# 8.4 Who may load the page

The page is the console's code, not its data, and a browser loading a page sends cookies, never
the bearer token Shopfront signs callers in with. A posture of `RequireRoles(Roles.Staff)` would
therefore refuse every load, staff included. Shopfront has no cookie sign-in, so the shell is
anonymous, `AllowAnonymousShell()`, and the gate on the data does the work: anyone can load an
empty console, and only staff get anything into it. The host logs a warning saying so on every
start, which is the point of the option.

A host with a cookie or OpenID Connect sign-in gates the page as well, with `RequirePolicy` or
`RequireRoles`. Shopfront's deployment comes back to it.

---

Next: [8.5 Open it](/docs/book/the-operations-console/open-it)