Just a heads up: On March 24, 2025, starting at 4:30pm CDT / 19:30 UTC, the site will be undergoing scheduled maintenance for a few hours. During this time, the site might be unavailable for a short while. Thanks for your patience.

×
Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Space Permissions / View is off, log in as user, user can still see page

Brian Catanzaro July 18, 2018

Just starting my own Cloud Confluence.  I'd like to give clients access to their space and nobody else's.  So I created a test:

  • Spaces
    • Space A
    • Space B
  •  Groups
    • Admin
    • Confluence-users
    • Client A
  • Users
    • me (admin)
    • test user

I put "test user" into Group "Client A".  "Client A" has (almost) full permissions for "Space A" and is not listed in the permissions for "Space B".

When I log in as user "test user", using the log in as user feature, the "test user" can see activity for Space B!  They can't see the space, but the name of the space and activity shows up under Recently Updated.  I'll bet that "test user" can also figure out the names of the clients by using the autocomplete for various features for referencing Spaces, Pages, and other Users.

Is there a configuration that completely firewalls Space A and Space B such that users cannot see the:

  1. Names of the spaces
  2. Activity on the spaces
  3. The other users

 

1 answer

0 votes
Steffi Frank
Contributor
July 18, 2018

How do you configured "anonymous access"?

If "view" is enabled test user is allowed to see all content in space B

screenshot_505.jpg

Brian Catanzaro July 19, 2018

Anonymous access is turned off.  

Brian Catanzaro July 20, 2018

Any other suggestions?

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events