Issue Summary

Blog posts macro is unable to display content when "all logged-in users" is enabled in JSM

Users that are not explicitly declared on the space permission in groups/users are not able to see the content of the macro "Blog posts"

This issue only happens when "all logged-in users" is enabled on JSM, it does not occur with another type of access as anonymous.

Steps to Reproduce

1. Integrate JSM and confluence
   1. Go to the knowledge base settings and enable "all logged-in users" for the space integrated
2. Go to Confluence
   1. Remove all the permissions in the space and allow only view permissions
   2. Create a blog on the space space that was integrated with JSM
   3. Create a new page
      1. Insert a new "Blog posts" macro
      2. Update the page and save
   4. Using a test account that doesn't have a role in Confluence  try to access the page that contains the "Blog Posts" macro

Expected Results

The macro should be able to retrieve the blogs information

Actual Results

The macro don't display the content from the blogs.

Sometimes the following error message displays:

Error rendering macro 'blog-posts' :
com.atlassian.confluence.api.service.exceptions.SSStatusCodeException: There was an illegal request
passed to XP-Search Aggregator API : HTTP/1.1 403 Forbidden

The HTTP POST REQUEST  "/cgraphql?q=MacroBodyRendererQueryWithTags" returns 

"Create a blog post to share news and announcements with your team and company"

However, if the user keeps refreshing the page sometimes the page is able to render

Workaround

Keep refreshing the page till the content is displayed

Add the users into Confluence and assign it to a view-only group
OR
View the blogpost directly not via blog-post macro.