Anonymous concerns.

Question

We need to grant Anonymous access to the Internet for one of our Confluence Spaces.

Global setting for Anonymous is currently turned off.

I note with concern that Spaces allow the setting of Anonymous access, even with Global Anonymous access turned off.  (Yes I know that it's not accessible, but nontheless, the permission can be set).

I am concerned if we enable access for Anonymous, a whole bunch of other Spaces may become available.

How can we get a report/find out, what, if any Spaces currently have Anonymous access enabled before we enable the Global setting for Anonymous access to ensure we don't get unwanted data leakage?  (This is Cloud hosted Atlassian instance).

Trudy P Claspill · Answer

@Dave Mathijs

The article you linked for getting a list of spaces that are accessible by anonymous users pertains only to self-hosted Confluence. The OP is using Confluence Cloud.

@Simon Shaw

There is a REST API for getting a list of all the spaces, but it does not include the permissions for each space and you can apply a filter to get only the spaces where Anonymous access has been granted.

https://developer.atlassian.com/cloud/confluence/rest/v2/api-group-space/#api-spaces-get

You can add your vote to the open change request about providing a method to get a list of spaces with Anonymous access.

https://jira.atlassian.com/browse/CONFCLOUD-73169

Dave Mathijs · Answer

Hi @Simon Shaw , have you read the documentation articles about anonymous access?

* Share your site externally with anonymous access.
* Share a space externally with anonymous access

"Although space permissions can be granted to anonymous users at any time, anonymous access must be enabled at the site level for anonymous users to successfully access the space."

Space Admins needs to be (made) aware of enabling anonymous access for their space.

How to get a list of spaces that are accessible by anonymous users