{"id":5182,"date":"2021-07-01T17:00:42","date_gmt":"2021-07-01T15:00:42","guid":{"rendered":"https:\/\/devsite.almarise.com\/?p=5182"},"modified":"2024-07-25T14:59:28","modified_gmt":"2024-07-25T12:59:28","slug":"managing-page-security-in-confluence-restrictions-permissions-and-automation","status":"publish","type":"post","link":"https:\/\/devsite.almarise.com\/pl\/managing-page-security-in-confluence-restrictions-permissions-and-automation\/","title":{"rendered":"Managing Page Security in Confluence \u2013 Restrictions, Permissions and Automation"},"content":{"rendered":"

Confluence \u2013 thanks to its flexibility and ease-of-use \u2013 is a crucial content storage tool for many organizations.<\/p>\n

While managing security is often not an issue in small companies, large enterprises need to differentiate access levels and keep sensitive information out of sight. Unfortunately, this is the moment in which Confluence\u2019s built-in security features are often not enough.<\/p>\n<\/div>

Permissions in Confluence<\/h2><\/div>

Permissions are the basic security tool. Each and every Confluence space has its own set of Permissions that can be assigned to individual users or groups. The permissions are divided into eight categories.<\/p>\n

\n

Detailed Permission Categories<\/strong><\/h3>\n<\/div>\n

All<\/strong> <\/em>\u2013 Contains\u00a0View<\/strong>\u00a0and\u00a0Delete Own<\/strong>\u00a0Permissions, with the first granting access to the content in this space and second with the power to delete things created by the user in question.<\/p>\n

Pages<\/strong> <\/em>\u2013 Features\u00a0Add page<\/strong>\u00a0and\u00a0Delete page<\/strong>\u00a0permissions, with the first granting access to page creation, and second allowing to delete any page in the space.<\/p>\n

Blog<\/strong> <\/em>\u2013 With\u00a0Add blog<\/strong>\u00a0and\u00a0Delete page<\/strong> permissions, Blog category works in analog to the \u201ePages\u201d category, but affecting the blog posts only.<\/p>\n

Attachments<\/strong> <\/em>\u2013 Contains\u00a0Add attachment<\/strong>\u00a0and\u00a0Delete attachment<\/strong>\u00a0permission. The first gives permission to upload files to pages and blog posts in the space. Second gives you possibility to delete files uploaded by you.<\/p>\n

Furthermore, users with Add page or Add blog permissions can insert existing attached files from the editor and remove the files from the editor, so they can\u2019t be viewed on the page or blog post. However, they can\u2019t upload a new file or a new version of a file.<\/p>\n

Comments<\/strong> <\/em>\u2013\u00a0Add comments<\/strong>\u00a0and\u00a0Delete comments<\/strong>, doing exactly what we can expect from them \u2013 allowing the user to respectively add a comment and delete (any!) comment in the space.<\/p>\n

Restrictions<\/em> <\/strong>\u2013\u00a0Add restrictions<\/strong>\u00a0and\u00a0Delete restrictions<\/strong>, allowing the user to respectively add permissions to a page or lift permissions from any page or blog post (though the user needs to have the access to the page first).<\/p>\n

Mail<\/strong> <\/em>\u2013\u00a0Delete mail\u00a0<\/strong>permission, allowing to delete mail items archived in the space. A scarcely used feature.<\/p>\n

Space<\/strong> <\/em>\u2013\u00a0Export space<\/strong>\u00a0and\u00a0Admin permissions<\/strong>. Both are extremely dangerous, giving a possibility to either export whole space (all of the content, too!) or administer a space. Do not give these to anyone who\u2019s not 100% trusted, ever.<\/p>\n

Combining Permissions<\/strong><\/h3>\n

One more thing about permissions \u2013 keep in mind, that these are additive. This means that if a user is being granted permissions as an individual and a member of a group, these permissions will be combined together \u2013 e.g. someone with individual permission to\u00a0View\u00a0<\/strong>and\u00a0Delete own<\/strong>, who\u2019s a member of the editors group, permitted to also\u00a0Add page<\/strong>\u00a0and\u00a0Add blog<\/strong>, will have all of these permissions enabled \u2013 View, Delete own, Add page and Add blog.<\/p>\n

Role of the Space Admin<\/strong><\/h3>\n

There\u2019s also the Space Admin, who has powers far greater than an ordinary user. These include:<\/p>\n