Add user group access in publish environment

Question

I need to show some html content based on user's group. I am able to do this in author environment but how do I control it in publisher and domain level?

I am using a boolean variable in sightly to show/hide content. This variable is in sling model where I am checking user's group name.

kaikubad · Accepted Answer

The component where we are using the service user.

@8220494(service = AssetDownloadService.class)
public class AssetDownloadServiceImpl implements AssetDownloadService {

    protected static final Logger LOGGER = LoggerFactory.getLogger(AssetDownloadServiceImpl.class);

    @3214626
    private ResourceResolverService resourceResolverService;


    private boolean isAsset(String resourcePath, String propertyName) {
        try (ResourceResolver resourceResolver = resourceResolverService.getResourceResolver()) {
            Resource resource = resourceResolver.getResource(resourcePath);
            if (resource == null) return false;

            String fileReference = resource.getValueMap().get(propertyName, StringUtils.EMPTY);
            Resource damImageResource = resourceResolver.getResource(fileReference);
            return isBynderAsset(damImageResource);
        } catch (RuntimeException ex) {
            LOGGER.error("Exception occurred in isBynderAsset due to {}",ex.getMessage(), ex);
        }

        return false;
    }

}

The ResourceResolverService

@8220494(service = ResourceResolverService.class, property = {
        Constants.SERVICE_DESCRIPTION + "=ResourceResolver Provider for Service User"
})
public class ResourceResolverServiceImpl implements ResourceResolverService {

    @3214626
    ResourceResolverFactory resolverFactory;

    private final Logger logger = LoggerFactory.getLogger(ResourceResolverServiceImpl.class);

    @9944223
    public ResourceResolver getResourceResolver() {
        Map<String, Object> params = new HashMap<>();
        params.put(resolverFactory.SUBSERVICE, "reader-user");
        try {
            return resolverFactory.getServiceResourceResolver(params);
        } catch (LoginException e) {
            logger.error("error due to : {}", e.getMessage(), e);
        }

        return null;
    }

    @9944223
    public ResourceResolver getResourceResolverWriter() {
        Map<String, Object> params = new HashMap<>();
        params.put(resolverFactory.SUBSERVICE, "writer-user");
        try {
            return resolverFactory.getServiceResourceResolver(params);
        } catch (LoginException e) {
            logger.error("error due to : {}", e.getMessage(), e);
        }

        return null;
    }

}

You can replicate this service user from author. and for extra permissions you can use the netcentric acl tool. Or you can set permissions manualy.

EstebanBustamante · Answer

Hi,I don't fully understand your question, but let me try to explain how this will work. In the Sling model, you can obtain the user who has started the session that reaches your Sling model. In other words, you can determine which user has logged into AEM, and thus, retrieve its details, such as the group[1]. If you use this same Sling model in the publish instance, you will have to "enable" AEM login publicly for this to work properly.By default, in the publish instance, the anonymous user is the session used if no other user has started a session. That being said, if you need that Sling Model to work in publish, you will have to log into AEM. This scenario is how the WKND site works. You can refer to that if you need to mimic that functionality. If, on the other hand, you have a custom login, then you will have to rely on other methods to capture that user's information in the Sling model. Hope this clarifies your doubts.[1]. How to get the group in slingModel: https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-fetch-users-of-a-group-through-java-code/m-p/168443[2]. Wkdn example: https://experienceleague.adobe.com/docs/experience-manager-learn/getting-started-wknd-tutorial-develop/overview.html

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded