Prevent data export
The data export rule allows you to block the export and download of content in the spaces and projects, products, or classification levels covered by a data security policy. What is a data security policy?
This is useful if you need to prevent people from exporting sensitive data in Confluence and Jira to PDF, XML, CSV, and other available formats, or downloading attached files. The rule blocks the export of pages, blog posts, and issues.
Who can do this? |
Add the data export rule to your policy
If you haven’t created a data security policy yet, create one now. The data export rule is available for policies that cover products, spaces and projects, or classification levels.
To add the data export rule to your policy:
Go to Atlassian Administration. Select your organization if you have more than one.
Select Security > Data security policies.
Select your policy from the list.
Select Add rule.
Select the rule you want to add. Only rules that are available for your coverage area will appear.
Follow the prompts to configure the rule then Save.
People will not be able to export issues, pages, or blogs, or download files attached to pages and issues covered by the policy.
What will my users experience?
The availability of export or download options varies by product. Users may either find that these options are not visible or receive a notification indicating that their organization has restricted access to these features.
Blocked in Confluence
Export page to PDF and Word (… > Export)
Export blog to PDF (… > Export)
Export space to CSV, HTML, XML, and PDF (Space settings > Content tools > Export)
Download attachment using download button in file preview, page attachments list, space attachments list, attachments macro, contextual toolbar in the editor, and other places we provide a download button for an image or file.
Copy attached file to another page using copy file button in the editor toolbar.
Blocked in Jira products
Export individual issue to Word and XML (… > Export)
Export multiple issues (filters, queries) to XML, RSS, Word, HTML, CSV, XLSX (Issues > Export issues)
Download attachments in issues.
If the user attempts to export or download content via a URL or API, the request will return a “can’t export” error.
Limitations
The data export rule doesn’t prevent apps from exporting content from Confluence or Jira products.
The data export rule doesn’t control (or block) browser-based export or download actions such as print, save, or actions performed by browser extensions.
If someone exports a Confluence space to CSV, and a data security policy blocks exports for a particular classification level, child pages of the page that has been classified will not be included in the export. This only applies to the CSV export. For XML, PDF, and Word, only the classified pages will be omitted.
Was this helpful?