Connector Configuration Reference
acl_users_0_s
and acl_groups_0_ss
, but the field names can have different numbers. For example, some documents have acl_users_1_s
or acl_users_6_s
.
This is due to the strange way that Confluence handles user and group viewing permissions. Each of these fields represents an ancestor of the item’s security. If a user does not match EACH level of permissions, the user cannot see the document and the doc will be filtered out.
You will see three fields that are used during security trimming:
ancestorCount_i
stores the number of ancestors this item hasacl_users_i_s
stores the users allowed to see this item at ancestor number i
acl_groups_i_s
stores the groups allowed to see this item at ancestor number i
queryUser
and we return the Confluence documents this user can access.
The Confluence security trimming algorithm does the following:
ancestorCount_i
of all documents in the index (max(ancestorCount_i)
).queryUser
is part of.for i from [0 to max(ancestorCount_i)]
, append an AND clause for the security filter to match against each ancestor level for the acl_users_i_s
and acl_groups_1_s
fields:\t
for the tab character. When entering configuration values in the API, use escaped characters, such as \\t
for the tab character.