Overview
The following page contains example Macro Security configurations along with steps to import them. If you are just starting out with the Macro Security, this may be a good place for you to start.
Importing Configuration Files
To import a configuration file that you have exported from another environment or from one of the example files below:
- Log in as a user with the System Administrator Global Permission.
- Select Add-ons from the Administration menu (cog icon:
) at the top right of your screen. Then scroll down to Bob Swift Configuration on the left-hand nav bar and choose Macro Security Configuration. - Locate and select the ellipsis menu icon (ellipsis icon:
). - Click on the "Import Macro Properties" option.
- Select a valid configuration file to import.
- Click on the "Import" button.
- You may be prompted to re-authenticate as a user with System Administrator permissions.
Note: the import will overwrite any existing configuration settings.
Example #1 - Restrict to Administrators Only
This properties file is a good starting point for new installations of Confluence. It restricts all macros and parameters to confluence-administrators. You can gradually open up capabilities on a macro-by-macro basis as needed.
Example #2 - No Restrictions
Use this properties file temporarily when adding Macro Security to a Confluence site that is already using macros that implement Macro Security. This gives administrator time to implement page restrictions and do testing before full implementation.
Example #3 - Moderate Restrictions
This properties file restricts most macros to members of the confluence-administrators group, but allows *ANY for many of the capabilities that a typical internal (employee-only) site would likely allow.
These macros are partially or fully restricted:
- Beanshell
- CLI
- Code Pro
- CSV*
- Excel
- Flash
- Future*
- Gant
- Groovy
- HTML
- Include Remote
- JSON Table *
- Javascript
- Jython
- Markdown
- Run*
- Run Now*
- SQL
- SQL Query
- XSLT
These macros are not restricted:
- Cache
- SQL FIle
* = The only restrictions relate to the use of certain parameters (aka Parameter Restrictions).
