Confluence Space ReadOnly permission

[DerivcoITServer]

How do we go about giving read only permission to spaces to confluence groups?

In the space permissions we enable only the View permission, but this means read and write permission to existing content, if there are no page restrictions.

To allow read only permission we need to go to the highest page level on the space and enable edit restricts, so that Everyone that has access to the space can view but only specific users/groups can edit. Pages lower in the page tree inherit this permission.

Is there no other way to do this?

[Nic Brough -Adaptavist-]

>In the space permissions we enable only the View permission, but this means read and write permission to existing content

No, that statement is incorrect.  View and add/edit are separate permissions.

[DerivcoITServer]

Thanks for this clarification.

It seems like the Anonymous permission set was coming through.

Example: Only User A has full permission to a space. User B has no permission to the space, but is a logged in user.  Anonymous permission was set to View and Add Pages for the space.

Anonymous permission is disabled in the global permission.  The following message is displayed in the space permissions. "Anonymous users can't view this space because global anonymous 'Use Confluence' permission is currently turned off."

User B got there permission from the Anonymous section therefore they could still edit. Is this correct? 

[Nic Brough -Adaptavist-]

You should never set anonymous access for anything other than read.  Anonymous writes open you up to all sorts of untraceable problems.

User B did not get permissions from the anonymous section.  They can't because you've disabled it.

[Avinash Singh]

Thanks. The problem is that users can create their own spaces with their own permissions so they can easily give anonymous users greater privileges. 

I have confirmed that User B that has no direct access to the space by group or user permission and is getting its edit permission from the Anonymous user permission.  Im using confluence version 6.0.2.

[Nic Brough -Adaptavist-]

Right, so educate your users not to use anonymous permissions.  And then understand that view and create/edit are separate.

[Avinash Singh]

Yes we understand that view and add/edit are separate now. The anonymous permissions created the confusion.