathering Impact
- relates to
-
CONFSERVER-46586 Users with the Confluence Administrator or System Administrator permissions receive notifications to questions tagged with watched topics in restricted spaces
- Closed
- is blocked by
-
PSR-55 Loading...
- mentioned in
-
Page Loading...