Group Picker Should Not Listed All Groups

2012-09-12T15:37:12
ID ATLASSIAN:CONFCLOUD-26600
Type atlassian
Reporter scahyadiputra
Modified 2017-04-02T08:10:47

Description

{panel:bgColor=#e7f4fa} NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? [See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-26600]. {panel}

Confluence will display all groups registered on it when users access any group picker and put * value as its search parameter.

This is not a good implementation from security point of view as normal users would be able to see the whole groups. It would be better if group picker listed only the groups that the users are member of, which is how it is implemented in JIRA.