Access control inheritance issue | Community
Skip to main content
A
Anonymous
October 16, 2015
Solved

Access control inheritance issue

  • October 16, 2015
  • 3 replies
  • 983 views

Hi,

I was setting up users permissions using ACLSetup class. I am using the allow;jcr:read;production-users;/content format. I have to restrict access of some pages to a particular group but have to leave rest of the pages editable for that group. All the pages are sub pages of the parent home page. I thought of providing jcr:all access to the parent home page and then restricting access to the sub pages and setup the rules for that in AclSetup. However, if i give more permissions to the parent page they are being inherited. I tried reversing the order of permission in ACL with no luck.

  1. When you set allow or deny permission on a given node then 3 scenarios are possible:
    1. if the same ACE (Access Control Entry) is being inherited from a parent node and no matching ACE already exists on the node then nothing will be done.
    2. if the same ACE is being inherited from a parent node and a matching ACE is already defined on that path then it will be removed.
    3. if the same ACE is not being inherited from a parent node then the ACE will be created for that node.''

I can setup permissions for individual section of the website but it will be a long task and any section added in future will require change to the ACL file. 

Any help will be appreciated.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Sham_HC

Hi Kumarlal123,

Use glob pattern.

Thanks,

Sham

3 replies

Sham_HC
Sham_HCAccepted solution
Level 10
October 16, 2015

Hi Kumarlal123,

Use glob pattern.

Thanks,

Sham

A
Anonymous
October 16, 2015

Sham HC wrote...

Hi Kumarlal123,

Use glob pattern.

Thanks,

Sham

 

Hi Sham,

Can glob pattern be used in AclSetup file as well. I looked on google and all i could find was how to do that programatically. If yes, can you please illustrate the pattern? 

Also will the subnodes always inherit permission from the parent node? because if that's the case we will have to redesign the page hierarchy.

Thanks

A
Anonymous
October 16, 2015

kumarlal123 wrote...

Sham HC wrote...

 

Well, i have been able to work out the permission for sub pages but glob pattern is still a mystery. Sub page do not necessarily need to inherit the permission of the parent node.

Terms & ConditionsAccessibility statement

Loading footer...