We are a very secure company. It worries us that users can set their personal spaces to be viewed by literally anyone. Can we restrict that ability without having to remove anonymous access to Confluence entirely?
I don't believe this is possible through configuration - as you have probably already found, a user always has full space permissions in their personal space, even if you try to remove them.
However, if you are using Confluence server, you could try adding some javascript to the Custom HTML option in Confluence administration that hides the Anonymous Access permissions table when ever someone tries to edit the space permissions in a personal space.
This wouldn't remove the functionality, but would make it harder to change.
It is NOT a secure solution, but it helps to hide "Anonymous Access" settings from users.
Add this script to the Custom HTML "At end of the HEAD" section:
<script>AJS.toInit(function ($){ AJS.$("#aPermissionsTable input").attr('checked', false); AJS.$("#aPermissionsTable").hide(); });</script>
Maybe more of a question - why would you have anonymous on as being a secure company? My presumption reading that would be that you'd force logins.
I have seen companies setup a separate confluence instance for anonymous to ensure there is no bleed from their secure instance. Perhaps that might be a strategy to adopt in your case. Then you could use Comala Remote Publishing to sync anything you need in both spaces.
Because some small parts of the system are not secure. NOT the personal pages
Separate Confluence means many more dolla dolla bills, y'all.
Sometimes I feel like Atlassian assumes we all have bottomless pockets.
Depends on how you setup the other instance. You need licenses for people to do things, not for anonymous people to read things.
Price for security at hand these days - separate instance - firewalled completely off, 100%.. take the small licensing fee vs the large exposure.
Manage the risk.
@Gregory Van Den Ham exactly - risk isn't absolute.
@Rob Horan have you checked Atlassian's JIRA to see if anyone has raised this as an enhancement before? And if not, have you requested it?
To limit to personal spaces, you could also add a check to see if there is an ~ in the space name.
It looks like you're new here. Sign in or register to get started.
