This issue has been identified about 2 Months back This issue always occurs Everyone can access the

[Joseph Devassy]

Hi Team,

The User manuals for our product Phoenix are stored on Confluence.

These User manuals are confidential learning material for Phoenix users only and should be accessed only by Shipco, Scan-Shipping and Strait Air employees.

But currently there is no validation in place and if we paste the URL on the IE, anybody can access the manuals.

We nned to urgently address this issue to ensure that only valid Phoenix users are able to access the manuals when they click on the link from Phoenix and that this should not be open to public viewing on the internet.

[Cristian Rosas [Tecnofor]]

Hi Joseph,

Please, take a look at this and tell us if you can't do it yet:

https://confluence.atlassian.com/doc/permissions-and-restrictions-139557.html

[Nic Brough -Adaptavist-]

This doc tells you how to work with permissions, but does not explain them for your situation.

The missing bit is that you have set up your Confluence to allow everyone access to your spaces.  You should follow the doc to fix it, but your aim should be to "remove the access for everyone, while adding back in the internal users or groups that still need access"

[Joseph Devassy]

Hi Cristian, Nic,

Thank you for the replies.

But we have around 2000 users who should be allowed access to the manuals. Is there any way that we can give so many users access in one go. Giving individual permissions will be a huge task.

[Nic Brough -Adaptavist-]

No, you need to do the full set of revisions.  But you can use groups to allow large batches of users in.

[Joseph Devassy]

Hi Nick,

Can you please help me with the steps to ensure the full set of revisions and the steps to add the large group of users.

Regards,

Joseph

[Nic Brough -Adaptavist-]

You'll need to examine each permission scheme to see what the rules are.

Then check the membership of each project is correct, removing the unwanted access and replacing it with users and groups as appropriate.