User permissions in Confluence spaces using ScriptRunner

Question

Hi,

I am looking at creating a ScriptRunner Listener which will send email notification whenever any user who is not a space admin was still provided permissions to delete the page, attachment, comment, blog or mail.

Permissions may have been provided by the Confluence administrator or the Space administrator but we want to track and restrict providing permissions to delete any type of content to users who are not Space admins.

Any idea/ example/ article to achieve this?

Thanks,
Vamsi

Matteo Isemann · Answer

Hi Vamsi,

I came across your forum post and found your script for handling space permissions in Confluence very insightful.

I’m working on a similar project to track local permission changes in spaces and ensure custom permissions aren’t freely granted. Additionally, I aim to revoke such permissions where necessary.

Could you share how you approached this? If possible, I’d appreciate it if you could share the script or relevant parts of it.

Thanks in advance for your help!

Best regards,
Matteo

Vamsi Kandala · Answer

Hi @Alex Koxaras -Relational-

Thank you for your response.

I have already checked through the above articles and still working out the script.

Currently, I have created couple of listeners which will send email notifications whenever:

* Space permissions are updated
* Space permissions are removed
* Space is deleted
* Page is deleted
* Attachment is deleted

The email notification contains the space affected and the user details who performed that action.

I can then go check the Audit Log for more information.

I am yet to figure out, using the script, for which users the permissions were updated/ removed.

I want to consolidate these because some of the space administrators are further providing delete permissions to other users which we want to avoid.  That way, if any user wants to delete anything, they can either contact their space admin or contact us (Confluence admins).

I will keep this open for now and will check further.  Will update if I find anything interesting.

Thanks again,
Vamsi

Alex Koxaras -Relational- · Answer

Hi @Vamsi Kandala

That would be a very interesting case for me! If I had the time I would definitely create such a listener. That would be quite handy :)  Now I don't have a simple article to give, but a bunch to start you journey:

* https://docs.adaptavist.com/sr4c/latest/features/event-listeners/custom-event-listener
* https://developer.atlassian.com/server/confluence/event-listener-module/
* https://docs.atlassian.com/atlassian-confluence/6.6.0/com/atlassian/confluence/event/events/ConfluenceEvent.html
* https://docs.atlassian.com/atlassian-confluence/6.6.0/com/atlassian/confluence/event/events/permission/PermissionEvent.html

I hope that the above will be helpful to you!