Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-91544

As a sys admin user without permissions to view a restricted space, I can see activity for it but cannot view the space or pages in it

    XMLWordPrintable

Details

    Description

      Issue Summary

      This is reproducible on Data Center: YES.

      Steps to Reproduce

      Steps on Bulldog:

      1. Sign in as a user with all of these permissions: Can Use, Personal Space, Create Space(s), Confluence Administrator (optional), System Administrator. Note that this use should not be present in the user group confluence-administrators.
      2. Navigate to kxu's profile: https://bulldogwiki.internal.atlassian.com/wiki/display/~kxu
      3. You should be able to view the page "Copy of Kalvin test page" in the activity list.
      4. Open this page and you should get a "Page Not Found" error.

      More general steps

      1. As a non-admin user, create a new space.
      2. In the permission settings for that space, change it so that no groups have access to and no other users have any permissions.
      3. Sign in as a user with all of these permissions: Can Use, Personal Space, Create Space(s), Confluence Administrator (optional), System Administrator. Note that this use should not be present in the user group confluence-administrators
      4. View the non-admin user's profile and spot their activity of creating the new space. Alternatively access this from the #all-updates section on the home page.
      5. Try to open the space (or a space within the space) from the activity feed.

      Expected Results

      Either the space and page should not appear on the activity feed at all, of if for some reason it is supposed to appear, opening the page should result in being able to view the page instead of a "Page Not Found" error.

      Actual Results

      • "Page not found" when the admin user tries to view the page.
      • "Not Permitted" when the admin user tries page for space.

      Workaround

      N/A

       

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              38fdc5851853 antti.hakli
              Votes:
              10 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated: