Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-60396

Trying to download all files from a Knowledge Base article from Jira Servicedesk with an unlicensed user results in a Not Permitted message

      Issue Summary

      As an unlicensed user, if we try to download all attachments via the “Download All” link in the Attachments Macro, Confluence blocks the procedure with a “Not Permitted” message.

      Steps to Reproduce

      1. Create a knowledge base for Jira Servicedesk
      2. Select the “All active users and customers can access the knowledge base without a Confluence space”
      3. Create a new page for the knowledge base
      4. Place an Attachments macro in the page
      5. Create a user with Jira Servicedesk access
      6. If the user base is different for Confluence and Jira, create the user in Confluence as indicated by documentation (https://confluence.atlassian.com/servicedeskserver/knowledge-base-settings-and-permissions-956713322.html)
      7. Go the page you created earlier
      8. Click to “Download All”

      Expected Results

      All the attachments are downloaded

      Actual Results

      There is a redirect to an address that looks like this: localhost:8090/confluence/pages/downloadallattachments.action?pageid=<pageID> and there is a “Not Permitted” message shown.

      The same behavior is present through the Customer portal.

      Workaround

      The user can either click the attachment link in the macro and then download the file from the tab that opens up after the click or select to preview the file and then download it from there.

      Enabling anonymous access and then not logging in to Confluence also works around this behavior.

            [CONFSERVER-60396] Trying to download all files from a Knowledge Base article from Jira Servicedesk with an unlicensed user results in a Not Permitted message

            Remco Bakx added a comment - - edited

            You can hide the button via custom CSS. Please see 'Using CSS' in this article: 
            https://confluence.atlassian.com/confkb/how-to-hide-elements-in-confluence-using-css-or-javascript-313458894.html

            I have added the lines below to 'At end of the HEAD'.

            a.download-all-link

            { display: none !important; }

            a#download-all-link

            { display: none !important; }

             

            Remco Bakx added a comment - - edited You can hide the button via custom CSS. Please see 'Using CSS' in this article:  https://confluence.atlassian.com/confkb/how-to-hide-elements-in-confluence-using-css-or-javascript-313458894.html I have added the lines below to 'At end of the HEAD'. a.download-all-link { display: none !important; } a#download-all-link { display: none !important; }  

            Marcel Heijblom added a comment - - edited

            Why show a button that does not work for your customer. Is there a way to not show this button (as a workaround)?

            Marcel Heijblom added a comment - - edited Why show a button that does not work for your customer. Is there a way to not show this button (as a workaround)?

            Remco Bakx added a comment - - edited

            Unfortunately anonymous access is not possible for our application, so hopefully this issue will be fixed soon.

            Remco Bakx added a comment - - edited Unfortunately anonymous access is not possible for our application, so hopefully this issue will be fixed soon.

              Unassigned Unassigned
              drodrigues@atlassian.com Diego (Inactive)
              Affected customers:
              5 This affects my team
              Watchers:
              5 Start watching this issue

                Created:
                Updated: