Problem

Confluence is configured to run with -Dupm.pac.disable=true as per the Recognized System Properties

upm.pac.disable

Universal Plugin Manager 1.5

When this property is set to true, then UPM will not try to access the The Atlassian Marketplace. This is useful for application servers that do not have access to the Internet. See the UPM documentation.

But this setting can be overwritten through the Confluence User Interface by access to the UPM Settings and Confluence will connect to the MarketPlace.

Environment

Reproduced in Confluence version 7.4.x and 7.6.x and/or using UPM version 4.0.17

Steps to Reproduce

• Configure the Confluence JVM to run with -Dupm.pac.disable=true
  • This will disable the Connect to the Atlassian Marketplace checkbox in the UPM Settings
• Tick back the Connect to the Atlassian Marketplace checkbox.

Expected Results

Confluence should not be able to call the Marketplace when -Dupm.pac.disable=true is set, regardless of UI settings. It should be a hard stop for all calls.

Actual Results

Confluence is able to call the MarketPlace even when -Dupm.pac.disable=true is set, by tweaking the UI.

Workaround

Keep the UI UPM setting Connect to the Atlassian Marketplace disabled at all time

Notes

Recording attached with how the issue was reproduced locally