Anonymous havn't access to cloud service under /etc | Community
Skip to main content
germanf88334862
germanf88334862
August 8, 2019
Solved

Anonymous havn't access to cloud service under /etc

  • August 8, 2019
  • 3 replies
  • 1109 views

Hi all, i got an issue with cloud services. on AEM 6.4
I have created the google-analytics cloud service under Generic Analytics Snippet.

And all works fine on all instances if:

1) I'm still logged in(admin admin)

2) if  give an access to anonymous user in /useradmin to read /etc/cloudservices/generic-tracker/google-analytics


But here comes the problem, if i haven't logged in, on publish there is no google-assistant inside the div class="cloudservice generictracker" it is empty at all.

For dispatcher there is only 1 way that i found -> give access to anonymous user(2).

Is that even correct that cloud services needs that accesses?

How could i do it more clearly, instead of abusing anonymous access rights?

P.S. i configured all with thoose guides Analytics with External Providers

<div data-sly-resource="${'cloudservices' @ resourceType='cq/cloudserviceconfigs/components/servicecomponents'}" data-sly-unwrap></div> added in body

<sly data-sly-include="/libs/cq/cloudserviceconfigs/components/servicelibs/servicelibs.jsp" /> added in head

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by user05162

By default, the anonymous user has read access on the following folders which includes some of the cloud services. Based on the third party services you are using, you need to provide the read access. This is not a security vulnerability.

3 replies

U
Adobe Employee
user05162Adobe EmployeeAccepted solution
Adobe Employee
August 8, 2019

By default, the anonymous user has read access on the following folders which includes some of the cloud services. Based on the third party services you are using, you need to provide the read access. This is not a security vulnerability.

germanf88334862
germanf88334862Author
August 9, 2019

So if i understand right, i should give the permission to read my google-analytics cloud to 'everyone' user-group not only 'anonymous' user?

U
Adobe Employee
user05162Adobe Employee
Adobe Employee
August 9, 2019

Just give the read permissions for anonymous user, which is the user used by the publish instance to load the content.

That said, Please do not change the "everyone" user access as it resets every time after the restart.

Terms & ConditionsAccessibility statement

Loading footer...