In admin-paginas and publisher-pages, a page can be public (the default) or reachable only through its private direct link (?acesso=<hash>). A hidden page leaves the sitemap and the index widgets and answers 404 to ordinary visitors. A valid link unlocks browsing for the session, administrators always see the page, and the link can be regenerated in one click.
With the site's restricted access on, an administrator can authorize the current browser in admin-environment to browse public pages as a logged-out visitor. The pass is an HttpOnly cookie signed with HMAC-SHA256, with a configurable lifetime. You can revoke the current browser or all of them at once (salt rotation in .env).
See pages and environment.