Distinguishing ACL for folder creation and assets CRUD operations | Community
Skip to main content
Level 4
May 9, 2022
Solved

Distinguishing ACL for folder creation and assets CRUD operations

  • May 9, 2022
  • 1 reply
  • 808 views

hi,

 

is it possible to have one role that can create assets folders plus CRUD operation on the files/assets and another role that could only do CRUD operations on files but without possibilities to create folders ?

 

I couldn't find documentation explaining different roles for assets (owner, editor)

 

Thanks

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by RajaShankar

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restrict-folder-creation/td-p/368902

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?lang=en

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-principal-view.html?lang=en

 

Regards,

Rajashankar.R

 

1 reply

RajaShankar
Community Advisor
RajaShankarCommunity AdvisorAccepted solution
Community Advisor
May 9, 2022

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restrict-folder-creation/td-p/368902

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?lang=en

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-principal-view.html?lang=en

 

Regards,

Rajashankar.R

 

nbg62Author
Level 4
May 10, 2022

Thank you Raj,

 

this is what we need, I was hoping there is more granular user roles that can support different actions...

Can you advise if I can get current user's group name using OOB render condition ?