[msla]

The thing about Jira and Confluence which annoys me most is the fact it's possible to have useless combinations of permissions.

For example, in Confluence, there's a nested structure: Pages exist in spaces. Pages can have more restrictive permissions than the space they're in, so you can have a space with pages anyone can edit and pages only a select few can edit. Now for the annoying part: It's possible to have permissions to edit a page in a space without permissions to view pages in that space. Does the special permission override the general? Does it, Hell! Of course not! That set of permissions is useless, in that it doesn't allow you to do a damned thing!

It would be great if Atlassian packaged a sudo plugin with their software, so you could see what a given user could see and figure out what's going wrong. It would be great if Atlassian packaged an auditor in with their software to, at the very least, alert you to useless permission combinations. I know the first would infringe on one or more paid plugins, so that's not going to happen, but I don't think anyone has anything which solves the second problem.

[probius]

Although it's not packaged together, you can download this sudo plugin: https://marketplace.atlassian.com/archive/12730 and it should still work on the latest version of Confluence.

[spullara]

Most flexible permission systems have this issue. See every database system and your filesystem.