Ctrlk
Install B2B Lock
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Control Access (Access & Message)

In Step 2 - Control access, you define who can unlock or see the content you targeted.

In Step 2 - Control access, you define who can unlock or see the content you targeted.

B2B Lock uses rules (conditions) that describe which visitors are allowed and which are blocked. You can use a single condition for simple cases, or combine multiple conditions with AND / OR logic for more advanced B2B scenarios.

Below are the main condition types supported.

1. Signed-in customers

What it is This rule requires visitors to be logged in with a Shopify customer account before they can access the locked content.

  • If true (customer is signed in) → they’re allowed.

  • If you invert it (e.g., If the customer is not signed in) → only guests are affected.

Typical uses

  • Hide prices from guest users; show prices only to logged-in customers.

  • Lock pages or entire site behind a login screen.

  • Ensure only known customers (with accounts) can view certain content.

2. Customer tags

What it is This rule checks whether a customer has specific tags on their Shopify customer record.

  • If tagged with one of the selected tags → grant access.

  • When inverted (If the customer is not tagged with…) → block those tags or allow everyone else.

Typical uses

  • Wholesale-only products/collections (tag: wholesale, b2b-approved).

  • Segment-based catalogs (e.g., silver vs gold customers see different product sets).

  • Regional or channel tags (e.g., EU-distributor, JP-partner).

Examples

  • “If the customer is tagged with wholesale” → show wholesale catalog.

  • “If the customer is tagged with silver” → show only products tagged silver.

This is one of the most powerful conditions for B2B because it works perfectly with B2B & Wholesale Solution registration/approval flows.

3. Passcode

What it is This rule requires visitors to enter a passcode (password) to access the locked content. The passcode must match the one you configure in the rule.

  • If they enter the correct passcode → grant access.

  • If not → show the passcode prompt again.

You can also configure whether the passcode is case-sensitive and adjust how long it stays valid (via advanced settings).

Typical uses

  • Private landing pages for specific partners or campaigns.

  • Temporary locked content shared only with certain groups.

  • Simple “invite-only” areas without needing accounts or tags.

4. Secret link

What it is This rule only allows access if the visitor arrives via a special URL that includes a secret token.

  • The rule generates (or expects) a URL like: /collections/wholesale?token=123@

  • If the visitor uses this URL → grant access.

  • If they come via any other link → deny access.

Typical uses

  • Hidden collections or pages for VIP or early access campaigns.

  • Secret sales where only people with the link can see products/prices.

  • “Soft-gated” content you don’t want to show in navigation or search.

5. URL Parameter (Query string)

What it is This rule allows or denies access based on specific URL query parameters (such as UTM campaign tags, affiliate tracking parameters, or promo tokens) without modifying theme code.

  • Operators supported:

    • Is exactly: URL query must match the parameter and value exactly (e.g. ?ref=affiliate_vip).

    • Contains: URL contains the specified substring (e.g. utm_campaign=wholesale_summer).

    • Starts with: URL parameter begins with a specific prefix.

    • Has any value: Triggers as long as the parameter key exists in the URL regardless of value.

  • Options:

    • Ignore Case: Case-insensitive comparison option.

    • Multiple parameters: Combine multiple URL conditions using AND / OR logic.

Typical uses

  • Create dedicated campaign landing pages accessible only from specific KOL, influencer, or affiliate links.

  • Restrict catalog or pricing access to users arriving from a targeted email campaign (utm_source=newsletter_b2b).

  • Personalize locked content for private promotional campaigns.

6. Geographic / Country condition

What it is Restricts access based on the visitor's detected country or region.

  • Features a searchable dropdown with country flags and multi-select capability.

  • Allows you to quickly select multiple allowed or blocked countries.

Typical uses

  • Restrict wholesale catalogs to domestic or authorized export markets only.

  • Block visitors from unsupported shipping regions.

7. B2B Company (Shopify B2B)

What it is Checks whether the logged-in customer belongs to a specific Shopify B2B Company account.

  • Availability: Supported across all B2B Lock plans (no longer limited to Shopify Plus).

  • Typical uses: Grant exclusive pricing or product access to designated corporate buyer companies.

8. Other conditions supported

Beyond login, tags, passcode, secret link, URL parameters, and country, B2B Lock supports several additional conditions for advanced workflows:

  • Everyone – No restrictions

    • Rule applies to all visitors. Often used as a fallback or baseline rule.

  • Email subscribers – Must be subscribed

    • Requires visitors to enter/subscribe their email address before accessing gated content.

  • Age verified – Must confirm age

    • Presents an age-gate verification popup (e.g. 18+ / 21+) before granting access to regulated items.

  • Specific customers – Must match exact email

    • Only selected customer accounts (matching specified email addresses) can view the content.

  • Customer Request Access (Customer Approval)

    • Displays a request form where visitors can submit their details. Merchant reviews and approves/rejects requests in the admin dashboard with automated email notifications.

  • Custom Liquid (advanced)

    • Developers can evaluate custom Liquid conditions for highly tailored storefront gating logic.

9. AND/OR logic & multiple rules per lock

B2B Lock lets you combine multiple conditions inside a single lock using AND / OR logic.

Examples

  • AND logic (all must be true):

    • If customer is signed in AND If customer is tagged with wholesale

      • Only logged-in wholesale customers can see the content.

  • OR logic (any can be true):

    • If customer is tagged with distributor OR If visitor arrives via URL query ?ref=partner

      • Either tagged distributors or visitors from the partner link get access.

You can also define multiple rules within one lock to support layered behavior, for example:

  • Rule 1: If customer is tagged VIP → allow full access.

  • Rule 2: If visitor enters correct Passcode → allow temporary access.

  • Fallback: Everyone else → see lock message with request access CTA.

Recap

In Control access, you answer:

“Which visitors are allowed to see this locked content?”

You can choose from:

  • Signed-in customers (login-based access)

  • Customer tags (segments like wholesale, VIP, silver/gold)

  • Passcode (password-protected content)

  • Secret link (special URL token access)

  • URL Parameter (UTM / query string condition)

  • Country / Geo (searchable country multi-select)

  • B2B Company (available on all plans)

  • Customer Request Access, Email subscribers, Age checks, Specific emails, and Custom Liquid

…and combine them flexibly with AND / OR logic for real-world B2B workflows.

Still Need Help?

If you have questions or need assistance configuring BSS B2B Lock, our dedicated support team is here to help.

  • In-App Assistance: Click Need help? or use the in-app chat button within BSS B2B Lock.

  • Email Support: Contact us at support-sbc@bsscommerce.com with your store URL and specific rule details.

PreviousLock Content (Targets)
NextLock Page Settings

Last updated