Setting Custom Authorization

When you select Custom authorization, you get a great deal of flexibility in controlling access to your site. Not only can you control who has access to top level resources, like folders and pages, but you can also set access at the individual resource level.

Required Editions

Available in: Salesforce Classic
Available in: Enterprise, Performance, Unlimited, and Developer Editions
User Permissions Needed
To manage authorization: You must be an administrative user on the site

Using Custom authorization at the folder level is a great way to make a large number of resources private without having to mark them individually. Let’s say you periodically run sale offers for your paid users. If you drag all the sale pages into a special folder you mark for authorization, they instantly inherit the folder’s setting. Users will need to log in to access them. Plus, if you decide to make one of the sale pages available to everyone, you can simply drag it back into a public folder, or to the root of the All Site Content area.

  1. Open you site for editing.
  2. Click Site Configuration | Authorization.
  3. Select Custom.
  4. Click All Site Content.
  5. Create a folder to hold the private pages if it doesn’t already exist.
  6. From the folder’s Actions Actions menu, select Requires Authorization. You’ll see the lock authorization lock icon appear on the folder. It is now private.
  7. Drag any pages you want to make private into the folder. A lock authorization lock icon appears on them too.
Example
Example Let’s take another example. If you have a page that you’d like to keep private no matter where it resides, you can set its authorization using the Actions menu. After you set it at the individual resource level, it remains private even if you drag it into a folder that isn’t set to private. In other words, an resource marked private is always private until you deselect Requires Authorization on the Actions menu.

If you check the Authorization page, you’ll see all folders and resources marked private are listed in the authorization table where you can view and delete them.