AccessControlUtils.addAccessControlEntry getting failed with permission issue in 6.3 | Community
Skip to main content
KritiRathiTela
New Participant
Sep 4, 2018 4:52 PM UTC
Solved

AccessControlUtils.addAccessControlEntry getting failed with permission issue in 6.3

AccessControlUtils.addAccessControlEntry getting failed with permission issue in AEM6.3 but working fine in AEM6.1

Exception -

javax.jcr.AccessDeniedException: Access denied.

   at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.checkPermissions(AbstractAccessControlManager.java:200)

   at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.getTree(AbstractAccessControlManager.java:167)

   at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getCugPolicy(CugAccessControlManager.java:239)

   at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getApplicablePolicies(CugAccessControlManager.java:137)

   at org.apache.jackrabbit.oak.security.authorization.composite.CompositeAccessControlManager.getApplicablePolicies(CompositeAccessControlManager.java:99)

   at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:121)

   at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:117)

   at org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.perform(SessionDelegate.java:208)

   at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator.getApplicablePolicies(AccessControlManagerDelegator.java:117)

   at org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator.getApplicablePolicies(JackrabbitAccessControlManagerDelegator.java:147)

   at org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils.getAccessControlList(AccessControlUtils.java:128)

   at org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils.getAccessControlList(AccessControlUtils.java:108)

   at org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils.addAccessControlEntry(AccessControlUtils.java:185)

any idea ??

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
arunpatidar
arunpatidarAccepted solution
New Participant
Sep 4, 2018 10:02 PM UTC

Hi,

From workflow you need to get session like

Session session = workflowSession.getSession();

Then you can try to cast JackrabbitSession jcrSession = (JackrabbitSession) session;

Please check session user and permission as well.

Arun Patidar
View reply

11 replies

arunpatidar
arunpatidarAccepted solution
New Participant
Sep 4, 2018 10:02 PM UTC

Hi,

From workflow you need to get session like

Session session = workflowSession.getSession();

Then you can try to cast JackrabbitSession jcrSession = (JackrabbitSession) session;

Please check session user and permission as well.

Translate
Arun Patidar
smacdonald2008
smacdonald2008
Level 10
Sep 4, 2018 9:30 PM UTC

Also - check this article - we perform JCR operations here -- Modifying Digital Assets using Adobe Experience Manager Workflows

Translate
KritiRathiTelaAuthor
New Participant
Sep 4, 2018 8:53 PM UTC

Sure, thanks

Translate
smacdonald2008
smacdonald2008
Level 10
Sep 4, 2018 8:43 PM UTC

I will test this tomorrow to see if we can cast to JCR Session and use it to interact with JCR operations.

Translate
KritiRathiTelaAuthor
New Participant
Sep 4, 2018 8:41 PM UTC

using same way to get session i.e adaptTo - final Session session = workflowSession.adaptTo(Session.class);

Translate
smacdonald2008
smacdonald2008
Level 10
Sep 4, 2018 6:22 PM UTC

See this -- How to get jcr Session in the workflow?

To whitelist the bundle - see this -- Scott's Digital Community: Adobe Experience Manager FAQs and other Tips  (Search whitelist)

Translate
KritiRathiTelaAuthor
New Participant
Sep 4, 2018 6:21 PM UTC

not tried any thing to whitelist. What exactly need to be done ?

Translate
KritiRathiTelaAuthor
New Participant
Sep 4, 2018 6:20 PM UTC

its Workflow session - final Session session = workflowSession.adaptTo(Session.class);

Translate
arunpatidar
arunpatidar
New Participant
Sep 4, 2018 6:11 PM UTC

Hi,

What session are you using? User session or subservice session.

Translate
Arun Patidar
KritiRathiTelaAuthor
New Participant
Sep 4, 2018 5:56 PM UTC

This is call to addAccessControlEntry -

  

   AccessControlUtils.addAccessControlEntry(session, <actual path of the asset>, getEveryonePrincipal(session), getWritePriviledges(session), false);

  

  

   Below is method for everyone Principal and Privilege -

  

   private Principal getEveryonePrincipal(final Session session) throws RepositoryException {

        JackrabbitSession jcrSession = (JackrabbitSession) session;

        PrincipalManager principalMgr = jcrSession.getPrincipalManager();

        return principalMgr.getPrincipal(EVERYONE_NAME);

    }

    private Privilege[] getWritePriviledges(final Session session) throws RepositoryException {

        AccessControlManager accCtrlMgr = session.getAccessControlManager();

        return new Privilege[]{accCtrlMgr.privilegeFromName(Privilege.JCR_WRITE)};

    }

Translate
Show more replies
Terms & ConditionsAccessibility statement

Loading footer...