Tracing where a user is blocked access to a page

[Hayden Smith]

I have a user who is unable to access a page.

The page has no restrictions applied to it, and there are none applied to the parent pages in the page tree.

The user is in a group that has view and add comment permission in the space the page is within.

Other users in the same group have been able to view the page and leave comments.

I have used Brian Engert's user macro to view which users have permission to view the page from here https://community.atlassian.com/t5/Confluence-questions/List-users-who-have-access-to-confluence-page/qaq-p/217593 and in the list of users, the user with the problem is missing.

The user with the problem is able to browse and post to other spaces in Confluence with no issues.

Do any tools that I'm not finding that can help me narrow down what is blocking this user's access, or some logging settings that could help give clues as to how I can fix this?

[Nic Brough -Adaptavist-]

This can be really hard to trace, but can you tell us

• What the error message is
• How they are trying to get to the space (via link in confluence, external link in an email, etc)
• What version of Confluence are you on
• When you visit the page (in view mode) as someone who can access it, are there any restriction icons at the top at all?  If there are, what do they say?

[Hayden Smith]

The error message they get is:

Page Not Found

We can't find that page. This could be because:

The page doesn't exist. The page exists, but you don't have view permission for that space.

They are trying to visit the page by a link.  From further conversations it seems they can't see any pages in the space.

Confluence version is 6.14.1

The page is shown as unrestricted.  Blue open padlock.

[Nic Brough -Adaptavist-]

Ok, then it sounds like it is something in the space permissions.  Are they definitely named in there?

Also, do you have more than one user directory?

[Hayden Smith]

We currently use Active directory for the users, with the internal directory to maintain an administration user in case it does lose sync with the AD server.

I've had a lot more users raise the same issue today so I'm getting the feeling that something may be a bit broken and have raised it with Atlassian support.

[Nic Brough -Adaptavist-]

I would check if there are directory-related errors in the logs, it may be that Confluence does not think the right people are in the right groups.

[Hayden Smith]

I can't see anything in the logs for it.  Is this something that would be logged by default or would there be an additional logging module I'd need to activate?

[Nic Brough -Adaptavist-]

Errors would be logged (unless you've turned it off in "logging and profiling", which I would not expect most people to even know about, let alone use it!)

I'm afraid without a deep look into your system, I can't get any further.  I'm sure it will be something I have forgotten, but we'll have to wait for support if there's no errors we can find around user directories.