nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to grant anonymous access only to a single PAGE in Confluence?

Matt Holmes2

Our development team is using Confluence for release notes, bugs, and other documented changes. For some of these pages we want to be able to send an URL to people outside the company without having them log in to see them. We do not want to open the entire space to anonymous, for obvious reasons, and if we have to add a username/login that changes how we interact with those who are gaining access.

Short of creating an entirely seperate space for "public documents" and re-creating the individual hierarchies of our Confluence spaces, I can't figure out how to simply grant access to a single page to anonymous.

Is there any way of doing this? Is there some other way of achieving this goal?

Thanks in advance!

Accepted answers

Gorka Puente {Appfire}

Hi @Matt Holmes,

We've just released the new version of Share It (former Share Attachments and Pages), which allows you send individual pages without giving access to the rest of your Confluence instance.

Check it out and send us feedback!

Cheers,

Gorka

All comments

fcukinyahoo

Go to

Browse -> Confluence Admin -> Global Permissions -> "Enable Anonymous Access"

then under the Global Permissions Link click,

Space Permissions -> "Manage Permissions" (on the space that you wanna give access to) -> "Anonymous Users" Edit Permissions -> Click the check box under "View"

That enables everybody to View (only) for the spaces that you chose.

Then you can edit each page individually to give access to view or not.

Amalia

Confluence has a 3-level of permissions: Global, Space, and Page. In order for anonymous users to view a page, they need to have a VIEW permission in the space level. Page restrictions are unique, in a way that, if a page has its 'View' restriction set, that restriction will be inherited by all its children (and their children, and so on).

One option to grant anonymous access is to create a root page with 2 children page: Page A and Page B. Page A is only accessible by registered users. this includes its children pages. Page B can be accessible by anyone including anonymous users. All children pages of Page B are automatically set to be viewed by anonymous, since the restrictions are not applied for Page B.

More info: https://confluence.atlassian.com/display/DOC/Page+Restrictions

RianA

It's a little hard to achieve that. But you can set the whole space to anonymous access, and restrict other pages except this page, and this page will have anonymous access.

Matt Holmes2

Thank you for your reply!

This is what I figured, however my concern is with multiple contributors to Confluence, it's possible someone will forget to take the extra step to "restrict view to Confluence-Users" and leave confidential information open to the internet. Is there a way to set the default for all spaces and pages to restrict view to confluence-users so that there has to be a manual decision to remove that restriction?

Matt Holmes2

Thank you for your reply!

Matt Holmes2

Thank you for your reply!

Matt Holmes2

I misunderstood this until I tested it out. Because page restrictions are solely based on authenticated users/groups, there's no way to easily manage anonymous access. If I set restrictions to confluence-users for ALL spaces, no page will ever be accessable by anonymous users - because I can't set page restrictions permissions on a per-page basis (aka have them NOT inherit permissions.) Any thoughts on what we could do to allow access in this way?

I was thinking of maybe setting up a user that's blank, or something like "publicuser" with no password, but that makes all of my admin molicules sting with pain.

Matt Holmes2

I was thinking of maybe setting up a user that's blank, or something like "publicuser" with no password, but that makes all of my admin molicules sting with pain.

Matt Holmes2

I was thinking of maybe setting up a user that's blank, or something like "publicuser" with no password, but that makes all of my admin molicules sting with pain.

Stuart French1

I have to say, even for normal users (not anonymous) this is a terrible solution.

For a space with a thousand of pages, I have to grant full access and then restrict 999 of them. Really???

You other option, drag the page out of it's natural position so anonymous can see it. Not good either. both rely on power users of the space always remembering to do the right thing in the future, long after this change was made or risk a security breach.

The ability to allow a single user access to or editing ability of a single page (ie: granted rights instead of just restrictive rights) would be a great option moving forward.

Kyle Harrison2

+1 for this. Has a JIRA been raised for this feature?

Gorka Puente {Appfire}

Hi @Matt Holmes,

We've just released the new version of Share It (former Share Attachments and Pages), which allows you send individual pages without giving access to the rest of your Confluence instance.

Check it out and send us feedback!

Cheers,

Gorka

Leos Leos

+1. We want to share release related information to anyone with confluence access but the space has restrictions for view. So we could either grant access to space to everyone and then set permissions for every other page or move this part to different space :-(

Gorka Puente {Appfire}

Hi Leos, Our add-on Share it allows you to share only one page without giving access to the remaining pages on the space https://marketplace.atlassian.com/plugins/com.keinoby.confluence.plugins.share-attachments Give it a try a let me know what do you think. Cheers, Gorka

Zoltán Lehóczky

Exactly this is sadly not possible, but opened issue: https://jira.atlassian.com/browse/CONF-37884

Hailin Zhang

Here is the master page of this request: https://jira.atlassian.com/browse/CONF-7089

Smita Ninad Kelkar

wish to know when we say Anonymous , does the user still have to be confluence user . in the sense , if I have licensed 100 users which are my Active directory users and I wish to permit another 10 in the intranet to see some pages .. can we do that, how?