I am following this tutorial and have created a page that I would like to be restricted to admin and manager roles. However when I select both permissions none of role can access the page, but I select one permission, and then the relevant role can access that page. Using both permissions together seems be not working - not sure if I am missing something here.
The security provider is based on permissions, not roles. The idea is you create a permission and assign these permissions to group of users, or even to single users. Then on certain pages you require certain permission.