Details
-
Suggestion
-
Resolution: Unresolved
-
None
-
None
-
1
-
Description
Hi Team,
A given user when adding a label to a page, is allowed suggested with labels from across spaces. One can also see the labels tagged to Pages present in restricted Spaces.
I have seen a similar request raised initially under CONFSERVER-12638
Replication and Observation:
Here is what I did on my Confluence ver 7.2.0-
- Log in as UserA(with Admin Access to All Spaces) creates a PageA in SpaceA and assigns LabelA to the page and saves the page.
- UserB(with access to one SpaceB only) logs in to Confluence and creates a PageB in the SpaceB and when begins to search to tag a label, UserB can see LabelA - even though the label was used in SpaceA tagged to PageA which UserB doesn't have access to.
Expected Results:
The Label suggestion should not list the labels tagged to pages in restricted Space(s).
Actual Results
User can see the label from a different space to which the user doesn't have view permissions.
Regards,
Venkat
Attachments
Issue Links
- relates to
-
CONFSERVER-33072 Any user without permission to view the page can view its label
-
- Gathering Impact
-
-
CONFSERVER-12638 Search results should only suggest related labels that contain content visible to user
- Closed
- is blocked by
-
CSP-268431 Loading...