Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-64856

Saving attachment preview URL allows user to download the attachment after deletion

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Low Low
    • None
    • 6.13.10, 7.4.0, 7.10.1, 7.11.0, 7.12.3
    • Content - Attachments
    • None

      Issue Summary

      If an attachment got deleted, it gets moved to the trash. Before the attachment is purged from the trash. Users will still be able to access the attachment preview if a user saves the preview URL.

      Steps to Reproduce

      1. Upload attachment
      2. Click on the attachment to preview the attachment
      3. Copy the preview URL
      4. Delete the attachment
      5. Paste the preview URL in another browser tab

      If it's an image, you'd still be able to download the image via the browser.

      Expected Results

      Deleted attachments shouldn't be able to preview by the user anymore.

      Actual Results

      The user is still able to preview deleted attachments.

      Workaround

      Purge the attachment from the trash right away after deleting it.

      • If the purged attachment is linked, then during preview an opaque layer displays with no close button. There is no way to close the preview mode

              Unassigned Unassigned
              jwaihou Jonathan Soo
              Votes:
              13 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated: