Issue Summary

We understand that there is an existing bug with unlicensed users accessing tiny links CONFSERVER-55964. This means that you have to use a link that contains the page title as a workaround to allow unlicensed access to a page. However, we found that if you change the page title, the link that has already been circulated to unlicensed users breaks.

To get around this, unlicensed users were able to  access pages using links in below format :  (http://localhost:29262/pages/viewpage.action?pageId=98371).

This allowed unlicensed users coming from JSM to access the pages even if the page name changes. This worked fine for all pages until the major upgrade to version 9.2.6. This method no longer works for the home page of spaces, but does still work for other pages in the same space.

In previous version (like 8.5.21), when unlicensed users tried accessing this URL format with the pageID, they could access all pages in the space along with the home page.

However, after upgrading to 9.2.6, unlicensed users that come from JSM can not access a space's home page using the link in format (http://localhost:29262/pages/viewpage.action?pageId=98371)

Steps to Reproduce

• For replicating, first create an application link between confluence 8.5.21 and Jira Service Desk (aka JSM DC).

• Then create a Jira user directory in confluence , so that JSM users can access confluence spaces as Knowledge bases from projects in JSM.

• Then, create a project in JSM and setup a knowledge base in that JSM project and set the permission as 'All users and customers' can access this space.

• Then try accessing the KB's space's home page in confluence after logging in as an unlicensed user which belongs to JSM. Make sure this user does not belong to confluence-users group in confluence (so that the user trying to access home page  will be an unlicensed user). Use link in below format to access the home page in confluence :

• <confluence_baseURL>/pages/viewpage.action?pageId=<pageID_of_KB_SPACE_HOME_PAGE>

• We will see, this page could be accessed using this link in confluence 8.5.21

• Now upgrade confluence to 9.2.6.

• After upgrading, unlicensed user won't be able to access the same home page for the configured KB using link in above format This is the issue that needs to be fixed.

• Unlicensed user can not access space home page and will get Not Permitted error in confluence 9.2.6  This was working fine on 8.5.21 but not on 9.2.6

Expected Results

Actual Results

Workaround

As a workaround for this, instead of the 'viewpage.action' URL, unlicensed users can use below link (which includes 'viewinfo.action' endpoint) and then users will be able to see the page like below : 

• Visit the link (for ex : <base_url>/pages/viewinfo.action?pageId=<pageID>)

• 

• From here user can click on the page title (in my case page title is 'sp8521 Home')

• This will lead the unlicensed user to the actual page.