Issue Summary

If a customer searches for an issue in JIRA Service Desk Customer portal and logs in for the first time, they are directed to Confluence and from here, the Customer can access any pages even those that they should not have access to.

Steps to Reproduce

1. Go to your customer portal as a newly created customer.
2. Perform a search and Select one of the suggested pages.
3. Due to this being the first login, JIRA would direct the user to the customer portal.
4. While at confluence, if a page is not restricted, it would be visible even if the user should not have been able to view the page originally (if it was restricted with a label).
5. Also other spaces may be accessible if the link for them appear in any tickets in the page the customer is accessing.

Feature Request

Can JIRA Service Desk handle all the authentication without requiring the redirection to Confluence or can it automatically redirect the user back to itself following a login to prevent the user from accessing Confluence proper.

Workaround

Confluence page restriction can be used to restrict the pages from the user, however, this may not necessarily be scalable depending on how many pages are involved at the point the confluence was connected to JIRA Service Desk to serve as a knowledge base.