> For the complete documentation index, see [llms.txt](https://docs-shpf.bsscommerce.com/bss-b2b-lock-login-password-hide-price/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs-shpf.bsscommerce.com/bss-b2b-lock-login-password-hide-price/lock-core-concepts/control-access-access-and-message.md).

# Control Access (Access & Message)

In Step 2 - Control access, you define who can unlock or see the content you targeted.

In **Step 2 - Control access**, you define **who can unlock or see the content** you targeted.

B2B Lock uses **rules** (conditions) that describe *which visitors are allowed* and *which are blocked*. You can use a single condition for simple cases, or combine multiple conditions with **AND / OR logic** for more advanced B2B scenarios.

Below are the main condition types supported.

***

#### 1. Signed-in customers

**What it is**\
This rule requires visitors to be **logged in with a Shopify customer account** before they can access the locked content.

* If **true** (customer is signed in) → they’re allowed.
* If you invert it (e.g., *If the customer is not signed in*) → only guests are affected.

**Typical uses**

* Hide prices from **guest users**; show prices only to logged-in customers.
* Lock pages or entire site behind a **login screen**.
* Ensure only known customers (with accounts) can view certain content.

***

#### 2. Customer tags

**What it is**\
This rule checks whether a customer has **specific tags** on their Shopify customer record.

* If **tagged with** one of the selected tags → grant access.
* When inverted (*If the customer is not tagged with…*) → block those tags or allow everyone else.

**Typical uses**

* Wholesale-only products/collections (tag: `wholesale`, `b2b-approved`).
* Segment-based catalogs (e.g., `silver` vs `gold` customers see different product sets).
* Regional or channel tags (e.g., `EU-distributor`, `JP-partner`).

**Examples**

* “If the customer is tagged with `wholesale`” → show wholesale catalog.
* “If the customer is tagged with `silver`” → show only products tagged `silver`.

This is one of the most powerful conditions for B2B because it works perfectly with **B2B & Wholesale Solution** registration/approval flows.

***

#### 3. Passcode

**What it is**\
This rule requires visitors to **enter a passcode** (password) to access the locked content. The passcode must match the one you configure in the rule.

* If they enter the correct passcode → grant access.
* If not → show the passcode prompt again.

You can also configure whether the passcode is **case-sensitive** and adjust how long it stays valid (via advanced settings).

**Typical uses**

* Private landing pages for specific partners or campaigns.
* Temporary locked content shared only with certain groups.
* Simple “invite-only” areas without needing accounts or tags.

***

#### 4. Secret link

**What it is**\
This rule only allows access if the visitor arrives via a **special URL** that includes a secret token.

* The rule generates (or expects) a URL like:\
  `/collections/wholesale?token=123@`
* If the visitor uses this URL → grant access.
* If they come via any other link → deny access.

**Typical uses**

* Hidden collections or pages for **VIP or early access** campaigns.
* Secret sales where only people with the link can see products/prices.
* “Soft-gated” content you don’t want to show in navigation or search.

***

#### 5. URL Parameter (Query string)

**What it is**\
This rule allows or denies access based on specific **URL query parameters** (such as UTM campaign tags, affiliate tracking parameters, or promo tokens) without modifying theme code.

* **Operators supported:**
  * `Is exactly`: URL query must match the parameter and value exactly (e.g. `?ref=affiliate_vip`).
  * `Contains`: URL contains the specified substring (e.g. `utm_campaign=wholesale_summer`).
  * `Starts with`: URL parameter begins with a specific prefix.
  * `Has any value`: Triggers as long as the parameter key exists in the URL regardless of value.
* **Options:**
  * **Ignore Case:** Case-insensitive comparison option.
  * **Multiple parameters:** Combine multiple URL conditions using **AND / OR** logic.

**Typical uses**

* Create dedicated campaign landing pages accessible only from specific KOL, influencer, or affiliate links.
* Restrict catalog or pricing access to users arriving from a targeted email campaign (`utm_source=newsletter_b2b`).
* Personalize locked content for private promotional campaigns.

***

#### 6. Geographic / Country condition

**What it is**\
Restricts access based on the visitor's detected country or region.

* Features a **searchable dropdown** with country flags and multi-select capability.
* Allows you to quickly select multiple allowed or blocked countries.

**Typical uses**

* Restrict wholesale catalogs to domestic or authorized export markets only.
* Block visitors from unsupported shipping regions.

***

#### 7. B2B Company (Shopify B2B)

**What it is**\
Checks whether the logged-in customer belongs to a specific Shopify B2B Company account.

* **Availability:** Supported across **all B2B Lock plans** (no longer limited to Shopify Plus).
* **Typical uses:** Grant exclusive pricing or product access to designated corporate buyer companies.

***

#### 8. Other conditions supported

Beyond login, tags, passcode, secret link, URL parameters, and country, B2B Lock supports several additional conditions for advanced workflows:

* **Everyone – No restrictions**
  * Rule applies to all visitors. Often used as a fallback or baseline rule.
* **Email subscribers – Must be subscribed**
  * Requires visitors to enter/subscribe their email address before accessing gated content.
* **Age verified – Must confirm age**
  * Presents an age-gate verification popup (e.g. 18+ / 21+) before granting access to regulated items.
* **Specific customers – Must match exact email**
  * Only selected customer accounts (matching specified email addresses) can view the content.
* **Customer Request Access (Customer Approval)**
  * Displays a request form where visitors can submit their details. Merchant reviews and approves/rejects requests in the admin dashboard with automated email notifications.
* **Custom Liquid** (advanced)
  * Developers can evaluate custom Liquid conditions for highly tailored storefront gating logic.

***

#### 9. AND/OR logic & multiple rules per lock

B2B Lock lets you combine **multiple conditions** inside a single lock using **AND / OR** logic.

**Examples**

* **AND logic** (all must be true):
  * *If customer is signed in* **AND** *If customer is tagged with `wholesale`*
    * Only logged-in wholesale customers can see the content.
* **OR logic** (any can be true):
  * *If customer is tagged with `distributor`* **OR** *If visitor arrives via URL query `?ref=partner`*
    * Either tagged distributors or visitors from the partner link get access.

You can also define **multiple rules within one lock** to support layered behavior, for example:

* Rule 1: If customer is tagged `VIP` → allow full access.
* Rule 2: If visitor enters correct Passcode → allow temporary access.
* Fallback: Everyone else → see lock message with request access CTA.

***

#### Recap

In **Control access**, you answer:

> **“Which visitors are allowed to see this locked content?”**

You can choose from:

* **Signed-in customers** (login-based access)
* **Customer tags** (segments like wholesale, VIP, silver/gold)
* **Passcode** (password-protected content)
* **Secret link** (special URL token access)
* **URL Parameter** (UTM / query string condition)
* **Country / Geo** (searchable country multi-select)
* **B2B Company** (available on all plans)
* **Customer Request Access, Email subscribers, Age checks, Specific emails, and Custom Liquid**

…and combine them flexibly with **AND / OR logic** for real-world B2B workflows.

***

## **Still Need Help?**

If you have questions or need assistance configuring BSS B2B Lock, our dedicated support team is here to help.

* **In-App Assistance:** Click **Need help?** or use the in-app chat button within BSS B2B Lock.
* **Email Support:** Contact us at [**support-sbc@bsscommerce.com**](mailto:support-sbc@bsscommerce.com) with your store URL and specific rule details.