How to prevent Anonymous users from opening the Space Settings

[Manor Shaked Schlossberg]

Hi All,

Our Confluence is blocked for Anonymous users except for one Space.

When Anonymous users enter this Space, they can click the Space menu (...) and 'Space Settings'.

How can I prevent them from reaching there?

Thanks!!

[Tanya -]

Hey Manor, 

To prevent anonymous users from accessing the "Space Settings" in a Confluence space, you can adjust the permissions settings. Here are some steps you can follow:

Review Space Permissions: Ensure that the space permissions are configured to restrict anonymous access. You can do this by navigating to the space settings and checking the permissions for anonymous users. Make sure that they do not have access to administrative functions like "Space Settings".

• You can create a policy to block anonymous access to specific spaces or functionalities. This can be done by setting up a data security policy that restricts anonymous access at the space level.

Global Permissions: Check the global permissions in your Confluence instance to ensure that anonymous users are not granted unnecessary permissions. This can be done by going to the global permissions settings and reviewing the permissions granted to anonymous users.

Use Atlassian Guard: If available, use the Atlassian Guard feature to enforce stricter access controls and prevent unauthorized access to sensitive areas like "Space Settings".

By following these steps, you should be able to prevent anonymous users from the options under "Space Settings" in your Confluence space.

[Lucas Modzelewski _Lumo_]

.

[Tanya -]

Hey Team, 

Let me try and explain once again. 

I wanted to convey that the Space setting option will be available; however, it will be limited to the access of a user or an anonymous user. 

For Example : 

I accessed the same space with a user with admin access and with anonymous Access please note the difference in the options present under the space setting : 

Space setting access with anonymous access: 

Now the Access provided to the anonymous access is only View in this case: 

Further sharing the screenshot from the same space with a view an Admin will have: 

Next Step: 

Please let me know in case you have an issue with displaying the limited option that anonymous access has under space setting. 

[Kristian Klima]

@Tanya - I believe the issue that @Manor Shaked Schlossberg is pointing at is that anonymous users have access at all.

As your screenshot shows, there's still A LOT of details to be seen:

• some of the marketplace apps I have
• list of all attachments in the sapce
• names
• archive
• links to settings... that CANNOT be accessed - this is, plain and simple, redundant.

In short, anonymous users have thus access to a lot of items that reasonable admins would rather keep private.

[Kristian Klima]

HI @Manor Shaked Schlossberg 

Late to the party but there are options you might look into.

• Based on Atlassian devepoler resources, it should be possible to create your own theme - https://developer.atlassian.com/cloud/confluence/create-a-confluence-theme/
• Third-party marketplace apps that hide most/all of the Confluence UI furniture.
  • theme apps that provide a skin over your anonymously available spaces
    • Spacecraft by Seibert
    • Refined by Refined
  • apps that create a dedicated static website from Confluence content (no need to enable anonymous access. Typically, these apps allow you to control access by CSS as they are independent from Confluence permissions.
    • Scroll Viewport by K15t
    • Instant Websites by Glintech

For example, this is the public site of our product docs generated by Scroll Viewport from a private Confluence space - https://docs.emplifi.io/ 

[Lucas Modzelewski _Lumo_]

Unfortunately, this cannot be hidden.

There have been requests to change this for years, but nothing has been implemented so far (and probably won't): https://jira.atlassian.com/browse/CONFCLOUD-58921 

[Manor Shaked Schlossberg]

@Tanya - My settings are exactly how you described, but when I enter the Space as an anonymous user, I can see that the access to the settings is still available: