IE Only Bug - All users can add files via drag & drop

[Joey McDaniel]

Hi All,

We discovered an odd bug today. IE 11 users are able to add any file to any page by simply dragging and dropping that file onto the body of the page. The page does not need to be in edit mode and the user does not need permissions to do so. This means that any user can add any file they want to any page.

This doesn't happen in Chrome and Firefox.

Have you experienced this? Do you know how to stop this from happening?

Thanks in advance for the help!

[salehparsa]

Hi Joey,

I've created a bug report for this issue. However, can you please elaborate more about your Confluence version?

I'd recommend you to watch the bug report for further information and update. I'd also recommend you to check the Atlassian Bug Fixing policy to see how Atlassian approach to the bug fixing.

Cheers,

Saleh

[Joey McDaniel]

Thanks Saleh,

Thank you for creating the bug. We're using Confluence 5.4.4, build number 4733. I also added this info the bug.

[salehparsa]

Hi Joey,

Please open (Space Tools > Permissions OR Browse > Space Admin) and ensure that your user don't have Add Attachment permission.

You can refer to following documentation for more information and details:

• Space Permissions.

Cheers,
Saleh