Guest access to Forge apps

Question

How do I allow access to Forge apps installed in Confluence (byline app, for example) to Guest or Unlicensed users. With default settings in manifest.yml, a simple HelloWorld macro or byline app will not display for Guest users.

Several 3rd party apps from the Marketplace do display for Guest and Unlicensed users so it seems it must be possible.

Thank you for any suggestion or guidance you can provide.

Kristian Klima_gtcuat · Answer

Oh, you're looking at this from a developer's perspective...

jpswan · Answer

Thanks for your response. My little HelloWorld macro app only inserts "Hello World," so no permissions are needed. My little HelloWorld byline app only has a viewport with "HelloWorld," and also no permissions. Neither app requests any scopes from Confluence, it is rally the bare minimum.

My question is, what did you do in your configuration (manifest.yml) or code (index.jsx) that allows Guest users to see the macro or byline app? Or, maybe it is a setting in Confluence itself. Apps are deployed to production with sharing enabled.

Kristian Klima_gtcuat · Answer

Hi @jpswan

It depends because not all apps are created equal.

Speaking from experience, it depends what resources a given app uses - in terms of permissions. Sure, you can tweak some permissions and guests can do a lot. But there are limits that appear to be beyond the obvious.

For example.

In my setup, I have a workflow app that triggers a publishing app.

A guest user can change the page's status. However, the publishing app reports an error because a guest can only access ONE space. However, by triggering the publishing app, they'd be effecting changes in a (target) space to which they don't have access.

Regular users, however, can trigger the whole process and the publishing happens even though they have read only access in the target space.