Lucene search

K
atlassianE2a594875e14CONFSERVER-93794
HistoryJan 02, 2024 - 1:22 a.m.

When anonymously accessed, the "Related Labels" section show labels that are tagged on pages in non-anonymous spaces.

2024-01-0201:22:36
e2a594875e14
jira.atlassian.com
2
related labels
anonymous access
data center
safe mode
global permission
browser
workaround

7 High

AI Score

Confidence

Low

h3. Issue Summary

When anonymously accessed, the “Related Labels” section shows labels that are tagged on pages in non-anonymous spaces.

This is reproducible on the Data Center: yes

Pre-condition:

  1. Page accessible anonymously has been labelled - e.g. label1 and {}label2{}.

  2. Page that is not accessible anonymously has a label - e.g.{}label2{}
    Note that both have a common label -{}label2{}
    h3. Steps to Reproduce

  3. Confirm anonymous access is enabled at the global permission level and a bunch of spaces have anonymous access

  4. Turn on safe mode in the instance and make sure all add-ons are disabled

  5. Log out of the instance

  6. Access <baseURL>/label/<label> in the Browser. e.g. <baseURL>/label/label2

  7. Confirm can see the “Related labels” items on the right side in the browser and each time I select one, more options pop up to select or change to different ones.
    h3. Expected Results

The “Related labels” should not show labels specific to the anonymous pages - e.g., {}label{}{}2{}{}.{}
h3. Actual Results

The “Related labels” show labels specific to the anonymous pages - e.g.{}label1{}.
h3. Workaround

Currently, there is no known workaround for this behaviour. A workaround will be added here when available.

Affected configurations

Vulners
Node
atlassianconfluence_data_centerRange7.19.17
OR
atlassianconfluence_data_centerRange8.5.9

7 High

AI Score

Confidence

Low