# Application security and page visibility

**URL:** <https://forum.bubble.io/t/application-security-and-page-visibility/91416>\
**Category:** Questions\
**Created:** [May 12, 2020, 8:15pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416 "2020-05-12T20:15:22Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![nfish](https://avatars.discourse-cdn.com/v4/letter/n/f14d63/32.png) [@nfish](https://forum.bubble.io/u/nfish)\
**Post date:** [May 12, 2020, 8:15pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/1 "2020-05-12T20:15:22Z")

</div>

I have been wondering ever since I started to build my latest app on bubble, what is the official way of locking down the pages of your app so pages can truly be private for non users. I cant see why there isn’t a better way than having to initially load the page before a check can be done in the workflow.

I am aware of the work around that can be used for this use case, however these are indeed work arounds that accomplish it, however it would make sense that a specific workflow be run to check if a page should be in much the same way that privacy allows database level security.

---

<div class="post-metadata">

**Author:** ![jroberts](https://avatars.discourse-cdn.com/v4/letter/j/b782af/32.png) [@jroberts](https://forum.bubble.io/u/jroberts)\
**Post date:** [May 20, 2020, 4:38pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/2 "2020-05-20T16:38:35Z")

</div>

Bump…  
I’m looking for the same. When I’m using an on page load action to redirect on certain conditions but the original url page is fully loaded before the redirection. This means I need to hide all elements by default to prevent a bad user experience.  
It would be great if there was on on-request event that could be used.

---

<div class="post-metadata">

**Author:** ![nfish](https://avatars.discourse-cdn.com/v4/letter/n/f14d63/32.png) [@nfish](https://forum.bubble.io/u/nfish)\
**Post date:** [May 23, 2020, 10:32pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/3 "2020-05-23T22:32:15Z")

</div>

It seems like such a botch fix, for such a fundamental feature of any web application.

---

<div class="post-metadata">

**Author:** ![buckman](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/buckman/32/76754_2.png) [@buckman](https://forum.bubble.io/u/buckman)\
**Post date:** [November 10, 2020, 7:07pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/4 "2020-11-10T19:07:47Z")

</div>

Was there ever a solution on this?

---

<div class="post-metadata">

**Author:** ![johnny](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/johnny/32/203020_2.png) [@johnny](https://forum.bubble.io/u/johnny)\
**Post date:** [November 10, 2020, 8:32pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/5 "2020-11-10T20:32:45Z")

</div>

No, there isn’t a built-in way. Bubble does the same thing, just on page load, does a check: For example, checking if the user is logged in and if they are not, being redirected to another page with a workflow action.

---

<div class="post-metadata">

**Author:** ![buckman](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/buckman/32/76754_2.png) [@buckman](https://forum.bubble.io/u/buckman)\
**Post date:** [November 10, 2020, 8:35pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/6 "2020-11-10T20:35:22Z")

</div>

Okay…I resorted to putting everything in a group and making the group hidden unless the user was logged in. That combined with the data security sounds like the right way to do this then 🙂 Yes?

Thanks. I like what I’m seeing so far…just these concepts that are bubble specific that need to be under my belt. I’ve developed systems for 35 years…I’m liking this so far. I just need to quit over-thinking it. 🙂

---

<div class="post-metadata">

**Author:** ![johnny](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/johnny/32/203020_2.png) [@johnny](https://forum.bubble.io/u/johnny)\
**Post date:** [November 10, 2020, 8:37pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/7 "2020-11-10T20:37:22Z")

</div>

Yeah, that is exactly what you do if you want a specific element hidden for a user 😊

---

<div class="post-metadata">

**Author:** ![buckman](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/buckman/32/76754_2.png) [@buckman](https://forum.bubble.io/u/buckman)\
**Post date:** [November 10, 2020, 8:43pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/8 "2020-11-10T20:43:44Z")

</div>

Thanks again Johnny. I appreciate you taking time out of your day to reply.

---

<div class="post-metadata">

**Author:** ![johnny](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/johnny/32/203020_2.png) [@johnny](https://forum.bubble.io/u/johnny)\
**Post date:** [November 10, 2020, 8:47pm UTC](https://forum.bubble.io/t/application-security-and-page-visibility/91416/9 "2020-11-10T20:47:26Z")

</div>

No problem!
