-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 6.6.3, 6.12.0
-
Component/s: Navigation - Sidebar
-
Severity 3 - Minor
Issue Summary
The Space sidebar contains a Create page link even when the current user doesn't have the Add page permission.
If that user clicks on that link, then a No Permission page is loaded with the wrong warning message.
Even if a mail server is configured, this page won't load the Request Access button.
Environment
Fresh install of Confluence 6.12.0.
It was confirmed on 6.6.3 as well.
Steps to Reproduce
Create a fresh install of Confluence Server and do the following as the admin:
- Add a new user (user001) to Confluence and make sure it is added only to the confluence-users group.
- Create a new space named Space A.
- Add the View Space Permission and remove any other related to the confluence-users group.
Access Confluence as user001:
- Access Space A home page and you will see the Create page link in the side bar.
- Click on the Create page link and the No Permission page is loaded with the wrong warning message.
Expected Results
- If the user doesn't have the Add page permission, the Create page link doesn't appear in the sidebar.
- If the link must be there, then the No permission page should give a meaningful message saying the user doesn't have permission to create pages on that Space and should render the Request Access button if the mail server is enabled.
Actual Results
- The user has access to a Create page link even when the Add page permission is not granted.
- Access the createpage.action link to a Space on which the user doesn't have the Add page permission shows a confusing message.
Workaround
None at this moment
- relates to
-
CONFSERVER-56031 Problems with page restricted warning and request access from viewpageattachments
-
- Closed
-