How to restrict anonymous access /crx/explorer/ui/search.jsp

Forum|Forum|1 year ago
November 4, 2024
3 replies
2349 views

I tried to add +/crx/explorer/ui/search.jsp in Apache Sling Authentication Service, but it didn't work. How can I restrict anonymous access /crx/explorer/ui/search.jsp?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by joerghoh

You cannot with ootb tools. As the CRX Explorer (CRX DE as well!) operates in its own HTTP context, Sling authentication cannot be applied to limit access to specific paths or features of it. When you are authenticated to the repository, you can use all the tools of the CRX Explorer according to the permissions of the underlying repository.

joerghohAccepted solution

Employee

You cannot with ootb tools. As the CRX Explorer (CRX DE as well!) operates in its own HTTP context, Sling authentication cannot be applied to limit access to specific paths or features of it. When you are authenticated to the repository, you can use all the tools of the CRX Explorer according to the permissions of the underlying repository.

GabrielMircea

New Participant

You have two options here:

1. Update the Apache Sling Authentication Service

Go to http://localhost:4502/system/console/configMgr

Search for org.apache.sling.auth.core.impl.SlingAuthenticator.

This setting tells the Sling authenticator to require authentication for the specified path.

In the configuration, you need to add the following property if it doesn't already exist:

sling.auth.requirements = /crx/explorer/ui/search.jsp

2. Restrict Access through ACLs

Use CRXDE Lite (http://localhost:4502/crx/de) to set the permissions.to /home/users or wherever you manage your users/groups. You should ensure that the anonymous user does not have read access to /crx/explorer