Is there any way to give view permission in confluence to users mentioned on page?

Question

Hello! I want to create some user-specific profile pages, and don't want to give permissions to each page separatly.

Is there any option to give view permissions if user is mentioned on page via "@" ?

Stefan Salzl · Answer

Hi @Evgeniy Buturlia

I know it´s quite an old question but I´m trying to implement the (i guess) same thing:

I want all mentioned users from a page to be permitted to view the page.

So I was thinking of a scriptrunner listener too but I couldn´t figure out how to get a list of all mentioned users yet. Were you able to solve this issue and if so: how?

Thanks in advance.

Best
Stefan

Thomas Bowskill · Answer

Effectively, yes. Although if I had your requirement I would not use the @ mentions and just tell people to manage via restrictions -- so it wouldn't be updating the page permissions when you see a mention; people would directly change the page permission.

Yes, I'm sure you will be able to run scripts -- fundamentally most solutions can be pushed through that way, but the technical overhead rules it out for me. I'm more for seeing if I can give you any alternate ways to tackle this one that don't marry you to script runner (which I would assume would be to scrape the @ mentions on the page and throw them into the Restriction of Can View / Edit?).

We get similar problems with access control and Confluence being in the Financial Services industry: as a product it is very 'open', so the nuances of restricting things aren't bulletproof or as flexible as other products.

Evgeniy Buturlia · Answer

@Thomas Bowskill so, you don't know how to do it without manually editing page permission each time mension is being replaced?

Request access can not help me, because I need not only give permissions, but also take them away, automatically.

P.S. Your answer gave an idea: there is a solution with scriptrunner listeners, but it is not easy to implement.