If a user does not have Confluence application access and they try to access pages that are publicly/anonymously visible they will not be allowed to see it until they log out of OnDemand.

Steps to reproduce:

create a new user
give them access to JIRA only
Create a new Space on Confluence that has anonymous access
log in as the new user and try to access the page
Result: You are blocked from seeing Confluence.