The simplest way to achieve this is to make your link look like the following: http://server/auth/content/file.name instead of http://server/content/file.name So links to the CMS for which you think you need to make sure user is authenticated and if not, authentication is prompted, just place a "/auth" in front of it. Without the /auth approach, you can use the help of an Interceptor for the CMSPortlet and perform you check/redirection inside the Interceptor. Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4064312#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...