Every page can be open to everyone or kept for signed-in users, for users with specific tags, or for admins.
Open Pages, then choose Security in a page's row menu. Under Role-Based Access, tick who may open the page.
Public (Unauthenticated)
Anyone, signed in or not. When this is ticked, the other choices make no difference.
Authenticated User
Visitors who are signed in to your site, optionally only those with certain tags.
SysAdmin
Administrators signed in to your admin panel in the same browser.
A visitor needs to match only one ticked role. A page with no role ticked is treated as public.
To keep a page for signed-in users, change its rules on the Security screen.
1
Untick Public (Unauthenticated)
Otherwise the page stays open to everyone.
2
Tick Authenticated User
Now only signed-in users can open it.
3
Optionally choose tags
In Required User Tags (Optional), pick tags. A user then needs at least one of them, and it must not have expired.
4
Click Save Security Rules
The rules apply straight away.
A visitor without access is redirected to the Unauthorized Fallback Page. Set it in Users and leads, Users Onboarding, under Authentication Page Routing. Your login page is a good choice. If none is set, visitors are sent to your home page.
If your onboarding settings ask users for details they have not given yet, a signed-in user may be sent to your profile completion page first.
A few points to check when you make a page private.
To hide one part of a page rather than the whole page, use Show this section to under Visibility Conditions in the section settings, or Show this element to on an element.
Turn on No Index in a private page's metadata, so it is left out of your sitemap and search engines.
Test the page in a private browser window, signed out and then signed in as a test user.
