Microblog permissions based on page restrictions instead of space permissions
closed
N
Nicole Pingel
The content of a microblog that originates from a restricted page should only be visible for users that have the permission to see this certain page. Up to now, microblog permissions are based on space permissions, i.e. when the space is visible for all users the content of a microblog on a restricted page can be displayed via the microblog macro on every other given page without restrictions.
Angela Gaida
Angela Gaida
closed
After some consideration of this issue we have to conclude, that it would mean a massive restructuring of the way the microblog handles permissions right now with a whole host of risks in the aftermath. Seeing that this issue hasn't garnered a lot of interest in the last two years, I'll close it now with a "sorry, won't do".
Samuel Lerch
Hello Nicole Pingel,
thank you for the request.
By the limitation based on the page, not the space, do you mean the mircoblog macro that is embedded on a page? This should be limited to the permissions of the page, so that only users who have read (or write?) permissions on that page can use and read the microblog?
Please note that in the microblog the permissions are regulated exclusively by topics: the microblog macro itself has no effect on permissions or visibility. No content of the microblog is related to the page the macro is used on.
Under these assumptions, I would definitely not see a development in the direction you describe at the current time and within the current vision of the product.
Should I be wrong at any point, then I would be happy to get an additional explanation.
Cheers and have a great day!
Samuel
N
Nicole Pingel
Samuel Lerch: Hey Samuel,
sry for the late reply.
I just tested it again to make sure, I'm not wrong here, but I got the same results. By now, Linchpin works as follows: Just for the sake of the example, let's say we have 2 user groups ("confluence administrators" and "confluence users"). Also we have two spaces: "Space Berlin" and "Space Frankfurt". Space Berlin has a microblog macro (configuration --> space = Berlin) and postings are made there. Now we have space Frankfurt and I put the same macro with the same configurations there. When all users have every permission in space Berlin, every user can see the microblog postings in space Frankfurt as well. If I change the space permissions in space Berlin and user group confluence-users has no permissions anymore. What happens is, that they can't see the microblog postings in space Frankfurt anymore. So my conclusion is, you can influence the visibility of microblog postings via the space permissions.
Now talking about our use case: We have spaces that have no restricted space permissions at all (every user can do anything) BUT we have view restricted pages within these spaces. And on these pages there are microblog macros that are used for team communication. What we want is: You should not be able to see these postings (that were posted on restricted pages) anywhere else on the platform. By now, you could use a microblog macro in a different space and see the postings that were posted on the restricted page initially - even though they were posted on a restricted page. And thats our problem.
Thanks for reading this whole thing! ;-) Now, long story short, haha! We would like to have permission settings for microblog macros, so that you as an admin can decide who can see the postings made on a certain page.
I hope this was helpful.
N
Nicole Pingel
And just another thought: You say the content of the macro has no relation to the page that it was posted on. I may be wrong but for me there's a big data protection problem here. The page permissions imply that only a certain set of people can see this page, yet everybody is able to see the content of microblog postings that were initially posted on that page. Maybe a solution would be to have permission settings for microblog topics?
N
Nicole Pingel
And now that my thouhgts brought me to that idea I saw that somebody has already posted this idea: https://linchpin.canny.io/microblog/p/permission-for-topics-andor-microblogs
Samuel Lerch
Nicole Pingel: Hello Nicole :)
Thanks for the long and detailed explanation.
I am as well sorry for the late reply, I was on Holiday the last two weeks.
I get what you want and see the need for that. Nevertheless - the page-based permissions idea is sth that we are not planning to implement at the current roadmap.
Being able to set topic-permissions based on user-groups or sth similar is a big thing, that we are discussing about for some time now.
Lets see how the linked issue you mentioned will develop - in order to make sth like that possible there is some technical work done before. I will keep this issue to see, if the page based permissions topic is relevant for other customers as well.
Thanks for your big response! :)
Samuel Lerch
Do I get it right, that you would want permission-based Microblogging, that doesn't correlate with the space-permissions but with topics / User groups or sth similar?
P
Peter Scheidt
Samuel Lerch: In a nutshell, yep :-)