Summary

If public access is disabled and permissions are specified for anonymous access authenticated users that shouldn't have access to the space will inherit permissions.

Steps to Reproduce

1. Specify permissions on a test space to administrators only.
2. Do not enable pubic access but specify all permissions on anonymous access for the test space.
3. Access the space with a user account that isn't an administrator.

Expected Results

Since anonymous access is disabled. Only administrators should be able to access the space.

Actual Results

Any authenticated confluence user can access the space as well as they have the same permissions as specified on anonymous access.

Workaround

Remove all permissions for public access (which is the default).