cancel access given through outgoing links

frederic_vu September 15, 2021

I see on some documents, "outgoing links", mainly mailto, including external users.

We have not enabled public links, but on the document shared in "everyone can view", I checked with some of those external users (suppliers), and they confirm being able to access it.

For some of them, we have stopped working with them, and I would like to remove the access they have on those pages.

As IT manager, I would like to have a complete view of those existing direct links to any document in our Confluence, and possibly cancel them. Where is it possible to do this ?

1 answer

1 accepted

0 votes
Answer accepted
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 16, 2021

How are these external users getting permission to see the pages?

You've ruled out public links, so there's either:

  • They are logging into Confluence as a normal user
  • The stuff they can see is in a Service Desk Knowledge Base and they are customers 
  • You are allowing them in via "anonymous" access, which means no-one has to log in to see the content

Do you know which it is?  (Check the space permissions to see who is allowed in, it should be able to show you all three of those)

frederic_vu September 22, 2021

I've seen the users to whom the documents we shared, arrive in the list of our users, with "has site access".

One of them (let's name him BOB) also appeared in the "Access Request" list and is still pending approval (so was not approved). But if I choose to "Reject" this access request, Confluence tells me "You're about to deny access to BOB. They won't be able to request access again and we'll let them know they were denied access."

So I don't want to do that as we may work with BOB in the future again. Unless you tell me he would be able to come back later if we share a new document with us?

So I think we are in the case 1 of your list, but I'm not sure how/when they get access to our site in the process as BOB was listed among our users with "has site access" and his "Access Request" is still pending approval.

Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
September 22, 2021

Ok, so Bob is a standard Confluence user, so, yes, you can just lock them out of the system, by removing them from the "has site access" or disabling the account, or even deleting it (not recommended, stick to "disable")

The "reject" is a bit more complex, but I think you've already answered it yourself - yes, you can reject Bob, but that rejection only applies to what Bob was invited to.  If rejected, Bob won't get added to the space/page, and they can't be invited to that again, but you can invite Bob to another page, or even add Bob to the space and/or page without the invite.

Like frederic_vu likes this
frederic_vu September 23, 2021

thank your very much for this clear and precise answer ! :-)

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events