Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info

Soon,

Status
colourBlue
titleDECember 2023
We have released an improved version with enhanced security of Security & and Encryption for Confluence Cloud will be released. Please check out with enhanced security. Check out the next steps for administrators at this page.

Live template
templateTypetemplate
templateOption{"label":"StepbyStep Guide cloud ready","value":"477730205","templateType":"template"}
templateTypeOption{"label":"Confluence template/blueprint","value":"template"}
templateId477730205
excerptSecurity and Encryption can securely store sensitive information in its Secret macros. But in certain cases. you may not want to reveal the presence of Secrets. For example, your company may running a sensitive project where you do not want the project's team members to know who else is also working on the project (this may be for security or operational purposes). At the same time, there are shared resources which every team member needs to access. In such a case, the mere presence of a Secret, or the title of the Secret alone could reveal information, such as the user name. For example, "John's credentials". Let's look at this scenario in more detail. Your company has started a sensitive project called "Project Nebula" and it has five team members - John, Elaine, Daiyu, Omar and Pradeep. You need to create one landing page which contains all the credentials for the project. Security and Encryption would be the obvious choice for storing credentials, but there are additional considerations John and Elaine are working solo so they do not need to know about the presence of anyone else on the project. Daiyu, Omar and Pradeep are part of a sub-task team within the project, so it is OK for them to see each others' names? Everyone on this team also needs to access shared resources, which in this example is "Multimedia Server". By using Secrets the Confluence Children Display macro Confluence page level restrictions you can create a landing page which selectively reveals limited information, depending on which user or group is viewing it. Admin's view (creator) Sub-task team's view Admin's view Sub-task team's view John's view Elaine's view Ingredients Apps Security and Encryption for Confluence Cloud Macros Secret Guide Prerequisites a Confluence Cloud plan which supports page restrictions (Standard plan or better) Confluence administrator permission Confluence Cloud Free plan does not support page restrictions. In your Confluence site add the users Daiyu, Omar and Pradeep to a group for easier configuration for this example, we'll add them to the group "nebula-task-team" create a project landing page for all the credentials and provide a suitable title In the project landing page, under the "Shared Resources" section insert a Secret to store the Multimedia Server credentials. In the Insert Secret Macro popup enter a Title and a Secret choose the Access tab add the users and user groups who can access the Secret for this example, we're adding John, Elaine, and the nebula-task-team group because everyone needs to access this Secret choose Insert to continue Below the Shared resources section add a Credentials section and a Children Display macro We're using the Children Display macro because it will only display links to pages which a user has permission to view. Save the project landing page Within the landing page hierarchy create credentials pages for each team member create and publish the credentials for each user by inserting a Secret macro into each page remember to add the appropriate user under the Access tab Now use Confluence page restrictions to limit access to the pages. select the padlock icon to set the page level restrictions The project landing page should viewable by all five team members. In this example, the restrictions are set to Only specific people can view or edit , and Elaine, John and the nebula-task-team group have been granted Can view access. choose Apply to continue Members of the sub-task team should be able to view each other's pages. So for Daiyu, Omar and Pradeep's pages allow the group "nebula-task-team" to view choose Apply to continue add restrictions to John and Elaine's pages should to make them only viewable by them choose Apply to continue With the page restrictions set, each user will only see the information that is required to do their jobs, as shown in the example screenshots at the top of the page. Notes Not applicable. Result Not applicable.
fieldGroupKeys{"89abpwc2yp":["net.customware.confluence.plugin.scaffolding__89abpwc2yp__data_0_575tea2p8r"]}

...