# User group permission to view specific pages

**URL:** <https://discourse.cakephp.org/t/user-group-permission-to-view-specific-pages/6878>\
**Category:** Need Help\
**Created:** [November 13, 2019, 4:32pm UTC](https://discourse.cakephp.org/t/user-group-permission-to-view-specific-pages/6878 "2019-11-13T16:32:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![saulimabr](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/saulimabr/32/1512_2.png) [@saulimabr](https://discourse.cakephp.org/u/saulimabr)\
**Post date:** [November 13, 2019, 4:32pm UTC](https://discourse.cakephp.org/t/user-group-permission-to-view-specific-pages/6878/1 "2019-11-13T16:32:41Z")

</div>

I have a site with user authentication. Ever user is member of a group admin or site. I need to deny access to users of site group to specific pages of my site. Example: site users can’t access configuration page, only member of admin group can do this.  
All authentication is implemented and I need only restrict this access to specifc pages.

---

<div class="post-metadata">

**Author:** ![Progredi](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/progredi/32/1768_2.png) [@Progredi](https://discourse.cakephp.org/u/Progredi)\
**Post date:** [November 14, 2019, 1:01am UTC](https://discourse.cakephp.org/t/user-group-permission-to-view-specific-pages/6878/2 "2019-11-14T01:01:51Z")

</div>

Have a look at CakePHP action-control lists.

Here on Github :

> **[cakephp/acl](https://github.com/cakephp/acl)**
>
> Plugin for managing ACL in CakePHP applications. Contribute to cakephp/acl development by creating an account on GitHub.

And some extra reading on understanding how ACLs works here :

[https://book.cakephp.org/2/en/core-libraries/components/access-control-lists.html](https://book.cakephp.org/2/en/core-libraries/components/access-control-lists.html)

---

<div class="post-metadata">

**Author:** ![samuk190](https://yyz1.discourse-cdn.com/flex029/user_avatar/discourse.cakephp.org/samuk190/32/1593_2.png) [@samuk190](https://discourse.cakephp.org/u/samuk190)\
**Post date:** [November 22, 2019, 1:08pm UTC](https://discourse.cakephp.org/t/user-group-permission-to-view-specific-pages/6878/3 "2019-11-22T13:08:08Z")

</div>

You can do that by using modules or restricting in routes.  
The way I’m using is restricting the access to users who don’t have permission in database  
Modules(pages)  
if the user doesnt have config permission, it won’t show config page on the menu  
Modules.action (actions) if user dont have config.apply the user can’t apply config