Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-60460

Users cannot discard drafts if space has restrictions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Low Low
    • None
    • 7.4.1, 9.2.8
    • Editor - Drafts
    • None

      Issue Summary

      If you create a draft on a public Personal Space, you are no longer able to discard it if the space turns restricted. The draft owner will be able to see the draft but will receive errors while discarding it.

      Steps to Reproduce

      1. Login with User A and create a Personal Space.
      2. Login with User B and create a draft in User A's Personal Space.
      3. Login with User A and restrict the Personal Space.
      4. Login with User B and visit the "Drafts" page and try to discard the draft.

      Expected Results

      • User B will be able to discard the draft.
      • User A will be able to see and discard drafts in the Personal Space.

      Actual Results 9.2.x

      Users are unable to discard the draft until User A removes the restrictions of the Personal Space.

      The below exception is thrown in the atlassian-confluence.log file:

      2025-10-13 17:49:32,849 WARN [http-nio-6928-exec-4 url: /rest/api/content/3702801; user: testuser1] [confluence.impl.hibernate.ConfluenceHibernateTransactionManager] doRollback Performing rollback. Transactions:\n  ->[com.atlassian.confluence.api.impl.service.content.draft.ContentDraftServiceImpl.deleteDraft]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT (Session #431603297)
       -- url: /rest/api/content/3702801 | userName: testuser1 | referer: http://localhost:6928/users/viewmydrafts.action | traceId: afbfc7f2c6e9d93f
      

      and the user receives a HTTP 403 Forbidden in the browser, with response:

      {"statusCode":403,"data":{"authorized":false,"valid":true,"allowedInReadOnlyMode":true,"errors":[],"successful":false},"message":"You do not have edit permissions to fetch draft content.","reason":"Forbidden"}\
      

      Actual Results (pre 9.2.x)

      Users are unable to discard the draft until User A removes the restrictions of the Personal Space.

      The below exception is thrown in the atlassian-confluence.log file:

      Request Information
      --------------------------
      URL: http://confluence.example.com/500page.jsp
      Scheme: https
      Server: confluence.example.com
      Port: 8090
      URI: /500page.jsp
      Context Path: 
      Servlet Path: /500page.jsp
      Path Info: null
      Query String: parentPageId=41712310&pageId=41782615&spaceKey=~guil&atl_after_login_redirect=%2Fpages%2Fviewpage.action&timeout=12000&_=1602144959019
      --------------------------
      Attributes
      --------------------------
      javax.servlet.forward.request_uri: /plugins/editor-loader/editor.action
      javax.servlet.forward.context_path: 
      javax.servlet.forward.servlet_path: /plugins/editor-loader/editor.action
      javax.servlet.forward.query_string: parentPageId=41712310&pageId=41782615&spaceKey=~guil&atl_after_login_redirect=%2Fpages%2Fviewpage.action&timeout=12000&_=1602144959019
      javax.servlet.forward.mapping: org.apache.catalina.core.ApplicationMapping$MappingImpl@45534a04
      javax.servlet.error.status_code: 500
      com.atlassian.confluence.impl.profiling.DecoratorTimings: com.atlassian.confluence.impl.profiling.DecoratorTimings@2cba417d
      com.opensymphony.sitemesh.APPLIED_ONCE: true
      __cleanup_recursion_counter: 0
      com.atlassian.confluence.util.message.MessagesDecoratorFilter__already_filtered__: true
      com.atlassian.confluence.web.filter.validateparam.RequestParamValidationFilter_already_filtered: true
      atlassian.core.seraph.original.url: /500page.jsp?parentPageId=41712310&pageId=41782615&spaceKey=~guil&atl_after_login_redirect=%2Fpages%2Fviewpage.action&timeout=12000&_=1602144959019
      com.dynatrace.oneagent.sensors.uem: com.compuware.apm.agent.introspection.uem.UemAttribute@59e57cd4
      org.kantega.atlaskerb.AtlasKerberosFilter_alreadyMatched: true
      com.atlassian.labs.botkiller.BotKillerFilter: true
      com.atlassian.gzipfilter.GzipFilter_already_filtered: true
      

      The below exception is thrown in the HAR file:

      General:
      Request URL: http://confluence.example.com/rest/api/content/41712310?status=draftHTTP 
      Version: HTTP/1.1
      Request method: DELETE
      
      Full response:
      400 Bad Request HTTP/1.
      

      Workaround

        1. 403.gif
          403.gif
          887 kB

              Unassigned Unassigned
              gviana Guilherme V. (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: