Space permissions - user vs. group

[Emily Watford]

When defining space permissions, if a user is in a group that can only view pages, but the user also has individual user access to create pages, comments, etc., which permission applies?

[Andrew Frayling · Accepted solution]

Hi Emily,

Permissions are "additive" so the access that a user has to a page is defined by the sum of the permissions from both the group and the user permissions. See http://confluence.atlassian.com/display/DOC/Users+and+Groups for details.

In your case that means that the user would be able to view, create and add comments, etc.

Hope that makes sense?

Andrew.

[Emily Watford]

Thanks Andrew! That does make sense. I want to allow a user to edit one page only within a space. Do you know if that means I would have to put editing restrictions on all the other pages to exclude the one user from editing those?

[Andrew Frayling]

Hi Emily,

This exact question cropped up recently - https://answers.atlassian.com/questions/36265/permission-within-a-space-only-for-a-page - basically, yes, restrict all of the top level pages so that the user cannot edit them (nor anything underneath them) and then add edit permissions for that one user to the page that you want them to edit.

The other alternative on the other thread was to use the {secure-include} from the Perimeter plugin http://wiki.customware.net/repository/display/AtlassianPlugins/Perimeter+Plugin

Hope that helps,

Andrew.

[Emily Watford]

Thanks again Andrew!