nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Group permissions vs User permissions

Hans Pesata

Hi!

Confluence 7.13.5 Data Center

We have a group which we use to give Users access to certain spaces.

A user is in the group which has

All - View
Pages - Add
Blog - Add
Comments - Add
Attachments - Add

permissions in a space.

Interestingly, the user is not able to access pages (without restrictions) in the space.

When I add the User with the exact same permissions to the space permissions, He is able to access the pages.

Why does this happen ?

Any hints would be appreciated!

Regards,
Hans

Accepted answers

Nic Brough -Adaptavist-

Could the inaccessible pages be located beneath a page that has view restrictions?

Hans Pesata

Hi!
It turned out, that the reason was a problem with the Sync from the LDAP Directory.
After the User explicitily logged out and logged in again, the Group permissions have been synced and the User was able to access the Space.

Regards, Hans

All comments

Max Foerster - K15t

HI @Hans Pesata ,

Just to be sure:

Other users in the same group can access the space?
Can a user B with the same configuration (same user groups) access the same space/page?
What error message or Confluence page is the user presented with when trying to access the space or any content of that space? Please try with the space homepage.

That would help figure out your issue.

Best, Max

Nic Brough -Adaptavist-

Could the inaccessible pages be located beneath a page that has view restrictions?

Hans Pesata

HI!

Thanks for Your answers!

Maybe the problem was this:

I had added the user to our group and he immediately tried to access the page.
I think He should have logged in again, to get the permission through the group ?

When I added Him directly to the restriction, it worked without logging in again, because this is action related to the space and not user attribute related.

What do You guys think ?

Regards,
Hans

Rilwan Ahmed

Hi @Hans Pesata ,

Please check if the user is really part of the group or removed for some reason.
Please reconfirm if the group is added to space permissions (check space settings --> Space permissions)

Hans Pesata

Hi!

Yes, I can confirm both.

As described, I had added the user to the group and he immediately tried to access the space, which didnt work. probably because He would have needed to log out and log in again, to get the groups enhanced permissions.

Am I right ?

Thanx & Regards,
Hans

Nic Brough -Adaptavist-

It is not a bad idea, but Confluence does not work like that. As soon as you are in a group, it shows. They are not cached at login.

However, if you are using an external directory for users, there is a sync cycle, so you may not be added into the group immediately, confluence may not recognise the new group until the next sync.