If active, the SubSpace navigation is always displayed - regardless of the current space or the login state of the user.
The only exception is the Administration.
Visibility of Navigation Elements
Permissions are handled as follows by the SubSpace Navigation:
Permissions will be checked for internal links (pages and blog posts) and spaces. If the current user is not allowed to see a navigation element, it will not be displayed in the navigation.
If a navigation element is not displayed for the user, any element below it in the hierarchy will not be visible either.
This does not have any effect on the content the user is allowed to see in Confluence. Even if a child element is not displayed to the user, as long as they are allowed to access that page/space, they can still view it, e.g. using the Confluence search.
Folders, external links and CQL are usually displayed (the exception being restricted parent elements). This is also the case for anonymous users.