Distinguishing ACL for folder creation and assets CRUD operations | Community
Skip to main content
Level 4
May 9, 2022
Solved

Distinguishing ACL for folder creation and assets CRUD operations

hi,

 

is it possible to have one role that can create assets folders plus CRUD operation on the files/assets and another role that could only do CRUD operations on files but without possibilities to create folders ?

 

I couldn't find documentation explaining different roles for assets (owner, editor)

 

Thanks

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
RajaShankar
RajaShankarAccepted solution
New Participant
May 9, 2022

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restrict-folder-creation/td-p/368902

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?lang=en

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-principal-view.html?lang=en

 

Regards,

Rajashankar.R

 

2 replies

RajaShankar
RajaShankarAccepted solution
New Participant
May 9, 2022

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restrict-folder-creation/td-p/368902

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?lang=en

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-principal-view.html?lang=en

 

Regards,

Rajashankar.R

 

Translate
nbg62Author
Level 4
May 10, 2022

Thank you Raj,

 

this is what we need, I was hoping there is more granular user roles that can support different actions...

Can you advise if I can get current user's group name using OOB render condition ?

Translate