Block access to CRX/CRXDE Lite | Community
Skip to main content
Level 4
August 17, 2020
Solved

Block access to CRX/CRXDE Lite

  • August 17, 2020
  • 3 replies
  • 3022 views

i need to block user access to CRX or CRXDE Lite. My group has inherited permission from OOTB Contributors and I have denied access to these paths as well:

/libs/crx

/libs/cq/core/content/nav/tools/general/crxdelite 

/libs/granite/core/content/nav/operations/crxdelite 

/libs/cq/core/content/welcome/features/crxdeThese helps to hide all the buttons from the instance, but, if I directly hit the CRX URL, i will be able to read the content in it, though i cant create/delete/modify. I am using AEM 6.5.5 without dispatcher.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Nupur_Jain

Hi @shaheena_sk 

 

Crx/de lite access can be disabled on AEM instances by disabling some of the AEM bundles. 

Refer https://www.aemquickstart.in/2015/11/how-to-disable-crxde-and-crxde-lite.html.

 

There is a similar post which you can also refer https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-disable-crx-de-in-author-and-publish-instances-for/qaq-p/324399.

 

Hope it helps!

Thanks!

Nupur

3 replies

ChitraMadan
Community Advisor
Community Advisor
August 17, 2020
Nupur_Jain
Adobe Employee
Nupur_JainAdobe EmployeeAccepted solution
Adobe Employee
August 17, 2020

Hi @shaheena_sk 

 

Crx/de lite access can be disabled on AEM instances by disabling some of the AEM bundles. 

Refer https://www.aemquickstart.in/2015/11/how-to-disable-crxde-and-crxde-lite.html.

 

There is a similar post which you can also refer https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-disable-crx-de-in-author-and-publish-instances-for/qaq-p/324399.

 

Hope it helps!

Thanks!

Nupur

vanegi
Adobe Employee
Adobe Employee
August 17, 2020

If you have a Dispatcher configured in front of your CQ instance, you can block access to CRX and CRXDE Light using the following filter rule in you dispatcher configuration (dispatcher.any)

/ruleLabel{/glob "* /crx*"/type "deny"}

 

To control what features/links are displayed to the users on the welcome screen in authoring mode modify permissions for nodes under /libs/cq/core/content/welcome/features.

Level 4
September 23, 2020
i need it blocked only for a specific group of users not all other groups. will that work for all other groups as well?