Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-59516

Clicking preview on attachment in page if using administrator account will result in preview not found (404)

    XMLWordPrintable

Details

    Description

      Issue Summary

      Clicking on a preview of the attachment (let's say PPTX file) on a page, with an admin account, that does not have explicit edit/view permissions on a page, will result in 404, preview not find. Furthermore, the sandbox will not be triggered to generate the preview, if the preview was never generated.

      Steps to Reproduce

      1. Create a single node DC instance.
      2. Create an admin (admin2) account that does not have an explicit view or edit permissions on a space.
      3. Create an admin (admin1) that has explicit permissions on that space.
      4. Attach pptx file and save the page.
      5. Check with the user admin1 if the preview is visible, and it will be visible.
      6. Now log out and log in with admin2 (user does not have an explicit view and edit permissions on this space).
      7. Click on the preview of the pptx file

      Expected Results

      Preview will be visible.

      Actual Results

      Preview will not be visible, and in Networks tools tab we will see 404

      Notes

      Sandbox process for conversion will not be triggered.

      Workaround

      The only known workaround would be to explicitly add the admin as an Individual or within a group that they belong to within the space permissions and configure that entry with Attachment Add permissions.

      Attachments

        Issue Links

          Activity

            People

              c489f032eb76 Roman Yaremenko (Inactive)
              gpaunovic g
              Votes:
              4 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated: