# How to protect the test site with PIN or password=

**URL:** <https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669>\
**Category:** Questions\
**Tags:** litium-8\
**Created:** [September 6, 2022, 11:02am UTC](https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669 "2022-09-06T11:02:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tobbelobbe](https://avatars.discourse-cdn.com/v4/letter/t/9d8465/32.png) [@tobbelobbe](https://forum.litium.com/u/tobbelobbe)\
**Post date:** [September 6, 2022, 11:02am UTC](https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669/1 "2022-09-06T11:02:53Z")

</div>

My customer is in development mode and they are using [https://CUSTOMER.test.litium.site/](https://CUSTOMER.test.litium.site/).

It is currently totally open to the outside world, which is a problem.

How do you normally protect a Litium web site in development? By a simple PIN or full login? Is there a standard? Anything built in?

Litium version: 8

---

<div class="post-metadata">

**Author:** ![Spotonkastebo](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/spotonkastebo/32/717_2.png) [@Spotonkastebo](https://forum.litium.com/u/Spotonkastebo)\
**Post date:** [September 6, 2022, 11:35am UTC](https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669/2 "2022-09-06T11:35:34Z")

</div>

you can to some extent use litiums build in permissions to say the you need to be part of a group to view a specific page. login page need to be open to anyone in that case.

---

<div class="post-metadata">

**Author:** ![Martin.Brandt](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.litium.com/martin.brandt/32/974_2.png) [@Martin.Brandt](https://forum.litium.com/u/Martin.Brandt)\
**Post date:** [September 7, 2022, 12:50pm UTC](https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669/3 "2022-09-07T12:50:46Z")

</div>

We have used the same thing that Jonas Kastebo above says, we’ve locked down all pages so they require a group permission.

Do note: if you set permissions on startpage, and select that all subpages should have same permissions, you will break order confirmation emails or other emails. Litium calls iteself to get html email content, those pages can not be locked down 🙂

You might also run in to this: if you have a search field in the header, you will still be able to search for products for example, if you don’t have permissions set on those, or disable the search if user is not logged in etc…

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex030/uploads/litium/original/1X/12eddac3b8b661de1db86af10ac8151b571e6fb9.png) [@system](https://forum.litium.com/u/system)\
**Post date:** [October 5, 2022, 12:51pm UTC](https://forum.litium.com/t/how-to-protect-the-test-site-with-pin-or-password/2669/4 "2022-10-05T12:51:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.