# X_ADMIN_PAGE_UNGUARDED

## Means

a custom admin page declared no permissions

## Typical cause

a `pages:` entry with an empty `permissions` array. Refused at **declaration** rather than at a request, because the author never writes the `defineRoute` call — `adminRouteConfig` emits it with the policy composed in, so a page cannot reach the router unguarded

## Fix

add `permissions: ['<subject>:read']` to the `pages` entry for `'<path>'`; the frame's `admin:read` is prepended for you

[Admin and manifest](/error-codes#admin-and-manifest)