---
category: [Administration & Integrations, Platform and Product Extensions, Platform and Product Extensions/Integration, Administration & Integrations/Custom Integrations & Apps, Platform and Product Extensions/Workday Extend]
keyword: Extend
nav: wcp_docs
parent_url: /wcp_docs/
title: >- 
  Steps: Secure the Pages of an App in IntelliJ
layout: subsection
---

### Prerequisites

<a id="prereq_x1x_ssv_4qb"></a>
-   Workday Extend Plugin for IntelliJ.
-   Analysis of the security requirements of your app. Determine whether you need to control access to the pages in your app.


### Context

<a id="context_N1004A_N1003E_N10001"></a>
To grant or block access to a page in an app, use the security domains of the app. Only users whose security group has permission on the security domain can access the page. Both <b>View</b> and <b>Modify</b> permissions grant access to the page, whether it's a view or edit page.

<b>Note:</b> You can specify a maximum of 3 security domains on a page. Users with access to at least 1 specified security domain can access the page.

### Steps

1.  <a id="step_N10058_N10055_N1003E_N10001"></a>Open your app in IntelliJ.
2.  <a id="step_N10070_N10064_N1003E_N10001"></a>If you don't have a security domain in your app, add a security domain in the `model` folder.

    See [Add Security Domains in IntelliJ](/wcp_docs/gda1614889127776.html).

3.  <a id="step_N100C1_N10064_N1003E_N10001"></a>In the `.securitydomain` file, add the `"enabledForPageSecurity": true` property setting.

    Example:

    ```
    {
      "id": 1,
      "name": "ManageCharities",
      "label": "Manage: Charities",
      "enabledForPageSecurity": true
    }
    ```

    <b>Note:</b> If you're not using the security domain for page security, <i>remove</i> the `enabledForPageSecurity` property from the `.securitydomain` file.

4.  <a id="step_N10115_N10055_N1003E_N10001"></a>In the PMD that needs page security, specify the security domain in the `securityDomains` property.

    Example:

    ```
    {
        "id": "manageCharities",
        "securityDomains": [
           "ManageCharities"
        ],
        "endPoints": [
           . . .
        ],
        "presentation": {
           . . .
        }
    }
    ```

    <b>Note:</b> You can specify up to 3 security domains in `securityDomains[]`. Ensure that each string in `securityDomains[]` is a non-empty, valid security domain name.

5.  <a id="step_N100F5_N10064_N1003E_N10001"></a>Deploy the app.

    See [Deploy Apps to Development Tenants](/wcp_docs/ubb1579298396924.html).

6.  <a id="step_N100B2_N10055_N1003E_N10001"></a>Access <b>App Manager</b> to create or edit the domain security policy.

    See the security policy step in [Manage Deployed Extend Apps](/wcp_docs/bwl1559331246809.html).



### Result

<a id="result_N10124_N1003E_N10001"></a>
An unauthorized user who attempts to navigate to the page receives an error.

### Next Steps

<a id="postreq_N10134_N1003E_N10001"></a>
Repeat the procedure with each PMD that needs page security. You can reuse a security domain across multiple PMDs within the app. However, you can't share security domains across multiple apps.