I have a Confluence 6.6.9 server installation and I have turned on Anonymous access in the Global permissions. I only want to make a few spaces accessible to Anonymous users and that part works fine.
But if an anonymous user puts in a few letters into the search box, they get the titles of images what have those letters in them. If they click on a search result, they are taken to the login screen, so they can't actually see the image.
But the images are the avatar images of confluence users and this would be a security concern, letting people see the names of people in the company. Currently all Confluence users who have personal spaces have the Anonymous permission turned off, so I'm not sure what other setting I would need to set to prevent image filenames from showing to anonymous users.
Thanks for your help!
Confluence configured to be available for anonymous, disable "View User Profile" privilege in "Global Permissions"
if this doesn't work then make sure you check the following
Confluence system add-on named "Confluence Profile" is enabled by administrator. By default, this add-on is suppose to be disabled.
Hope this helps!
Warm Regards,
Raja
Hi Raja,
Thank you for your help. I have View User Profiles turned off and have disabled the Profile Picture macro. Unfortunately, I can still search and find the images file names but as before, the anonymous user can't see the actual image without logging in. I couldn't find a Confluence Profile add-on.
Warm Regards,
Mike
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Atlassian Government Cloud has achieved FedRAMP Authorization at the Moderate level! Join our webinar to learn how you can accelerate mission success and move work forward faster in cloud, all while ensuring your critical data is secure.
Register NowOnline forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.