Critical: Need urgent Assistance for Confluence Plugin - Unauthenticated Access to Admin Section

Ajit kumar
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
November 20, 2023

Hi,

We have developed a custom Confluence plugin that includes a servlet with a specific URL. However, we have noticed that users, even those without authentication, can directly access this page via a Direct link. As this pages are in administrative sections, I want to secure it so that only authenticated users (preferably Confluence admins or registered users) can access it. The ideal behavior would be to redirect users to the login page if they attempt to access the URL without authentication. So, Why has the behavior changed for these developed plugins, allowing any user to access the pages without logging in or authenticating? Is there any way we can enhance security for these pages similar to others? Please guide me on this matter as it's an urgent and critical issue. Additionally, let me know if any further information is required for this issue.

Regards,

Ajit kumar

0 answers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events