Selective vs most restrictive
Choose the global mode in Restriction Approach (admin console). Default: selective restriction.
Comparison
| Selective restriction | Most restrictive | |
|---|---|---|
| Open the page | Space/page View grantees | Banner group (+ admins) only |
| Edit the page | Banner group + those with Edit | Banner group (+ admins) |
| Inline macros | Hidden per macro if user lacks group | All visible if user can open page |
| Space defaults on page | Copied to page restrictions | Not copied |
| Typical use | Mixed-sensitivity collaboration | Fully gated pages |
Selective restriction — user experience
Alice (Secret group, space View): Opens page with Secret banner and Confidential paragraph. Sees Secret content; Confidential block is empty.
Bob (banner Secret group member): Sees and can edit entire page (if Edit granted).
Carol (space View only, no Secret): Opens page in selective mode; sees Unclassified sections only.
Most restrictive — user experience
Alice (Secret group): Can open Secret page.
Carol (space View, not Secret): Cannot open page — no access regardless of space membership.
Changing modes
Changing the global mode does not automatically rewrite every page. Pages pick up new behavior on the next Classifier save when permissions are recalculated. Plan a bulk re-save or communication if you switch modes in production.