Confluence restrict user to a specific space

Anthony Sapountzis March 13, 2014

We are currently have one lcient with access to our confluence on demand, they are in the confluence-users group with changes made to confluence recently they can now see all spaces.
How can we restrict them to their own space.

They are also added to their own group.

5 answers

1 accepted

0 votes
Answer accepted
Anthony Sapountzis March 26, 2014

I had to go through each space and remove the confluence-users from the allowed groups. THe confluence-users are also not the within teh default group that gets assigned to any space so it has worked out ok. I had to follow

Nic Brough suggestion

3 votes
Rodrigo Girardi Adami
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 14, 2014

Hi Anthony,

You'll have to change the permission schema of all spaces and remove the confluence-users group from the ones you don't wish them to have access. You may want also to create a new group for these users and allow this group to access only the spaces they have to by changing the space permissions. I know this might take some time but it's necessary to change the permissions again.

Cheers,

Rodrigo

Daniel Borcherding
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 14, 2014

I don't think the solution is to take confluence-users off all spaces. Where are you setting this users groups? What happens if you remove just him from the confluence-users group?

Anthony Sapountzis March 14, 2014

If i remove from confluence-users they do not have access to confluence at all.

When we had it set it up there was no confluence-users group. Atlassian added that and know you must be part of that group to access confluence.

Daniel Borcherding
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 14, 2014

Apologies,

If you give this customer group you have created for this user the same global permissions as the confluence-users group he should be able to log in.

Anthony Sapountzis March 14, 2014

Yes he will be able to login but then he has permissions to all spaces. Hwo do i restrict the access to once space only?

Daniel Borcherding
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 14, 2014

Apologies,

Let me organize my thoughts a bit better.

1) permit the custom group he is in on the global permissions. This will allow a login.

2) remove him from confluence-users group to remove permissions on most of your site content.

3) add space permission for his group on the space you want him to be able to access

4) Access should be restricted to that single space and nothing else without having to juggle the confluence-user permissions on all spaces

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 15, 2014

I'm afraid Anthony is essentially correct here. Confluence-users is a group that says "can log in". If it's used in permissions to allow any more access, then all users in the group will get it. So you *must* unpick that if you want to restrict someone's access.

Daniel's solution is one approach, but has a significant problem - every new user you add from then on will be added to both confluence-users and the new group. So you may need to remove them from groups after creating them. The best solution is to slog through the hard work of separating "can log in" from all other permissions.

Rodrigo Girardi Adami
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 25, 2014

I do also agree with Nic, my idea was to separate the can use permission from other permissions. That may cause some hard work but it will work. :)

Let us know your thoughts Anthony

0 votes
Michael Harrod
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
December 5, 2016

In case anyone else has a similar issue (like me) and the other answers don't solve it.

In my case, I don't know why, but Anonymous had been granted a number of permissions in Space Permissions. When I removed them (no current need for anonymous access) then the client's user group became restricted to the client space, as I hoped.

0 votes
Daniel Borcherding
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 14, 2014

Apologies,

Let me organize my thoughts a bit better.

1) permit the custom group he is in on the global permissions. This will allow a login.

2) remove him from confluence-users group to remove permissions on most of your site content.

3) add space permission for his group on the space you want him to be able to access

4) Access should be restricted to that single space and nothing else without having to juggle the confluence-user permissions on all spaces

0 votes
Daniel Borcherding
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
March 14, 2014

Apologies,

Let me organize my thoughts a bit better.

1) permit the custom group he is in on the global permissions. This will allow a login.

2) remove him from confluence-users group to remove permissions on most of your site content.

3) add space permission for his group on the space you want him to be able to access

4) Access should be restricted to that single space and nothing else without having to juggle the confluence-user permissions on all spaces

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events