-
Bug
-
Resolution: Fixed
-
Low
-
9.2.0, 9.2.1, 9.2.3
-
4
-
Severity 3 - Minor
-
16
-
Problem
The current functionality of the Like/Unlike feature in Confluence appears inconsistent with users' permission expectations. Specifically, a user who initially does not have permission to comment can still like or unlike comments made by others. However, if this user is later granted the ability to add comments and then that permission is revoked, they unexpectedly lose the ability to like or unlike comments from other users. Additionally, the requirement for "delete" comment permissions in order to regain the ability to like or unlike comments raises concerns about the intended functionality of this feature.
Steps to Reproduce
- Create two users, User_A and User_B.
- Grant User_A permission to add comments only.
- Ensure User_B has no permissions related to comments initially.
User_A Adds a Comment:
- Log in as User_A.
- Navigate to a Confluence page and add a simple comment.
User_B Likes/Unlikes the Comment:
- Log in as User_B.
- Verify that User_B can like or unlike the comment added by User_A, despite having no comment permissions.
Grant User_B Add Comments Permission:
- Update User_B's permissions to allow adding comments.
- User_B Adds a new Comment to the same page
Revoke User_B's permission to add comments:
- Since User_B has added a comment to the page, now can no longer like or unlike comments from other users.
Grant User_B Delete Comments Permission:
- User_B can now like/unlike comments and delete comments from other users.
Remove Delete Comments Permission from User_B:
- User_B does not have any permissions to add or delete items.
- User_B Removes Own Comment:
- After removing the comment that User_B previously added. User_B can now like and unlike comments from other users.
Expected Results
User B is allowed to Like/Unlike other comments.
Actual Results
User B can't Like/Unlike other comments once he/she has added a comment. Either, Delete comments permission or Delete all their own comments is needed to be able to see Like/Unlike options
Workaround
Notes
- mentioned in
-
Page Loading...