Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-5633

Page level edit permissions should automatically assume the inclusion of the view permission

    • Icon: Bug Bug
    • Resolution: Invalid
    • Icon: Medium Medium
    • None
    • None
    • None
    • None

      Currently if you give a group edit permissions they will not automatically have the view permission. This makes no sense at all, given that any one who can edit something can not only view it, they can edit it.

      We need to fix this.

      We need to make sure that any group or individual given the edit page permission is automatically given the view page permission as well.

            [CONFSERVER-5633] Page level edit permissions should automatically assume the inclusion of the view permission

            We've created a new issue that more clearly defines the improvement required here.

            Please see CONF-10271

            Paul Curren added a comment - We've created a new issue that more clearly defines the improvement required here. Please see CONF-10271

            I'm closing this issue since I believe it is actually a misunderstanding of page level restrictions.

            If you think I've got this wrong please clarify and we'll reconsider.

            Paul Curren added a comment - I'm closing this issue since I believe it is actually a misunderstanding of page level restrictions. If you think I've got this wrong please clarify and we'll reconsider.

            Volker,

            Let us give you one example of one simple case where it does not make sense to automatically grant view restriction on granting an edit restriction.

            Say I restrict the editing of a page to myself, I do not want the viewing of the page to be automatically restricted to myself as I still want everyone else to be able to see it.

            Paul Curren added a comment - Volker, Let us give you one example of one simple case where it does not make sense to automatically grant view restriction on granting an edit restriction. Say I restrict the editing of a page to myself, I do not want the viewing of the page to be automatically restricted to myself as I still want everyone else to be able to see it.

            Volker Kleinschmidt added a comment - - edited

            Don, you cannot automatically add a view restriction when an edit restriction is set so that user X or group Y are permitted to edit the page - the group of users permitted to view the page is most likely broader/larger, and adding such a restriction automatically would wrongly limit them.

            Your example of a group being able to edit, but possibly only some members of it being able to view the page does make some sense in the context of automatically assigning edit restrictions to a large set of pages via automation, but I think would be a rather rare usage. Almost all the time I would expect that users permitted to edit a page should also be able to view it.

            And don't forget that while viewing restrictions filter down to child pages, edit restrictions do not (at least not on 2.5.6). So you don't have an edit restriction on a child page merely by inheritance.

            Volker Kleinschmidt added a comment - - edited Don, you cannot automatically add a view restriction when an edit restriction is set so that user X or group Y are permitted to edit the page - the group of users permitted to view the page is most likely broader/larger, and adding such a restriction automatically would wrongly limit them. Your example of a group being able to edit, but possibly only some members of it being able to view the page does make some sense in the context of automatically assigning edit restrictions to a large set of pages via automation, but I think would be a rather rare usage. Almost all the time I would expect that users permitted to edit a page should also be able to view it. And don't forget that while viewing restrictions filter down to child pages, edit restrictions do not (at least not on 2.5.6). So you don't have an edit restriction on a child page merely by inheritance.

            There are no page level edit permissions, there are only page level edit restrictions. Page level permissions cannot be given, merely removed or not removed.

            It makes perfect sense to me that somebody who cannot view a page cannot edit it.

            While I agree that it makes little sense to grant edit permissions to a group that cannot view a page. It does make sense to grant edit permissions to a group which contains some members that can view a page and some members that cannot view a page.

            The only way I can see this Feature Request making sense is if it means:

            When a page contains existing view restrictions, and the user adds an edit restriction for a user or group, a view restriction should automatically be added for that user or group. I would be okay with that as long as the view restriction was added explicitly, as a convenience.

            If the suggestion is that anybody given an edit restriction should be automatically able to view the page, regardless of what viewing restrictions apply to its parent pages or spaces, then I'm strongly against it.

            Don Willis added a comment - There are no page level edit permissions, there are only page level edit restrictions. Page level permissions cannot be given, merely removed or not removed. It makes perfect sense to me that somebody who cannot view a page cannot edit it. While I agree that it makes little sense to grant edit permissions to a group that cannot view a page. It does make sense to grant edit permissions to a group which contains some members that can view a page and some members that cannot view a page. The only way I can see this Feature Request making sense is if it means: When a page contains existing view restrictions, and the user adds an edit restriction for a user or group, a view restriction should automatically be added for that user or group. I would be okay with that as long as the view restriction was added explicitly, as a convenience. If the suggestion is that anybody given an edit restriction should be automatically able to view the page, regardless of what viewing restrictions apply to its parent pages or spaces, then I'm strongly against it.

            BenjaminA added a comment -

            We should resolve these at the same time.

            BenjaminA added a comment - We should resolve these at the same time.

              Unassigned Unassigned
              ben@atlassian.com BenjaminA
              Affected customers:
              4 This affects my team
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: