In addition to the anonymous-users group, Confluence can export anonymous access using SpacePermission objects that refer to no group or user at all. I suspect this is a difference between confluence cloud and confluence server, where the anonymous-users group is used by Confluence Cloud (in the allUsersSubject property), and "empty" permissions are used by Confluence Server. |