Example Configurations - 4.x

Description

This page contains example Macro Security configurations along with steps to import them. If you are just starting out with the Macro Security, this may be a good place for you to start. 

Import Configuration Files

To import a configuration file that you have exported from another environment or from one of the example files below:

  1. Log in as a user with the System Administrator Global Permission.
  2. Select Add-ons from the Administration menu (cog icon: ) at the top right of your screen.
  3. Scroll down to Bob Swift Configuration on the sidebar and select Macro Security Configuration.
  4. Locate and select the ellipsis menu icon (ellipsis icon: ).
  5. Select the Import Macro Properties option.
  6. Select a valid configuration file to import.
  7. Click the Import button. You may be prompted to re-authenticate as a user with System Administrator permissions.

(warning) Note: The import overwrites any existing configuration settings.


Examples

Restrict to Administrators Only

This properties file is a good starting point for new installations of Confluence. It restricts all macros and parameters to confluence-administrators. You can gradually open up capabilities on a macro-by-macro basis as needed.

No Restrictions

Use this properties file temporarily when adding Macro Security to a Confluence site that is already using macros that implement Macro Security. This gives administrator time to implement page restrictions and do testing before full implementation.

Moderate Restrictions

This properties file restricts most macros to members of the confluence-administrators group, but allows *ANY for many of the capabilities that a typical internal (employee-only) site would likely allow.

These macros are partially or fully restricted:

  • Beanshell
  • CLI
  • Code Pro
  • CSV* 
  • Excel 
  • Flash
  • Future*
  • Gant
  • Groovy
  • HTML
  • Html-bobswift (from HTML for Confluence version 5.7.0)
  • Include Remote
  • JSON Table *
  • Javascript
  • Jython
  • Markdown
  • Run*
  • Run Now*
  • SQL
  • SQL Query
  • XSLT

These macros are not restricted:

  • Cache
  • SQL FIle

* = The only restrictions relate to the use of certain parameters (aka Parameter Restrictions).