What are the aggregate privilege rep:write contains?

Question

I have a use case where i need to restrict the custom group for deleting the page. And also custom group should be able author the pages like adding components and removing the those. I'm using repo init script for this restriction. the issue is when i try to restrict group for deletion its also disabling the modification.

Love_Sharma · Accepted Answer

Try using below combinationjcr:read\,jcr:versionManagement\,jcr:modifyProperties\,jcr:addChildNodes\,jcr:lockManagement\,jcr:nodeTypeManagementAnd JFYI, below is the mapping for permissions (might help)"READ": ["jcr:read"]"MODIFY": ["jcr:modifyProperties","jcr:lockManagement","jcr:versionManagement","jcr:removeChildNodes","jcr:removeNode","jcr:addChildNodes","jcr:nodeTypeManagement"]"CREATE": ["jcr:addChildNodes","jcr:nodeTypeManagement"]"DELETE": ["jcr:removeChildNodes","jcr:removeNode"]"READACL": ["jcr:readAccessControl"]"EDITACL": ["jcr:modifyAccessControl"]"REPLICATE": [“crx:replicate"]

milind_bachani · Answer

hi @karthick1356 You may find this trick useful for your usecase :https://aemexperience.wordpress.com/2020/03/07/aem-permission-tricks-remove-delete-access-without-impacting-move/Thanks.

Sign up

Login with SSO

Login to the community

Login with SSO