Confluence children page permissions

[Jonathan Smith]

Hi all,

  I am still struggling a little bit securing pages. View restrictions are inherited by children pages, however in my example below, the child page allows the test user to edit. Why?

I need someone to be blunt with me :)

[Jonathan Smith]

@Bhakti Paranjpe No special plug in. Created a new space because my personal space was imported via XML.

New space permissions: confluence-users have page add permissions (for this test).

Results: Restricted "can view" to Confluence Test user on level 1 a : Inherited level 2 a page allows user to edit.

Breaking the inheritance and choosing "editing restrictions" will make level 2 a page read only. This doesn't seem correct that I would have to restrict all children pages to carry down the read only permissions. Even if I restrict the parent with "Editing Restrictions", those restrictions don't carry down and the user can edit all child pages.

[AnnWorley]

Hi Jonathan,

I am coming in late but I hope I understand the thread. Please note:

Page Restrictions:

View restrictions are inherited, which means a restriction applied to one page will cascade down to any child pages.  Edit restrictions are not inherited, which means pages need to be restricted individually. 

Hope that helps,

Thanks,

Ann

[Jonathan Smith]

@AnnWorley So "can view" is not necessary "read only". Apologies, I still have the SharePoint mind-set.

So there is no "read only" restrictions that will carry down. To restrict editing, I would need to break inheritance and choose "editing restrictions" for each desired children page.

[AnnWorley]

Yes, edit restrictions have to be applied individually as you say.

[Bhakti Paranjpe]

Hi @Jonathan Smith, 

Have you installed and configured any plugins that import spaces?

This article suggests that, post import, such plugins delete all rows in the CONFANCESTORS table, which are used to determine inherited page permissions.

The article gives an example of a specific plugin, but there could be other plugins who might cause the same issue. 

Please check.

[Fabienne Gerhard]

Hi @Jonathan Smith

my first idea would be - is Confluence Test part of a group that has special space permissions?

Like they mentioned here.

[Jonathan Smith]

Confluence-users is the only group in space settings. They have page add permissions. I would still think restricting a page to view only would trump the add permission in space permissions.

Here is the page restriction break down and results for Confluence Test user.

Any child page under Permissions Test  (Can View) would have page edit ability unless I broke inheritance and switched to "editing restricted". Is this how it is supposed to work?