How do I apply Space Permissions to ALL Pages within the space?

[Jana Rasmussen]

Is there a way to apply space permissions to ALL pages within the space?

Some pages were set up before we fixed the space permissions (which created restrictions on who could view/edit). But pages that are within the space are still showing as open to any and all Confluence Users.  Why doesn't updating the space permissions update the page access by default?  I am having to do a lot of manual work to go in and fix view/edit access for each page.  How can I get this to apply automatically when a space setting is changed? Thanks!

[Carla Ann Rowland · Accepted solution]

Hi Jana,

I have been in your spot before with confluence.

What I had to do was 1 make sure that the space settings had the correct permissions; any pages in the space that did not have permission changes inherited the permissions.

If a page in the space had different permission scheme before I fixed the space permissions I would have to go clear those permission settings-- then it defaults back to the space permissions.

I cannot remember if I had to re-index confluence.

[Nic Brough -Adaptavist-]

In most cases, you don't need to re-index.  Atlassian caches a lot in the index, but not the core of the security stuff.  Space and Project permissions and restrictions are always read from the database, not the index.  (Search and reporting less so though)

[Nic Brough -Adaptavist- · Accepted solution]

Yes, you set the permissions in the permissions section of the space admin.

I think you may be mixing up permissions and restrictions.  Permissions act across every page in the space at all times.  You don't do anything to apply them, you set them in space admin and that's it, they apply to every page.

My guess is you are confusing this with "restrictions".  Page restrictions are set at a page level, not space-wide.

There is no "space setting" for a restriction, they belong to individual pages.

With the slight quirk that a page that has a view restriction cascades it down to all pages beneath it, so removing a view restriction from a page will make the child pages lose their inherited restriction.   (Edit restirctions do not cascade down)

[Jana Rasmussen]

Thanks for your reply Nic.

I understand there is a difference between space permissions and page restrictions.

Let me see if I can get more specific to help you understand why I am asking the questions I am.

There are pages that were created in the space prior to setting/updating space permissions.  Those pages show that ALL Confluence Users have access to the page (restrictions).  Later the space permissions were applied such that only 3 individuals should have access to the entire space (aside from site admins and administrators), but the individual pages within the space are still showing as all confluence users have access to the page.  Is there a way to disable the "view" restriction across all pages in the space so I don't have to restrict each one individually? I thought (from my understanding of space permissions, etc) that it would force certain restrictions if there were space permissions in place.

Is there a different way to do what I want to do - disable the "view" option for all pages in the space at once? 

Hope that helps clarify my question! I am still learning and I appreciate your help!

[Nic Brough -Adaptavist-]

No, you don't need to do anything.

A page with no restrictions, or with restrictions that say things like "everyone in groups X, Y and Z" is just telling you that you've got named restrictions for it (or not).

The space permissions are checked before restrictions though.

So if you have a page that says "Only Jana and Nic can see me", but the space says "Only Jana can use this space", then you're covered.  I won't be able to see it, despite what the restriction said.  I don't have access to the space, so I can't see the pages in it.

[Revooh 255]

I just did it and it is VERY easy!  Space Tools, Advanced Space Functionality, Update Page Restrictions, Select your Space name - Select Restriction Level to Anyone can view, only users and groups chose in this script can edit- select Group or Users and then select RUN.  It worked like a charm for me!