Copy Page Tree Macro doesn't respect permissions

[Martin Moser]

We just found that the Copy Page Tree macro (https://marketplace.atlassian.com/plugins/com.nurago.confluence.plugins.treecopy/version/2) doesn't seem to respect space permissions. We are able to copy page trees with a user that has only read access. The normal Copy command is not available (which is correct behaviour).

We are using macro version 0.21.0 with Confluence 3.5.4

Has anyone else come across this and maybe even have a solution?

[Nikolaus Pohle · Accepted solution]

Thanks for pointing this out Martin!

Unfortunately it took me some more time but I finally came around to fix that issue with version 0.30.0. See https://marketplace.atlassian.com/plugins/com.nurago.confluence.plugins.treecopy/version/30

[Martin Moser]

Great news, thank you! We're in the preparing the update to version 4, once there we'll try it out!

[Sylwia Ganiec]

I have installed macro and the same issue occurs. The user who has only read access to the space, can also perform copy page tree, what it is not right.

Plugin Version: 0.33.0

Confluence Version: 5.1.2

[Joerg Bencke]

Copy space tree is an "external" plugin, so atlassian is the wrong address for this.

Go to nurago and raise an issue regarding this.

Question is however, does the user have page- oder spacerelated "read only" rights ? In other words :

• do you mean "copy inside the same space, so giving the user "write" access inside a space where (s)he only has readaccess" That would be a mean security issues?
• Or do you mean "read it in treepart a with readaccess only and write it inside treepart b with write-access" ? That might be a feature.