This page last changed on Apr 29, 2007 by rosie@atlassian.com.

Page restrictions allow you to control who can view or edit individual pages. Page restrictions are set when editing a page, using menus below the text-entry box.

In order to set or modify page restrictions, a user needs to have 'Restrict Pages' permission in the space to which the page belongs, and permission to edit the page itself. So if a user is prevented from editing a page through page restrictions, they are also prevented from changing the restrictions themselves.

Page Security Rules

Users can only view page or space content for which they (or a group they are in) have 'View' permission. Pages that a user does not have 'View' access to are referred to inaccessible pages. Visit Inaccessible Page to see how Confluence deals with pages a user cannot view; anonymous users are directed to the login page while logged-in users are shown a permissions error page with a list of the groups with 'View' permission to the page. It is not possible to conceal the existence of pages, though you can restrict View access to page content. To keep the existence of a page or space secret, do not link to it from other sources.

Inherited Restrictions and Child Pages

If a page has its 'View' restriction set, that restriction will be inherited by all its children (and their children, and so on). If a 'View' restriction is added to a page that has already inherited page restrictions from its parent, users must satisfy both restrictions in order to see the page.

'Edit' restrictions are not inherited.

Child Page Restrictions Example

Consider the page 'Documents', with a child page 'Executive', which itself has a child page 'Payroll'. To begin with, anyone who can view the space to which these pages belong can see all three pages.

For security reasons, 'View' restrictions are set on the 'Executive' page, restricting it to the 'mycompany-management group'. At this point, anyone can still see the 'Documents' page, but you must be in the 'mycompany-management group' in order to view either 'Executive' or 'Payroll'.

Since 'Payroll' information is considered particularly private, the 'Payroll' page then has its page restrictions set to only allow members of the 'mycompany-financial' group to view it. At this point, anyone can see the 'Documents' page, only members of 'mycompany-management' can see 'Executive', and only users who are members of both the 'mycompany-management' and 'mycompany-financial' groups can view 'Payroll'.

Note

Space administrators are responsible for the management of a space and its contents. They therefore have the ability to remove all restrictions from a page (as described in 'Viewing Restricted Pages'). 

This means that space administrators can view and edit all content in the space.

What would you like to do?

View a Page's Restrictions
Set a Page's Restrictions
View All Restricted Pages

RELATED TOPICS

Working with Pages

Take me back to Confluence 2 Home

Document generated by Confluence on May 01, 2007 02:35