System error Could not check permissions for content when editing Gliffy diagrams in Confluence 8.0.x
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
All users that are NOT part of the "confluence-administrators" super-users group are not able to edit Gliffy diagrams and receive a system error.
Environment
This issue is seen in Confluence version 8.0.x with Gliffy Diagrams for Confluence version 9.7.5.
Diagnosis
Using Confluence version 8.0.x with Gliffy Diagrams for Confluence version 9.7.5.
- Create a page with a Gliffy diagram on it.
- Log in with a user that is NOT part of the "confluence-administrators" group.
- Try to edit the diagram.
A system error page is shown with the following error message in the atlassian-confluence.log:
2023-01-05 09:51:31,013 WARN [http-nio-6802-exec-7] [struts2.dispatcher.mapper.DefaultActionMapper] cleanupActionName Gliffy+test did not match allowed action names [a-zA-Z0-9._!/\-]* - default action index will be used!
-- url: /c802/display/GLIF/Gliffy+test | userName: test | referer: http://localhost:6802/c802/display/GLIF/gliffy-test+Home | traceId: cb7a64bb71df677c
2023-01-05 09:51:51,251 WARN [http-nio-6802-exec-9] [struts2.dispatcher.mapper.DefaultActionMapper] cleanupActionName Gliffy+test did not match allowed action names [a-zA-Z0-9._!/\-]* - default action index will be used!
-- url: /c802/display/GLIF/Gliffy+test | userName: test | referer: http://localhost:6802/c802/display/GLIF/gliffy-test+Home | traceId: d0095639c7f38875
2023-01-05 09:51:55,730 ERROR [http-nio-6802-exec-10] [apache.struts2.dispatcher.DefaultDispatcherErrorHandler] sendErrorResponse Exception occurred during processing request: Could not check permissions for Content{id='ContentId{id=393243}', type=attachment, title='test-gliffy', status=current, space=CollapsedReference{idProperties={key=GLIF}, referentClass=class com.atlassian.confluence.api.model.content.Space}, history=CollapsedReference{idProperties={contentParent=CollapsedReference{idProperties={id=ContentId{id=393243}, status=current, version=CollapsedReference{idProperties={number=4}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}}, referentClass=class com.atlassian.confluence.api.model.content.History}, version=ExpandedReference{idProperties={number=4}, object=Version{by=KnownUser[username=admin,userKey=4028e4ae857e88f701857e91345d0000], when=2023-01-05T09:44:39.504-03:00, number=4, message=GLIFFY DIAGRAM, minorEdit=true, hidden=false, syncrev=null, content=CollapsedReference{idProperties={id=ContentId{id=393243}, status=current, version=CollapsedReference{idProperties={number=4}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}}}, ancestors=null (CollapsedList), container=CollapsedReference{idProperties={id=ContentId{id=393236}, status=current, version=CollapsedReference{idProperties={number=3}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}} no suitable delegate found.
-- url: /c802/plugins/gliffy/editor.action | userName: test | referer: http://localhost:6802/c802/display/GLIF/Gliffy+test | traceId: 817efd4f86aba7af
caused by: java.lang.IllegalArgumentException: Could not check permissions for Content{id='ContentId{id=393243}', type=attachment, title='test-gliffy', status=current, space=CollapsedReference{idProperties={key=GLIF}, referentClass=class com.atlassian.confluence.api.model.content.Space}, history=CollapsedReference{idProperties={contentParent=CollapsedReference{idProperties={id=ContentId{id=393243}, status=current, version=CollapsedReference{idProperties={number=4}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}}, referentClass=class com.atlassian.confluence.api.model.content.History}, version=ExpandedReference{idProperties={number=4}, object=Version{by=KnownUser[username=admin,userKey=4028e4ae857e88f701857e91345d0000], when=2023-01-05T09:44:39.504-03:00, number=4, message=GLIFFY DIAGRAM, minorEdit=true, hidden=false, syncrev=null, content=CollapsedReference{idProperties={id=ContentId{id=393243}, status=current, version=CollapsedReference{idProperties={number=4}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}}}, ancestors=null (CollapsedList), container=CollapsedReference{idProperties={id=ContentId{id=393236}, status=current, version=CollapsedReference{idProperties={number=3}, referentClass=class com.atlassian.confluence.api.model.content.Version}}, referentClass=class com.atlassian.confluence.api.model.content.Content}} no suitable delegate found.
at com.atlassian.confluence.security.DefaultPermissionManager.findDelegateFor(DefaultPermissionManager.java:305)
at com.atlassian.confluence.security.DefaultPermissionManager.hasPermissionNoExemptions(DefaultPermissionManager.java:113)
at com.atlassian.confluence.security.DefaultPermissionManager.hasPermission(DefaultPermissionManager.java:56)
...
javax.servlet.error.request_uri: /c802/plugins/gliffy/editor.action
com.atlassian.core.filters.HeaderSanitisingFilter_already_filtered: true
com.atlassian.prettyurls.filter.PrettyUrlsSiteMeshFixupFilter: trueCause
Permission errors caused by a third-party plugin Gliffy Diagrams for Confluence version 9.7.5.
Solution
This is an issue with the Gliffy release version 9.7.5 or later for Confluence 8.0.x. You will need to contact Gliffy Support in order to get this resolved.
Last modified on Jan 5, 2023
Powered by Confluence and Scroll Viewport.