Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-58857

Confluence Android Mobile App allows user to create page in space that does not have Add Page permission

    XMLWordPrintable

Details

    Description

      Summary

      Confluence Android Mobile App allows user to create page in space that does not have Add Page permission

      Environment

      Confluence 6.15.8
      Confluence Server Android App v0.2.21
      Tested on Android 7.1.1

      Steps to Reproduce

      1. Create a new user and a new space grand only the accesses below:
        • Global Permission: Can Use
        • Space Permission(for the new space): All - View
      2. Login the newly created user from the web browser to make sure this user can only view the new space but not edit nor create any content
      3. Login Confluence using Android Mobile App and click on the "+" button on the bottom right to create a new page
      4. Click on the 3 dots on the top right corner and select Location
      5. On the Top Center menu, navigate to Spaces to show all spaces in Confluence
      6. Select the newly created space
      7. Give the page a title and Click Publish to create the page

      Expected Results

      User should not be able to create page in the space that is not granted with sufficient permission

      Actual Results

      A page is created in the space

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

      Attachments

        Issue Links

          Activity

            People

              jszklarz James Szklarz (Inactive)
              btan@atlassian.com Damien Tan
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: