Users can view a space regardless of its permissions
Platform Notice: Cloud - This article applies to Atlassian products on the cloud platform.
Summary
Although the permissions of space have specific groups and individual users added to it, all Confluence users are able to navigate through its pages, even though they are not added to permissions.
Diagnosis
Check if the space does not have anonymous access enabled through the following steps:
- Go to the Confluence administration (cog icon at the top right)
- Click on the Security panel
- Select Global Permissions (i.e. https://<your-site-name>.atlassian.net/wiki/admin/permissions/global?tab=anonymous)
Cause
Even though the global permission does not have anonymous access enabled, if a space is open for anonymous access, all users will be able to view it, despise its current permissions. This happens because it is a permission that would allow everyone to view the space.
Solution
Uncheck any Anonymous checkboxes under the space permissions:
- As a space admin, go to the space and tap Space settings on the sidebar.
- Select the Permissions tab and then, Edit permissions
- Uncheck all the checkboxes under the Anonymous Access tab.
- Confirm the changes by tapping Save all