Using Comala worflow to classify Confluence page

I was working on a data classification project a few months ago, and one of systems that needs to be classified is Confluence. The data on Confluence can be Public, Internal, Protected and Highly Protected.

I designed a solution to use Comala workflow which we have purchased already, so no more extra cost on software. The design principle are:

• Data should be classified per page.
• Classification should be associated with right permission settings.

Here is a example.

A public page has no restrictions.

Now, let me re-classify it to Protected.

Noticed the difference after re-classification?

Now only confluence-power-users can view and edit this page.

The sample code can be found in my gist.

	{workflow:name=Data Classification Workflow}
	{description}
	Description here
	{description}
	{state:Public|colour=Green}
	{state}
	{state:Internal|colour=Blue}
	{state}
	{state:Protected|colour=Orange}
	{state}
	{state:Highly Protected|colour=Red}
	{state}
	{trigger:statechanged|state=Public}
	{remove-restriction:type=view}
	{remove-restriction:type=edit}
	{trigger}
	{trigger:statechanged|state=Internal}
	{remove-restriction:type=view}
	{remove-restriction:type=edit}
	{add-restriction:type=view|user=@creator@|group=confluence-internal-staff}
	{add-restriction:type=edit|user=@creator@|group=confluence-internal-staff}
	{trigger}
	{trigger:statechanged|state=Protected}
	{remove-restriction:type=view}
	{remove-restriction:type=edit}
	{add-restriction:type=view|user=@creator@|group=confluence-power-users}
	{add-restriction:type=edit|user=@creator@|group=confluence-power-users}
	{trigger}
	{trigger:statechanged|state=Highly Protected}
	{remove-restriction:type=view}
	{remove-restriction:type=edit}
	{add-restriction:type=view|user=@creator@|group=confluence-administrators}
	{add-restriction:type=edit|user=@creator@|group=confluence-administrators}
	{trigger}
	{workflow}

view raw data_classification_workflow hosted with ❤ by GitHub