Getting Deny in json response if I unchecked the modify permission to user. | Community
Skip to main content
This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
SantoshSai
SantoshSaiAccepted solution
New Participant
Jul 4, 2022 3:39 PM UTC

@akshaybhujbale That's expected behaviour - when you update ACL's those are stored under node as respective node as rep:policy as you see below and that's reflect in response of json 

Santosh Sai

5 replies

ShaileshBassi
New Participant
Jul 5, 2022 10:24 AM UTC

@akshaybhujbale

The permission model comes with the additive & inheritance model i.e.

  • If there are multiple groups assigned to the user the combined permission will be applicable to the user, and
  • if there is permission on the parent group then that will float to its child group.

 

Permission over here are applied as:

  • Implicit = Indirect
  • Explicit = Direct

Now if you are unchecking any checkbox over here, that means you might be overriding the permission coming from the parent group. And, therefore having the "DENY" permission states that over here the permissions are removed explicitly from that group/user.

Hope this helps!

 

Thanks

 

Translate
Sachin_Arora_
New Participant
Jul 5, 2022 5:03 AM UTC

In addition to what @santoshsai has explained, if you want to remove deny you can go to Touch UI permissions page : /security/permissions.html/principal/everyone and delete the deny permission.

I am not sure what URL you are using to get JSON but to avoid rep:policy in JSON response, you can hit model.json of the page(eg /content/we-retail.model.json ) or jcr:content.infinity.json(/content/we-retail/jcr:content.infinity.json)

Translate
SantoshSai
New Participant
Jul 4, 2022 3:12 PM UTC

Hi @akshaybhujbale ,

Would be appreciated if you give us a bit more background information, what you are trying to do and what is the exact issue.

Regards,

Santosh

Translate
Santosh Sai
Level 6
Jul 4, 2022 3:27 PM UTC

In the page json response we get Access policy info for that page.

if admin removed modify permission on useradmin portal then in json responce getting deny as shown in screenshot.

Translate
SantoshSai
SantoshSaiAccepted solution
New Participant
Jul 4, 2022 3:39 PM UTC

@akshaybhujbale That's expected behaviour - when you update ACL's those are stored under node as respective node as rep:policy as you see below and that's reflect in response of json 

Translate
Santosh Sai