Current token
MODERATOR
Switch the shared demo token and navigate through the guarded pages to see how the same OPA permissions drive both routed access and in-page UI state.
Guarded route
Kundenverwaltung
This route is protected with authzCanActivate against test/Kundenverwaltung . It is reachable with MODERATOR and ADMIN .
Guard outcome
Allowed by policy before the page component is activated.