It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Can I set default global restrictions for Team Calendars?

I want to set a global 'default' restriction on Team Calendars so that clients (who sit in a user group called "clients") cannot see (or edit) any calendars unless they are explicitly granted viewing (or editing) permissions.

Example: All calendars have restrict viewing from 'clients' user group. // I then select a specific calendar, grant 'view' access to a specific user by user name.

Please help! :o

Thanks, :)

6 answers

1 accepted

2 votes
Answer accepted

Hi James,

Afraid this isn't possible just yet, but we do have a request for its implementation. Feel free to add your vote and set a watch on the issue to be notified of any updates.

This is not only an embarrassing oversight in the design of the plugin, it is an extreme security risk for all companies using Confluence and Team Calendars professionally. Pay for something that was free before and get a security risk for your money.

Are there any known workarounds for this? :-(

FWIW, we decided to patch the plugin in the sense that we restrict creation of new calendars to a small group of users, making sure in this way that all calendars are actually created with a minimum of relevant restrictions to avoid the risk of exposing internal information involuntarily. All other users receive an error message when trying to create a calendar along with information on who to turn to.

Hi Martin,

You mentioned a patch was applied to the plugin. Would you mind sharing what was done? I am very interested in the same restrictions for my environment.

Thanks

carolyn french Community Leader May 07, 2015

Late to the conversation, but would love to learn how you restricted new calendar creation too @Martin Moser

It was not actually a patch to the plugin itself, but a plugin of its own (as Team Calendars is closed source even to paying customers). Using the servlet filter module [1], we just filter the urls that are used to create team calendars (post to /plugins/calendar/importsubcalendar.action, and put to /rest/calendar-services/1.0/calendar/subcalendars.json), and return an error page that the client side javascript of team calendars can interpret to display a "you are not allowed to create team calendars" message to the user. If users want a calendar, they have to write an email to a group which is excluded from above logic. Does that help? [1] https://developer.atlassian.com/confdev/confluence-plugin-guide/confluence-plugin-module-types/servlet-filter-module

carolyn french Community Leader May 08, 2015

I'm not very technical :( Do you have any code for the plugin that I can use?

We might check if we can open source this, but as we are working for a company that makes money selling software, me might not get the permission to do so.

carolyn french Community Leader May 08, 2015

Ok, fair enough, I totally understand if you're not able to.

Hi there. The URL for the request does not appear to be working could you please check it? Thank you.

Doh, thanks James. Link fixed.

Hi there. The URL for the request does not appear to be working could you please check it? Thank you.

Thanks! :)

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Jira Align

Best Practices in Jira Align

Hello Jira Align customers! In order to better serve you on your journey with Jira Align, the Community team has worked with the Jira Align team to curate the content in this collection to better s...

68 views 0 2
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you