Grant vs. Deny Permission Precedence

Which permission takes precedence at the Space Level in Confluence? Grant or Deny?

Example: UserA is in GroupA and GroupA has been granted Add Attachment privilege at the Space level. However, UserA has been denied the Add Attachment privilege as an individual at the Space level.

Will UserA be allowed to add attachments or will he not be able to add attachments?

2 answers

1 accepted

1 vote
Thomas Schlegel Community Champion Mar 06, 2013

Hi James,

from Atlassian Documentation (https://confluence.atlassian.com/display/DOC/Users+and+Groups):

Overlapping group and user permissions

When a user is assigned more than one permission, the most powerful permission will prevail.

Further explanation:

  • A user may be assigned a permission specifically to their username. They may also be assigned a permission by belonging to a group, or even several groups.
  • The user will then be able to perform all functions assigned to them.
  • So if a user is allowed to do something over and above what the group can do, the user will be able to do it. And if the group is allowed to do something over and above the specific permissions granted to the user, the user will still be able to do it.
0 vote

It's not really grant/deny in Atlassian products, it's more "deny, until allowed". Your user matches one rule that says "allow", so they can attach things. Specifically, their group says "allow", so they can do it. Doesn't matter about the individual settings.

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Kesha Thillainayagam
Posted Apr 13, 2018 in Confluence

We want to hear how your non-technical teams are using Confluence!

Hi Community! Kesha (kay-sha) from the Confluence marketing team here! Can you share stories with us on how your non-technical (think Marketing, Sales, HR, legal, etc.) teams are using Confluen...

364 views 20 10
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you