Overview

The following page contains example Macro Security configurations along with steps to import them. If you are just starting out with the Macro Security, this may be a good place for you to start. 

Importing Configuration Files

To import a configuration file that you have exported from another environment or from one of the example files below:

1. Log in as a user with the System Administrator Global Permission.
2. Select Add-ons from the Administration menu (cog icon: ) at the top right of your screen. Then scroll down to Bob Swift Configuration on the left-hand nav bar and choose Macro Security Configuration.
3. Locate and select the ellipsis menu icon (ellipsis icon: ).
4. Click on the "Import Macro Properties" option.
5. Select a valid configuration file to import.
6. Click on the "Import" button.
7. You will be prompted to re-authenticate as a user with System Administrator permissions.

 Note: the import will overwrite any existing configuration settings.

Example #1 - Restrict to Administrators Only

This properties file is a good starting point for new installations of Confluence. It restricts all macros and parameters to confluence-administrators. You can gradually open up capabilities on a macro-by-macro basis as needed.

Example #2 - No Restrictions

Use this properties file temporarily when adding Macro Security to a Confluence site that is already using macros that implement Macro Security. This gives administrator time to implement page restrictions and do testing before full implementation.

Example #3 - Moderate Restrictions

This properties file restricts most macros to members of the confluence-administrators group, but allows *ANY for many of the capabilities that a typical internal (employee-only) site would likely allow.

These macros are partially or fully restricted:

• Beanshell
• CLI
• Code Pro
• CSV* 
• Excel 
• Flash
• Future*
• Gant
• Groovy
• HTML
• Include Remote
• JSON Table *
• Javascript
• Jython
• Markdown
• Run*
• Run Now*
• SQL
• SQL Query
• XSLT

These macros are not restricted:

• Cache
• SQL FIle

* = The only restrictions relate to the use of certain parameters (aka Parameter Restrictions).