# Xano, Roles, and Private Pages

**URL:** <https://community.weweb.io/t/xano-roles-and-private-pages/2564>\
**Category:** Ask us anything\
**Tags:** xano\
**Created:** [May 3, 2023, 2:13pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564 "2023-05-03T14:13:55Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![karlso](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/karlso/32/1545_2.png) [@karlso](https://community.weweb.io/u/karlso)\
**Post date:** [May 3, 2023, 2:13pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/1 "2023-05-03T14:13:55Z")

</div>

My Xano user table has an enum list (array) for roles (Master, Admin, Manager, User, Auditor). I setup WeWeb with those roles and upgraded my subscription to allow for roles. Everything works in the editor, but not the published site - I log in, it redirects me successfully to the dashboard, but then it redirects me back to the sign-in page when I navigate to any other page.

Loom explanation: [Loom | Free Screen & Video Recording Software | Loom](https://www.loom.com/share/651b9a806e37455cb3782c7c91a7f081)

---

<div class="post-metadata">

**Author:** ![Quentin](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/quentin/32/6_2.png) [@Quentin](https://community.weweb.io/u/Quentin)\
**Post date:** [May 3, 2023, 4:29pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/2 "2023-05-03T16:29:21Z")

</div>

Hey @karlso,

Could you send me the app’s URL (in the editor) in a DM? I’ll send it to our tech team to check if it’s a bug.

Thanks 🙏

---

<div class="post-metadata">

**Author:** ![karlso](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/karlso/32/1545_2.png) [@karlso](https://community.weweb.io/u/karlso)\
**Post date:** [May 3, 2023, 6:44pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/3 "2023-05-03T18:44:15Z")

</div>

DM sent. 🙏

---

<div class="post-metadata">

**Author:** ![karlso](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/karlso/32/1545_2.png) [@karlso](https://community.weweb.io/u/karlso)\
**Post date:** [May 8, 2023, 6:33pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/4 "2023-05-08T18:33:22Z")

</div>

Still no fix for this. Anyone have an idea of what to try?

---

<div class="post-metadata">

**Author:** ![raydeck](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/raydeck/32/384_2.png) [@raydeck](https://community.weweb.io/u/raydeck)\
**Post date:** [May 8, 2023, 8:40pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/5 "2023-05-08T20:40:00Z")

</div>

Hey Karl, that’s super weird and interesting! Seems resistant to forums - up for discussing it live? This is the kind of hard problem that we tackle on State Change office hours. Would love to have you join if it’s still bugging you. Here’s a one-time invitation: [State Change Office Hours](https://tickets.statechange.ai/ticket/0b802321-a2a1-4159-ba42-2da8189487c5)

---

<div class="post-metadata">

**Author:** ![karlso](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/karlso/32/1545_2.png) [@karlso](https://community.weweb.io/u/karlso)\
**Post date:** [May 8, 2023, 9:11pm UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/6 "2023-05-08T21:11:22Z")

</div>

Will do - see you in the office hours soon. Thanks!

---

<div class="post-metadata">

**Author:** ![Mael](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/mael/32/13246_2.png) [@Mael](https://community.weweb.io/u/Mael)\
**Post date:** [May 9, 2023, 9:35am UTC](https://community.weweb.io/t/xano-roles-and-private-pages/2564/7 "2023-05-09T09:35:31Z")

</div>

Hello @karlso,

It’s working in the editor because we are not using private access to simplify the development

 ![Screenshot 2023-05-09 at 11.32.29](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/a/a6cedb70c0bcdf697c57a09c5deb8787f4e3da0c.png)

You define a user group with 4 roles. That means that your user has to have all the 4 roles to be able to access the page. It’s a AND condition and not an OR

You should create a user group for each role, and on each page you can combine different user groups with an OR
