Restrict guest access to portlets/assets