Prevent Anonymous Users from creating pages

[Brian Frampton]

Is there a way that I can prevent an anonymous user from creating content?  I have the global permissions and space permissions set to only view.  However, when an anonymous user clicks the create button, they can create a page.  I would like to use my space as a Knowledgebase for my domain users, but I don't want them creating documents.

[Abhishek_Sikka]

Spent more than half my day trying to solve this. Finally found the solution in an old 2013 post

Just delete the default space that gets created when you install Confluence. The Create button disappears magically for anonymous users! 

[Juan José Marchal Gómez]

Yes, If you have properly configured the permissions of Anonymous.

The problem is Demo Space.

Remove it and the button create will hidden.

Best regards.

[Nic Brough -Adaptavist-]

Yes, check the space permissions and make sure "anonymous" has no rights other than "read".

If you think you've done that, then we're going to need to see the permissions for a space where you think anonymous users can post.

[Brian Frampton]

I have double checked the permissions.  Screenshots below of the global permissions and the space permissions.

[Nic Brough -Adaptavist-]

Ok, looks good, can you show us all the permissions for the space (fuzz over any user names that might be in there, and parts of group names, if you have any security worries.  We only need the full list and an idea of the rules about who can do what, not which <identifiable person> can do what)

[Brian Frampton]

Thanks for looking at this.  Screengrab below of all space permissions.

[Nic Brough -Adaptavist-]

Nope, you're absolutely right, anonymous access is not working correctly here.

Only one nagging doubt here before we yell for Atlassian.  When I say "anonymous", I mean "someone who has not logged in to your Confluence".

Is that the case?  You've got a session in a browser where you have clicked "log out", or fired it up and never logged in, and you can still create and edit pages?

[Brian Frampton]

Hey Nic-  Yes that's correct.   To verify this thoroughly,  i tested this by building in IE and viewing in chrome (also never logged into Confluence on Chrome).  Hosting Confluence on a VM and i was not logged in on the host, and was still able to create.  Do you know if anyone else has reported this? 

[Przemysław Snowacki]

I have the same issue... any updates on it?

[Brian Frampton]

I found that the one job i work for has their production version at 6.4 and it works....IF I turn on anonymous access in the global. Then in the space, turn it on for view only, SAVE then turn it off. Save and then turn it back on.  To me it sounds like a bug, but it works right now, and i'm not going to touch it.

[ccooveb]

I ran into this 5-year old question trying to solve this same issue and deleting the Default Space (as suggested by the top answer) did indeed remove the "Create" button.

[Gerald MURIEL]

Hi all, I am on the same boat after upgrading to 6.10.0. Anonymous is on read only mode and everyday I get 1 created page.

[Jim Butler]

 We are at 7.13.7, and what I did was to log out of confluence and I found that the spaces i could see/write to as anonymous were the ones I needed to lock down, so I logged in, and navigated to General configuration ==> Space Permissions on each of the ones i could see when i was not logged in and corrected the anonymous user.  (I used Snip to pull a mini screenshot of the choices I had) and that cleared the issue for me.