Site/Space Security Audit

Question

I'm doing a year-end clean-up of our Confluence site and the permissions are a hot mess (multiple administrators over time).

Is there a way to get an audit of who has access to what pages through what groups? There are conflicts occuring where someone who has individual user access to do everything cannot edit random pages in the wiki.

marc caron · Answer

I'm searching for similar. I've already found in a dev community thread that this isn't possible. I think it should be information made available through the REST API. Going to the DB for this is not a practical option.

Also I am trying to do alerts for Anonymous sites and/or pages. A plug in for this would be very heavy compared to just a routine rundown through the REST interface.

I'd like to suggest this as an enhancement. Especially as more companies are becoming more security conscious.

Morgan Kennedy · Answer

We have a hosted account through Atlassian so I don't have access to the DB (that I'm aware of).

Igor M_ · Answer

Hello,

If you want to know which pages user has any access to, admin or view, then How to list which spaces a user can access KB will have some useful queries, it will allow checking both, individually granted or group permissions.

If you prefer to use User Macros instead of direct DB queries, then How do I view a list of all space administrators for all spaces KB should be useful.

Hope this helps, and good luck in your audit!

Regards,

Igor