Submit Feedback

Updating Page Permissions

By default, when users join a site, they can see all of its pages. However, you can configure permissions for individual pages to restrict access based on user roles.

Note

Individual page permissions take priority over site-level configurations.

Important

When configuring page and display page template permissions, a page may be accessible to users, but its content may remain restricted. For example, users with the View permission can open the page but cannot see certain content unless they also have permission to view the applications or content on the page.

If a user lacks permission to view the page, Liferay returns a 404 (Not Found) error instead of a 401 (Unauthorized) response, preventing URL enumeration of inaccessible pages.

Open the Site Menu () and navigate to Site Builder → Pages.
Next to a page, click Actions () → Permissions (1).

Alternatively, while editing a page, at the top right corner of the page click Options () → Permissions (2).

Liferay DXP 2024.Q3+/Portal GA125+ Or select the checkbox next to the page(s) (see permissions in bulk) and click Permissions at the top options bar (3).
Select the permissions you need for your roles. See Page Permissions Reference to learn more about each permission.
Click Save to apply the changes.

Copying a Page with Permissions

Open the Site Menu () and select Site Builder → Pages.
Click Actions () for the desired page and select Copy → Page With Permissions.
Enter a page name and click Add.

Setting Pages Permissions in Bulk

Liferay DXP 2024.Q3+/Portal GA125+

Open the Site Menu () and navigate to Site Builder → Pages.
Select the checkbox next to the pages you want to configure.
Click Permissions at the top options bar.
Update the permissions for each role. See Page Permissions Reference to learn more about each permission.

There are four available icons when setting permissions in bulk.

(1) () indicates that the permission is set in some of the selected pages, but not all of them.

Tip

Uncheck the permission to disable it on all selected pages. To enable the permission on all selected pages, uncheck and check it.

(2) () indicates that the permission is not set to any of the selected pages.

(3) () indicates that you can’t set the permission for that role.

(4) () indicates that the permission is set in all of the selected pages.
Click Save to apply the changes.

Page Permissions Reference

Here’s a list of permissions associated with pages. To learn more about DXP Roles and Permissions in general, see Roles and Permissions.

Permission	Description
Update Discussion	Edit another user’s comment on the page.
Permissions	View and modify the page’s permissions.
Update - Advanced options	Access the page element’s Advanced tab when updating a page.
Update Page Content	Update the page’s content, including text, images, and settings in the Mapping, Link, and Image Source tabs.
Customize	Customize the page.
Page Rule Builder	Use the Page Rule Builder to define rules for the page. This feature is currently under a feature flag.
Add Page	Add pages.
View	View pages.
Delete	Move the page to the Recycle Bin.
Liferay DXP 2024.Q3+/Portal GA125+ Preview Draft	Even without the Edit permission, users can preview Draft versions of the page.
Update Basic	Basic options for updating the page.
Delete Discussion	Delete any comments on page.
Configure Applications	Manage Fragments and Widgets.
Update	Update the page.
Update - Limited	Limited options for updating the page.
Add Discussion	Comment on the page.

Page Permissions After Liferay DXP 2025.Q2

Breaking Change Liferay DXP 2025.Q2+/Portal GA135+

Starting in Liferay DXP 2025.Q2+/Portal GA135+, the way page permissions are inherited has changed, affecting both VIEW and all other permissions when the permissions.view.dynamic.inheritance portal property is set to true (the default). Installations with this property set to false retain the previous behavior and are not affected.

VIEW permission is now inherited hierarchically and restrictively: users must have VIEW permission on the page and all of its ancestor pages to access it.

All other permissions (UPDATE, DELETE, etc.) are no longer inherited from parent pages. You must assign them explicitly on each page where a user or role needs them.

Previously, inheritance was permissive: if users had a permission (such as UPDATE) on a parent page, they received the same permission on all child pages automatically.

(Action Required)

After upgrading, check your permissions.view.dynamic.inheritance setting:

If set to true (default), review and update your page permissions configurations:

Ensure VIEW is granted explicitly on every level of the page hierarchy.
Assign non-VIEW permissions directly on each page where they’re required.

If you want to maintain the previous permissive inheritance behavior, set the property to false.

Update Permissions Reference

Users need different permissions based on their roles to manage the site’s look and feel while maintaining branding and style.

For example, designers have full control over layout and style editing, best achieved with Update permissions. Conversely, content creators focus on adding content and mapping fields to page elements, which can be accomplished with Update Page Content permissions.

Liferay provides four update permissions for pages. Each grants users different sets of permissions:

Update: The most comprehensive of the four permissions.

Users can edit the page’s layout and style completely. This permission is intended for designers, who are responsible for editing and styling the entire page.

All features added to the page editor are enabled by default for this permission.

The other update permissions are irrelevant once this one is granted since it encompasses the others.

Update - Limited: Users have limited access to editing fragment styles.

Users can edit fragment styles only inside the brand/style book limits. This permission is intended for page builders, who adjust styles while building pages.

Page Element	Available Actions
Fragments	Available: Drag and drop.
General Tab - Container and Grid fragments	Available: Container, Frame, Overflow, and Hide Fragment options.
General Tab - other fragments	Available: Overflow and Hide Fragment options.
Styles Tab	Not available: Decoupling from tokens.
Advanced Tab (`Update - Advanced Options` permission needed)	Available: Advanced configurations. Not Available: Custom CSS.

Update - Basic: Users can perform basic actions while updating the page.

Users can update the page layout and drag and drop new fragments, but they can’t change all options in the page element’s Styles tab.

Page Element	Available Actions
Fragments	Available: Drag and drop.
General Tab - Container and Grid fragments	Available: Container, Frame, Overflow, and Hide Fragment options.
General Tab - other fragments	Available: Overflow and Hide Fragment options.
Styles Tab - Container and Grid fragments	Available: Edit Spacing options.
Styles Tab - other fragments	Not Available.
Advanced Tab (`Update - Advanced Options` permission needed)	Available: Advanced configurations. Not Available: Custom CSS.

Note

Users with Update - Limited and Update - Basic permissions can use the Configure Page () option (in the page’s top right corner) to adjust general settings, SEO, custom meta tags, Open Graph, and other design-related settings.