Comments
-
Matt, the ticket with internal comments is the part I would steal. Rene and Apryl described how to catch the waste, you described how to prove you did, and that is the bit that matters when someone asks six months later why an account was closed.
-
Rene, that is a much better setup than most, and I think you have put your finger on it. The scenario is worst without IdP-driven deprovisioning. One distinction worth drawing though: SSO and SCIM are not the same thing. Plenty of orgs have an IdP for login but no automated deprovisioning, so accounts still get closed by…
-
If you want to see both layers side by side for your own site rather than assembling the table by hand, that is what I built PermPilot to do: https://marketplace.atlassian.com/apps/941628983/permpilot
-
No idea, and I do not think they have ever said. There is a request open for it going back to 2006, so it is clearly not an oversight, just never prioritised. The way I think about it now: view restrictions are about confidentiality, which does flow down a tree naturally. Edit restrictions are more about who owns one…
-
Here is the shape I would use, since I offered. Pick two pages that do not matter: one child of a view-restricted parent, and one page that already has its own edit restriction. Record the before state of both, either by opening Restrictions on each or by reading:…
-
Good call testing first. One thing that saves pain: run it on two or three throwaway pages before any loop, and diff the before/after restriction state on each. The content-restriction endpoints are unforgiving about inheritance, so a change that looks right on one page can behave differently on a child page. Capture the…
-
On the Rovo question, worth checking carefully before you rely on it. Rovo can update Confluence pages, but that runs through a Rovo Agent with the "Update Confluence Page" action, and that action edits page content rather than restrictions. Restrictions are a separate object in the API. So it may well have told you it…
-
That is a clearer way of saying it than I did in the article. The native tools only focus on one aspect: one user or one page. The key question during an audit is about the intersection. Unfortunately, there is no way to ask it without creating the table yourself. The group point is the one I would push hardest. Individual…
-
Just took this, useful refresher. The necro-posting definition was the one that caught me out, worth reading the Rules of Engagement properly rather than assuming.
-
On which parent the restriction comes from: as space admin you can find it, but Confluence will not tell you directly, you have to walk up the tree. Practical method: go to Space Settings, open the page tree, and check Restrictions on each ancestor of the blocked page, starting at the space home and working down. The first…
