I've created a page with restricted access.
When someone requests permissions to this page, I revieve an email with a preview of this page.
The page has restricted access for a reason — it contains sensitive data. It's highliy undesirable to leak that data into email account.
I consider this a security issue.
Hi Roman, first of all thanks for the feedback mate.
Would you mind creating a feature request ticket so we can have others voting on and discussing this issue? https://jira.atlassian.com/secure/CreateIssue!default.jspa
That's not a security issue, you have the right to see the page already.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
My confluence account, not the gmail one. If I trust Atlassian, that does not mean I trust Google.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
If you don't trust google for your email, that's fine. You'll need to use an email address you do trust instead. It's not Confluence's fault that you have chosen an email you don't trust.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Sorry, I should also have said that if you must do this because you've got insecure email accounts, you will need to hack the core code that builds the email.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
No, that is not fine, because the data is already shared with third party. Without my explicit permission, as far as I can see. The trust issue is not the only one, it's also about expectations. I may intentionally use that mailbox for insensitive data only so I could read it in public places.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Ok, so it's not fine. So stop using insecure email accounts - if you believed them to be insecure, then you shouldn't have used them in the first place.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.