Why do anonymous users get user pages in quick navigation aid although they're restricted from viewing?

[Kirstin Seidel-Gebert]

In our confluence instance I restricted anonymous users from viewing user pages.

That leads to:

• user pages not being displayed in search results (which is correct)
• user pages being displayed in the quick navigation aid drop-down list (which is not correct imho)

If selecting the user page from the quick navigation aid, log-in is required.

Is it a bug, that the quick navigation aid shows user pages for anonymous users, that are restricted from viewing them?

Kirstin

[AlysonA · Accepted solution]

Kirstin,

Thanks for the clarification, I see it better now.

After researching through our knowledge base I could find an existing improvement request being tracked in CONF-23985 that once implemented will likely suit your needs. Please vote on it to increase its popularity and add yourself as a watcher for future updates.

Cheers.

[AlysonA]

Hi Kirstin,

I tried to replicate this behavior locally and here's my findings: If I give anonymous permission to view a space, they can search for all pages within that space. But if you do not give View permissions to anonymous users, they shouldn't be able to search for any pages within a given space, nor see them in the quick search field.

That being the case, can you please confirm if this is happening to all pages that should be viewable by anonymous users? If you restricted the page not long ago, please try flushing the cache in Confluence Admin > Cache Statistics and see if the problem persists.

Cheers

[Kirstin Seidel-Gebert]

Thanks for your reply, Alyson.

I'm refering to the Global Permissions for anonymous users in the confluence admin section (see pic):

I restricted anonymous users to view User Profiles, but they get users suggested in quick navigation aid (see second pic):

Is this as designed? We actually don't want someone anonymous to get to know our users.

Kirstin