[#VISIB-21] show-to hide-from macros do not work with LDAP groups

Confluence Extension: Visibility Plugin

show-to hide-from macros do not work with LDAP groups

Created: 20/Mar/07 02:51 PM Updated: 10/Jan/08 06:57 PM

Component/s:

{hide-from}, {show-to}

Affects Version/s:

1.4.4

Fix Version/s:

Soon

Time Tracking:

Not Specified

Description

« Hide

using:

{show-to:users=james}

does not work unless James is a confluence user. Does not work with ldap user james. This used to work in confluence 2.2.10 and visibility plugin 1.4.1 ( I think)

All

Comments

Work Log

Change History

Sort Order:

[ Permalink | « Hide ]

David Peterson added a comment - 15/Nov/07 08:00 AM

What version of Confluence are you using now? I'm not sure there is much that this plugin can do about it - it just uses the UserAccessor to determine if the user is allowed. But I think LDAP integration has been improved more recently - I know that 2.5 is improved anyway.

[ Permalink | « Hide ]

James Mortimer added a comment - 15/Nov/07 05:31 PM - edited

confluence 2.5.7 and linking 1.6.0

all of these seem to fail (with LDAP groups enabled):

users=userAlias
users=user name
group-groupAlias
space=SPACEKEY (shows even if I don't have view rights)
space=SPACEKEY:edit (shows even if I don't have edit rights)
space=SPACEKEY:view (shows even if I don't have view rights)

all of these seem to work:

group=group name (LDAP)
group=group name (confluence)

[ Permalink | « Hide ]

David Peterson added a comment - 16/Nov/07 04:30 AM

Hmm. A couple of notes:

users=userAlias - what is a userAlias? How does it hook in with Confluence exactly?
users=user name - Try putting the user name in quotes. Eg: 'users="user name"'. This is a symptom of the more advanced filtering options available - spaces are considered to be separators, unless quoted.
group-groupAlias - What are you trying to achieve here? Why the '~~'. Again, if it's expected, try putting the whole thing in quotes - '~~' indicates that the proceeding group is excluded.
space=XXX - ok, that's somewhat worrying.

[ Permalink | « Hide ]

Andrew Miller added a comment - 16/Nov/07 03:08 PM

We are seeing similiar issues here although we were working fine under 1.5 and are now having problems with 1.6 (I had to backrev to 1.5 this morning actually).

Here are some samples that weren't working.

{show-to:space=csweb:news}{link-to:add news}add news...{link-to}{show-to} {show-to:group=csweb-admin}{link-to:page edit}edit navigation...{link-to}

csweb-admin is actually a local group in this case (managed using the Space Admin Group plugin).

[ Permalink | « Hide ]

James Mortimer added a comment - 20/Nov/07 05:22 PM

Answers to your questions:

userAlias is the 'unique key' for an LDAP user that is used to make links in confluence. For example [~james]. User Name is the full name, for example, James Mortimer, which would link like this: [James Mortimer|~james]

even quoted does not work:
- users="User Full Name"
- users="username" (a.k.a. userAlias)

group=groupAlias uses the unique key for the group, rather than the group name which is subject to change by the external LDAP name server more frequently. This isn't really a bug but a documentation item, since group="group name" seems to work (with or without quotes) even for LDAP groups.

[ Permalink | « Hide ]

Andrew Miller added a comment - 10/Jan/08 06:57 PM

Just curious if there's been any progress on this (we're still holding at version 1.5 right now).

Thanks!