Lucene search

K
atlassian38fdc5851853CONFSERVER-91544
HistorySep 18, 2023 - 8:55 a.m.

As a sys admin user without permissions to view a restricted space, I can see activity for it but cannot view the space or pages in it

2023-09-1808:55:36
38fdc5851853
jira.atlassian.com
5
data center
permissions
activity
restricted space

h3. Issue Summary

This is reproducible on Data Center: {}YES{}.
h3. Steps to Reproduce
h4. Steps on Bulldog:

Sign in as a user with all of these permissions: {}Can Use, Personal Space, Create Space(s), Confluence Administrator (optional), System Administrator{}. Note that this use should not be present in the user group {}confluence-administrators{}.

Navigate to kxuā€™s profile: [https://bulldogwiki.internal.atlassian.com/wiki/display/~kxu]

You should be able to view the page ā€œCopy of Kalvin test pageā€ in the activity list.

Open this page and you should get a ā€œPage Not Foundā€ error.

h4. More general steps

As a non-admin user, create a new space.

In the permission settings for that space, change it so that no groups have access to and no other users have any permissions.

Sign in as a user with all of these permissions: {}Can Use, Personal Space, Create Space(s), Confluence Administrator (optional), System Administrator{}. Note that this use should not be present in the user group {}confluence-administrators{}.

View the non-admin userā€™s profile and spot their activity of creating the new space. Alternatively access this from the #all-updates section on the home page.

Try to open the space (or a space within the space) from the activity feed.

h3. Expected Results

Either the space and page should not appear on the activity feed at all, of if for some reason it is supposed to appear, opening the page should result in being able to view the page instead of a ā€œPage Not Foundā€ error.
h3. Actual Results

  • ā€œPage not foundā€ when the admin user tries to view the page.
  • ā€œNot Permittedā€ when the admin user tries page for space.

h3. Workaround

N/A

Affected configurations

Vulners
Node
atlassianconfluence_data_centerRangeā‰¤7.20.0
OR
atlassianconfluence_data_centerRangeā‰¤7.20.1
OR
atlassianconfluence_data_centerRangeā‰¤8.1.0
OR
atlassianconfluence_data_centerRangeā‰¤8.1.1
OR
atlassianconfluence_data_centerRangeā‰¤8.5.1
OR
atlassianconfluence_data_centerRangeā‰¤8.5.11