ACS Commons ACL Packager | Community
Skip to main content
K
krist_wang
Level 2
August 18, 2023
Solved

ACS Commons ACL Packager

  • August 18, 2023
  • 2 replies
  • 1633 views

Hi Team,

 

I am using AEM as a cloud service and want to  migrate user permissions to higher AEM environments i.e. QA, Stage, Prod. I am aware about  ACS commons ACL packager but we will mostly likely not have permissions to deploy packages on the higher environments. Can you suggest some possible solutions?

 

Also, can we deploy these permissions as part of code deployment?

 

Thanks

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by lukasz-m

Hi @krist_wang,

If you want to manage your permissions model as part of the code, you can check below options as an alternative to ACS Commons ACL Packager:

  • AC Tool - this is powerful tool compatible with AEM as a Cloud Service, it provides developer friendly syntax that base on YAML, it also provides mechanism to apply permission automatically, respects run modes any many more
  • Apache Sling Repozitory Initialization - it is much simpler than AC Tool and it is part of AEM OOTB, if your permissions model is not complex, and you don't want 3rd party tools on AEM you can consider that

2 replies

lukasz-m
Community Advisor
lukasz-mCommunity AdvisorAccepted solution
Community Advisor
August 18, 2023

Hi @krist_wang,

If you want to manage your permissions model as part of the code, you can check below options as an alternative to ACS Commons ACL Packager:

  • AC Tool - this is powerful tool compatible with AEM as a Cloud Service, it provides developer friendly syntax that base on YAML, it also provides mechanism to apply permission automatically, respects run modes any many more
  • Apache Sling Repozitory Initialization - it is much simpler than AC Tool and it is part of AEM OOTB, if your permissions model is not complex, and you don't want 3rd party tools on AEM you can consider that
    Sudheer_Sundalam
    Community Advisor
    Sudheer_SundalamCommunity Advisor
    Community Advisor
    August 18, 2023

    Hi @krist_wang ,

    I agree with @lukasz-m about using the Netcentric AC Tool to manage the user and group permission.

    Checkout this migration to AC Tool page https://github.com/Netcentric/accesscontroltool/blob/develop/docs/Migration.md to create the AC permission in the code repo.

      Preetpal_Bindra
      Community Advisor
      Preetpal_BindraCommunity Advisor
      Community Advisor
      August 18, 2023

      We used Apache Sling Repository Initialization for managing permissions across environments. This tooling is provided and recommended by Adobe.

       

      The syntax is pretty straightforward once you try some examples. A ton of examples are listed in this documentation for you to get started with:

       

      https://sling.apache.org/documentation/bundles/repository-initialization.html#repoinit-parser-test-scenarios-1 

       

      From my experience,

      1. for multiple websites we had just one centralized Repo Init script so that the permissions are all at one place and there are no overlaps and issues of overriding permissions from across multiple Repo Init scripts,

      2. avoid making permission changes manually once Repo Init scripts are implemented. This could cause errors in Repo Init scripts, and,

      3. test, test, test.

       

      Hope this helps!

       

      thanks,
      Preetpal Singh

        Terms & ConditionsAccessibility statement

        Loading footer...