Restriction of attachment downloads for anonymous users

[Karin Petzold]

Hi,

I would like to know if I can restrict the download function for attachements for anonymous users in Confluence Cloud and if yes where/how.

Thanks a lot!

Regards
Karin

[Arkadiusz Wroblewski]

Hi @Karin Petzold 

Standard Confluence permissions can't block attachment downloads while keeping the page viewable.

If you have Atlassian Guard Standard, an Org Admin can enforce a "Prevent attachment downloads" policy via admin.atlassian.com. Note that this only blocks native Atlassian download options and APIs, not browser-based saving or printing.

If the files are sensitive, the safest route is to restrict page access completely.

Here some information https://support.atlassian.com/security-and-access-policies/docs/prevent-attachment-downloads/ 

Best,

Arek🤠

[Kris Klima _K15t_]

Hi @Karin Petzold 

I don't think this is possible.

However.... 

There is a workaround to hide the attachments with Synced Block or Excerp/Insert Excerpt macros.

Say that your space A is open to anonymous access. Place any sensitive attachment into its own excerpt/sync block on a page in space B which doesn't have anonymous access enabled. 

In space A, use either a copy of the Synced Block or Insert Excerpt. The content in those macros will inherit permissions from Space B, so the attachements will not be visible to anonymous users of space A.

One more thing about anonymous access - it's not without risks and people are usually surprised just how much data and info it can reveal about a Confluence space. I wrote an education blog post on the topic of risks of anonymous access in Confluence just a month ago.