'Chicken or the Egg' with IFTTT Macro to Restrict Page Access

[Brant Brisson]

With help from Alex (Thanks!), I was able to successfully use the "Restrict Page View" on the "OnCreated" event on a "Edit ‘ConfiForms IFTTT Integration Rules’ Macro" (see link below)

https://community.atlassian.com/t5/Confluence-questions/How-to-use-quot-Restrict-Page-View-quot-on-the-IFTTT-macro-in/qaq-p/2926169#M333036 

BUT... NOW...

When a user tries to submit the 'Survey' form from on the parent page, they get the following error message (see print screen below)

Is there any way for the form on the parent page to impersonate the right level of permissions to run the "Restrict Page View" on the "OnCreated" event on a "Edit ‘ConfiForms IFTTT Integration Rules’ Macro" so the permission's on the child page can be restricted?

[Alex Medved _ConfiForms_ · Accepted solution]

So, you need to restrict the edit permissions first, and then restrict the view permissions... not the vice versa

[Brant Brisson]

So I need to do two "IFTTT Integration Rules" Macros with an "OnCreated" event, One for "Restrict Page Edit" first, than one for "Restrict Page View" second?

All other settings in the Macros stay the same?

[Alex Medved _ConfiForms_]

Yes, that's right. The order of the macros in the editor defines their execution order - assuming the event they are bound and the defined condition matches

[Brant Brisson]

This worked great Alex!  Thanks for the fix.

FYI... 

This is NOT documented well, can the documentation be updated please?

[Brant Brisson]

Please let me know if you need anything else from me.

Thanks,
Brant.

[Brant Brisson]

See code in comment below

[Brant Brisson]

Macro code will not paste in the reply, attempting to link to it.

[Brant Brisson]

https://github.com/brissonb2911/MacroCode/blob/main/MacroCode 

[Brant Brisson]

Can I please get an update on this issue?

[Alex Medved _ConfiForms_]

What update are you looking for to get?

[Brant Brisson]

The fix you gave me is not working.  I have included the macro code for you to try.  Anyone who is not an admin is getting an error message and the child page restrictions are NOT being set.

[Alex Medved _ConfiForms_]

User must be allowed to set/remove restrictions on pages in this space (Does not have to be an administrator).

Only this way it will work

[Brant Brisson]

That worked, but is it a safe solution?

[Alex Medved _ConfiForms_]

What do you mean by "is it a safe solution"? 

ConfiForms follows the permissions model that Confluence has and it would be totally unsafe to do otherwise (set/remove restrictions through ConfiForms without checking user's permissions and not following Confluence security model)