Contributors Summary Macro Shows Data to Anonymous Users

XMLWordPrintable

    • Severity 2 - Major
    • 1

      Steps to reproduce

      1. In Global Permission, ensure Anonymous users "Can Use" Confluence
      2. Create new Space , eg: SpaceA
        • Go To Space Tools > Permissions > Edit Permission > Ensure Anonymous Users has "View" Permission
        • Create a few test pages in SpaceA
      3. Then, create a page containing both Contributors Macro and Contributors Summary Macro
      4. Logout from Confluence and access the page created in Step 3

       

      Expected Behaviour:

      Confluence will not shows data and shows message that user is not authorized to see the data from the macro.

       

      Actual Behaviour

      Contributors Summary Macro shows data when Anonymous user accessing the page while Contributors Macro will throws "
      Failed to retrieve contributors information: Unauthorized" message.

       

        1. LoginUser.png
          77 kB
        2. image-2017-10-19-12-27-00-559.png
          8 kB
        3. AnonUser.png
          65 kB

              Assignee:
              Unassigned
              Reporter:
              Bernd Lindner
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: