New macro

A new macro called sql-file is provided to enable user scenarios related to macro-security. It only allows accessing specifically authorized scripts stored on the Confluence server file system. This provides more flexibility for administrators to selectively grant general access to the results of specific SQL scripts on pages without edit restrictions or with less restrictive edit restrictions. This is accomplished using standard CMSP parameter control configurations.

Macro security configuration example

The following allows the authorized.sql script located in the <confluence home>/script directory to be run from any page against any data source. No other SQL scripts can be run.

sql-file=*ANY
sql-file.datasource.*=*ANY
sql-file.file.authorized.sql=*ANY