Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-91699

User with system administrator privilege can search restricted pages.

    XMLWordPrintable

Details

    Description

      Issue Summary

      Starting Confluence 8.5.1 when a user is granted System administrator permission at Global permissions. The user can search for Restricted content and the restricted page gets displayed in search, when tried to access it says "Page can't be found".

      This behaviour is not reproducible in: 7.19.11 and 8.4.1.

      Steps to Reproduce

      1. Make sure the anonymous access is disabled.
      2. Only the confluence-administrators group has access to the space. 
      3. Login as admin user(who is part of confluence-administrators group)
      4. create a few pages.
      5. create user: test
      6. Add him to only the confluence-users group.
      7. Search for the content created by admin user. Search does not display the pages.
      8. Go to Global Permissions >> Add System administrator permission to test user. 
      9. Search for the content owned by admin user, the page is displayed in the search for test user.
      10. Try to access it, It will display: "Page not found" error. 
      11. Attached the screen record demonstrating the behaviour. 

      Expected Results

      The search should not display restricted pages. Also, when trying to access a restricted page it should display a "Not Permitted error" or "Restricted page" message and provide the option to request access. 

      Actual Results

      Search displays "Restricted" pages. When tried to access gives "Page not found" error. 

      Workaround

      Currently, there is no known workaround for this behavior. A workaround will be added here when available

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              d7eb00dac63f Srinatha T
              Votes:
              6 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated: