Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-60396

Trying to download all files from a Knowledge Base article from Jira Servicedesk with an unlicensed user results in a Not Permitted message

      Issue Summary

      As an unlicensed user, if we try to download all attachments via the “Download All” link in the Attachments Macro, Confluence blocks the procedure with a “Not Permitted” message.

      Steps to Reproduce

      1. Create a knowledge base for Jira Servicedesk
      2. Select the “All active users and customers can access the knowledge base without a Confluence space”
      3. Create a new page for the knowledge base
      4. Place an Attachments macro in the page
      5. Create a user with Jira Servicedesk access
      6. If the user base is different for Confluence and Jira, create the user in Confluence as indicated by documentation (https://confluence.atlassian.com/servicedeskserver/knowledge-base-settings-and-permissions-956713322.html)
      7. Go the page you created earlier
      8. Click to “Download All”

      Expected Results

      All the attachments are downloaded

      Actual Results

      There is a redirect to an address that looks like this: localhost:8090/confluence/pages/downloadallattachments.action?pageid=<pageID> and there is a “Not Permitted” message shown.

      The same behavior is present through the Customer portal.

      Workaround

      The user can either click the attachment link in the macro and then download the file from the tab that opens up after the click or select to preview the file and then download it from there.

      Enabling anonymous access and then not logging in to Confluence also works around this behavior.

            [CONFSERVER-60396] Trying to download all files from a Knowledge Base article from Jira Servicedesk with an unlicensed user results in a Not Permitted message

            SET Analytics Bot made changes -
            UIS Original: 0 New: 1
            SET Analytics Bot made changes -
            UIS Original: 2 New: 0
            SET Analytics Bot made changes -
            UIS New: 2
            Jen Marfell (Inactive) made changes -
            Status Original: Needs Triage [ 10030 ] New: Gathering Impact [ 12072 ]
            Jiri Hronik made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 509598 ]
            Yann made changes -
            Component/s New: User - Global / Space Permissions [ 42806 ]
            Component/s Original: Knowledge Base [ 26195 ]
            Key Original: JSDSERVER-7013 New: CONFSERVER-60396
            QA Demo Status New: Not Done [ 14330 ]
            QA Kickoff Status New: Not Done [ 14234 ]
            Affects Version/s New: 7.5.1 [ 91990 ]
            Affects Version/s Original: 4.5.1 [ 89600 ]
            Workflow Original: JAC Bug Workflow v3 [ 3989124 ] New: CONFSERVER Bug Workflow v4 [ 4001969 ]
            Project Original: Jira Service Desk Server and Data Center [ 15611 ] New: Confluence Server and Data Center [ 10470 ]
            Diego (Inactive) made changes -
            Description Original: h3. Issue Summary

            As an unlicensed user, if we try to download all attachments via the “Download All” link in the Attachments Macro, Confluence blocks the procedure with a “Not Permitted” message.
            h3. Steps to Reproduce
             # Create a knowledge base for Jira Servicedesk
             # Select the “All active users and customers can access the knowledge base without a Confluence space”
             # Create a new page for the knowledge base
             # Place an Attachments macro in the page
             # Create a user with Jira Servicedesk access
             # If the user base is different for Confluence and Jira, create the user in Confluence as indicated by documentation ([https://confluence.atlassian.com/servicedeskserver/knowledge-base-settings-and-permissions-956713322.html])
             # Go the page you created earlier
             # Click to “Download All”

            h3. Expected Results

            All the attachments are downloaded
            h3. Actual Results

            There is a redirect to an address that looks like this: localhost:8090/confluence/pages/downloadallattachments.action?pageid=<pageID> and there is a “Not Permitted” message shown.

            The same behavior is present through the Customer portal.

            !Screen Shot 2020-09-29 at 13.54.06.png|width=287,height=172!

            !Screen Shot 2020-09-29 at 13.54.17.png|width=285,height=169!

            !Screen Shot 2020-09-29 at 13.54.28.png|width=287,height=169!
            h3. Workaround

            The user can either click the attachment link in the macro and then download the file from the tab that opens up after the click or select to preview the file and then download it from there.

            !Screen Shot 2020-09-29 at 13.54.42.png|width=291,height=172!
            New: h3. Issue Summary

            As an unlicensed user, if we try to download all attachments via the “Download All” link in the Attachments Macro, Confluence blocks the procedure with a “Not Permitted” message.
            h3. Steps to Reproduce
             # Create a knowledge base for Jira Servicedesk
             # Select the “All active users and customers can access the knowledge base without a Confluence space”
             # Create a new page for the knowledge base
             # Place an Attachments macro in the page
             # Create a user with Jira Servicedesk access
             # If the user base is different for Confluence and Jira, create the user in Confluence as indicated by documentation ([https://confluence.atlassian.com/servicedeskserver/knowledge-base-settings-and-permissions-956713322.html])
             # Go the page you created earlier
             # Click to “Download All”

            h3. Expected Results

            All the attachments are downloaded
            h3. Actual Results

            There is a redirect to an address that looks like this: localhost:8090/confluence/pages/downloadallattachments.action?pageid=<pageID> and there is a “Not Permitted” message shown.

            The same behavior is present through the Customer portal.

            !Screen Shot 2020-09-29 at 13.54.06.png|width=287,height=172!

            !Screen Shot 2020-09-29 at 13.54.17.png|width=285,height=169!

            !Screen Shot 2020-09-29 at 13.54.28.png|width=287,height=169!
            h3. Workaround

            The user can either click the attachment link in the macro and then download the file from the tab that opens up after the click or select to preview the file and then download it from there.

            Enabling anonymous access and then not logging in to Confluence also works around this behavior.

            !Screen Shot 2020-09-29 at 13.54.42.png|width=291,height=172!
            Diego (Inactive) created issue -

              Unassigned Unassigned
              drodrigues@atlassian.com Diego (Inactive)
              Affected customers:
              5 This affects my team
              Watchers:
              5 Start watching this issue

                Created:
                Updated: