Symptoms

Assuming the following setup:

|-Parent Page A (restricted to user:jsmith only)
 |-Child Page 1

The child page should also be restricted to jsmith only. However, child page 1 is visible to the all people who have the appropriate space perms.

Cause

This was a known bug during upgrade of Confluence 2.9.x - CONFSERVER-12911 - Pages that inherit page restrictions are not respecting those restrictions after upgrade to Confluence 2.9. It is resolved in 2.10.x. However, the ancestor tables that handle the parent child relationships do not get updated properly, and the problem may persist. This is being tracked at CONFSERVER-25189 - Confluence Page View Restriction is not Inherited when Ancestor CONFANCESTORS Table Gets out of Sync 

Resolution

1. Visit this URL as an admin:

   http://<confluence address>/admin/permissions/pagepermsadmin.action
   

2. Click the button rebuild the ancestor relationships for the Confluence content. Depending on the size of your Confluence instance, this task could take 10 minutes or more to complete.
3. Flush the Inherited Content Permissons cache so that the rebuilt permissions are picked up. See Cache Statistics.