Group permissions vs User permissions
Asked by Hans Pesata:

Hi!  

Confluence 7.13.5 Data Center  

We have a group which we use to give Users access to certain spaces.  

A user is in the group which has   

All - View  
Pages - Add  
Blog - Add  
Comments - Add  
Attachments - Add  

permissions in a space.  

Interestingly, the user is not able to access pages (without restrictions) in the space.  

When I add the User with the exact same permissions to the space permissions, He is able to access the pages.  

Why does this happen ?  

Any hints would be appreciated!  

Regards,  
Hans


Answers:
author: Hans Pesata
body: Hi!  
It turned out, that the reason was a problem with the Sync from the LDAP Directory.  
After the User explicitily logged out and logged in again, the Group permissions have been synced and the User was able to access the Space.  

Regards, Hans


author: Nic Brough -Adaptavist-
body: Could the inaccessible pages be located beneath a page that has view restrictions?


author: Rilwan Ahmed
body: Hi [@Hans Pesata](/t5/user/viewprofilepage/user-id/613670) ,

1. Please check if the user is really part of the group or removed for some reason.
2. Please reconfirm if the group is added to space permissions (check space settings --\> Space permissions)

comments: author: Hans Pesata
body: Hi!  

Yes, I can confirm both.  

As described, I had added the user to the group and he immediately tried to access the space, which didnt work. probably because He would have needed to log out and log in again, to get the groups enhanced permissions.  

Am I right ?  

Thanx \& Regards,  
Hans


author: Rilwan Ahmed
body: [@Hans Pesata](/t5/user/viewprofilepage/user-id/613670)

Are you using any ldap/Active directory for users and groups sync ? If yes, then you need to wait for the sync to complete.

If you are using internal directory for user and group management, then just a page refresh will do .

Are you still having the reported issue ?


author: Hans Pesata
body: Hi!

Exactly this seems to have happened.

Regards,

Hans


author: Rilwan Ahmed
body: Please accept the answer if this resolved your issue. It would be beneficial for users with similar queries.


author: Hans Pesata
body: [@Rilwan Ahmed](/t5/user/viewprofilepage/user-id/716861)

I accepted the logout/login answer from Aug 20th.

Regards, Hans


author: Hans Pesata
body: HI!  

Thanks for Your answers!  

Maybe the problem was this:  

I had added the user to our group and he immediately tried to access the page.  
I think He should have logged in again, to get the permission through the group ?  

When I added Him directly to the restriction, it worked without logging in again, because this is action related to the space and not user attribute related.  

What do You guys think ?  

Regards,  
Hans

comments: author: Nic Brough -Adaptavist-
body: It is not a bad idea, but Confluence does not work like that. As soon as you are in a group, it shows. They are not cached at login.

However, if you are using an external directory for users, there is a sync cycle, so you may not be added into the group immediately, confluence may not recognise the new group until the next sync.


author: Max Foerster - K15t
body: HI [@Hans Pesata](/t5/user/viewprofilepage/user-id/613670) ,

Just to be sure:

* Other users in the same group can access the space?
* Can a user B with the same configuration (same user groups) access the same space/page?
* What error message or Confluence page is the user presented with when trying to access the space or any content of that space? Please try with the space homepage.

That would help figure out your issue. :)

Best, Max


Tags: confluence-server

group

page

permission

server

user