How to grant access for one space only

[Feng Linjie]

We are using confluence server. with version V6.2.4

We do totally the same as:

https://confluence.atlassian.com/confkb/how-to-grant-access-to-one-space-only-to-a-user-in-confluence-815244321.html

We did add both created group and individual user to target space. after all we see the created local user have no permission to any space.  The setting is not taking effort. but why...?

[Moses Thomas · Accepted solution]

@Feng Linjie

• Please very  your global permission  make sure that  groups  are  able to  use confluence see  here  https://confluence.atlassian.com/conf63/global-permissions-overview-929729579.html
• Check  space restriction  please see article here  https://confluence.atlassian.com/doc/page-restrictions-139414.html

Best!

[Feng Linjie]

Hi @Moses Thomas

Thanks for feedback, but we won't let this group have global permission. and it is not a restriction related issue.

[Grigory Salnikov]

Ah, you seem to mix up something. According to this article

This is the most basic permission that allows users to access the site.

In other words, without this permission, the user cannot use the Confluence at all.

And that seems to be the point here.

[Grigory Salnikov]

Small addition.

Granting a user "can use" global permission doesn't mean that you grant him any administrative rights.

[Moses Thomas]

@Feng LinjieIf you  don't give  user or group access  to be able to  use  confluence then  he cannot even log in,  talk  less of seeing  the space  regardless you have giving this group permission  in space to  see the space and next is to  check  restriction. So  you  need to check  global  permission, group must  have access to  confluence( which will count to  your license) .

After doing  this you  should be fine.  Read  documentation  and understand  how global  permission  works!

best!

[Feng Linjie]

Hello, @Grigory Salnikov@Moses Thomas

Thanks for answering

Maybe I'm wrong, but if I add group to "can use" the group is having access to whole wiki. which is not what we want...

[Feng Linjie]

[Grigory Salnikov]

In some sense, yes, this permission grants access to wiki, but unless you specify the group on the space level permission, its members should have no access to the space.

I suggest you try and see what happens.

[Moses Thomas]

Strongly  agree with  Greg if you  don't add group in  the default space permission   and you did not give access to  individual  spaces ,  they  cannot  see other spaces  impossible.

[Feng Linjie]

Hello

Did you see my screenshot? I give "fordeleteme" "can use" permission on site level, give it read permission to one space, then I login to wiki, see actually the functional account able to see the whole wiki site. which is not correct.

Tell me if I didn't tell the fact correctly.

Many thanks!

[Feng Linjie]

Sorry, I think I found the root cause. I was not aware so many space owners set their spaces with “anonymous access”. which puzzled me.

Now issue fixed, many thanks.

[Moses Thomas]

@Feng LinjieYou  are welcome,  could you mark  solution as resolve so  other who fall  in the same situation will  use  solution.

Best!

[Feng Linjie]

Excuse me, can you please give me some hint how to "resolve" this question...

[Moses Thomas]

@Feng LinjieYou  will  see "accept solution button" at your question!

[Nic Brough -Adaptavist-]

You already have - there's a grey tick next to each answer which turns green when clicked to say "this is a useful answer". 

[Feng Linjie]

great, thanks guys! I feel so satisfied with atlassian communication!

[Grigory Salnikov · Accepted solution]

Hi!

Can you please, be more specific and provide more information:

1. How can you tell that the user doesn't have permission to any space?

(btw., have you checked "Space directory"?)

2. Can you show space permissions (e.g. as a screenshot)?

3. ... and group membership

Thank you in advance.

[Feng Linjie]

Hi

We did the following:

1. create a new account

2. remove it from confluence-users group

3. create a new group and add the account inside the group

4. give both group and account read permission to one space

5. login with this user, find no permission

[Grigory Salnikov]

Then, as @Moses Thomas has suggested, make sure that this group also has "can use" global permission":

[Feng Linjie]

No, it should not be can use on global level, otherwise it will have permission to all spaces.

[Grigory Salnikov]

No, unless you add this group specifically in the space permissions.