Yeah, I'd say it's the wrong way...
Any pages outside of the user's public/private pages are not managed by the user, and you can set up permissions so they can view (use) the portlet w/o being able to configure, add, or remove it.
If you log in as an administrator in a fresh Liferay install, all you see is the Welcome page. This is in the global area and has a url like /web/guest/welcome. You can add a page here, in the global area that is, by default, viewable by everyone. However, you can change the page permissions so Guest does not have view access, but User does. Someone trying to access this page would be forced to log in before they could see it.
Once this page is set up and permissioned, your login action can simply send them to the privileged page in the global scope. Users can use it but not remove it, modify the page, etc.
You can also do this sort of thing for organizations.
Users can always use the dock to move between the global page and their own public/private area (if you really need to support such a thing, which many intranet sites really don't).
Por favor, faça login para denunciar.