Details
-
Bug
-
Resolution: Not a bug
-
Low
-
None
-
6.3.2, 6.7.2
-
None
-
1
-
Severity 3 - Minor
-
Description
Summary
Warning messages when deleting a Group is not accurate.
When trying to delete a group, a warning message below is shown before confirming the group delete:
Note: All the above permissions will be removed.
<group_name> currently has members. The memberships will be deleted.
Deleting a group will remove all permission restrictions associated with it. Content that is only restricted to this group will become available to all confluence users. Are you sure you want to delete <group_name>?
Based on the message above, pages that have View or Edit restriction only for this group would become no restriction and can be viewed/edited by everyone.
However, after deleting the group. Pages that are formally restricted to only this group would still be restricted and other users that never had the permission to view/edit would still have the restriction applied.
Environment
Confluence 6.7.2
Steps to Reproduce
- Create a new Group and add in any group member
- Go to Space Permission and grant permission to this group for a specific space
- Create a page in the space above and apply View/Edit restriction to only the newly created group in Step 1
- Delete the group created in Step 1
- Login using other user and try to view the new page that is created in Step 3
Expected Results
Any user who has appropriate Space Permission can view/edit the page
Actual Results
Restrictions still apply in the page created in Step 3. Other users that are not specifically allowed to view/edit the page won't be able to perform said action.
Attachments
Issue Links
- is related to
-
CONFSERVER-52679 Include a page restriction and permissions report with the Delete Group warning
- Closed