Details
-
Bug
-
Resolution: Fixed
-
Low
-
5.1-OD-4, 5.8.5, 5.8.14, 6.15.6, 7.2.1, 7.3.5
-
OnDemand, BTF
-
14
-
Severity 2 - Major
-
11
-
Description
NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.
The Space Admin functionality allows a space to have 'Anonymous Access' allowed and displays the following warning:
WARNING
Anonymous users will not be able to view this space, because they have not been granted the global ‘Use Confluence’ permission. You can grant anonymous access to Confluence from global permissions.
The global permissions of the Confluence environment prevents anonymous users from accessing Confluence.
However, a user that is permissioned to Confluence but does not belong to a group that is currently permissioned to the space is now able to access the space. Examples of this behaviour have been attached.
Removing the anonymous flag from the space will then prevent this user from being able to access the space. You can use the following query to identify spaces with Anonymous permissions enabled:
SELECT spacename,
spacekey
FROM spaces
WHERE spaceid IN (SELECT spaceid
FROM spacepermissions
WHERE permgroupname IS NULL
AND permusername IS NULL);
Cheers,
Paul
Attachments
Issue Links
- is caused by
-
CONFSERVER-4955 Confluence users should inherit permissions from the anonymous user
- Closed
- is duplicated by
-
-
- Closed
-
- is related to
-
-
- Closed
-
-
- Closed
-
- Gathering Interest
- relates to
-
-
- Closed
-
-
- Gathering Interest
-
PSR-630 Loading...
- mentioned in
-
-
-
-
-
-
-
-
-