Page Comparison

Description

The Atlassian folks come up with a way to implement a role based security based on user IDs to help them manage their data access better. This requires app version 5.2 at least and is simple to configure for the app using data source profiles. This does require your database be setup set up so that roles are defined for each user in Confluence.

Steps

1. Ensure that the database administrator has defined roles for each Confluence user by user ID and set appropriate authority to data based on roles. A role for anonymous must also be added.
2. Go to UPM Atlassian Marketplace > Manage apps and find the SQL.
3. Press the Configure button.
4. Select the Click Configure and select the View and modify data source profiles tab.
5. Click Add profile. In  In the Add profile window:
   
   • Add a dataSource parameter to reference an application server data source, if it has a different name that the profile.
   • Add beforeSql and and afterSql parameters similar to the example under the Extended parameters tab.
   Image Added

The new profile is available immediately - test it on a page to ensure expected behavior.

Image Removed

Anchor
Example Example

Example

The following SQL works for Postgres:

beforeSql=begin; SET LOCAL ROLE @user_id@; 
afterSql=; rollback;

The substitution variable @user_id@ is replaced in SQL by the SQL macros with the current logged in user ID or anonymous (if not logged in).