Externalizing and Mapping- resourceresolver and permissions | Adobe Higher Education
Skip to main content
N
NitroHazeDev
Level 9
January 9, 2023
해결됨

Externalizing and Mapping- resourceresolver and permissions

  • January 9, 2023
  • 1 답변
  • 893 조회

Does Externalizer.externalize and resourceresolver.map(), just need read access at the path to be externalized , that can then resolve a path via .map or externalize an asset path or currentpage path?

I am trying to externalize an asset path stored at jcrcontent/image and current page path within sling models and wcmuse pojo, getting resolver using the @slingObject resource resolver within sling models and getResourceresolver() within wcmusepojo. 
Assuming nothing special in terms of permission needs to be done here since the resolver is obtained at the wcmusepojo or sling model that can then be used?

author- would be behind access

pub- i believe anonymous user's access is what pulls up the resource resolver for sling models or wcmuse pojos? We do not have login for publish access.


It currently works fine but wanted to hash it out.

이 주제는 답변이 닫혔습니다.
최고의 답변: krati_garg

@nitrohazedev Your understanding is correct over here, where in Externalizer just needs read access over Content, which is achievable on author with required permissions. 

On Publisher, anonymous user has Read Access on Content, so we are good over here too.

 

 

As long as you are using @slingObject, which is fetching resource Resolver from SlingHttpServletRequest and not performing any JCR Operations, anonymous access should suffice this usecase on publisher as well

1 답변

krati_garg
Adobe Employee
krati_gargAdobe Employee답변
Adobe Employee
January 10, 2023

@nitrohazedev Your understanding is correct over here, where in Externalizer just needs read access over Content, which is achievable on author with required permissions. 

On Publisher, anonymous user has Read Access on Content, so we are good over here too.

 

 

As long as you are using @slingObject, which is fetching resource Resolver from SlingHttpServletRequest and not performing any JCR Operations, anonymous access should suffice this usecase on publisher as well

    N
    NitroHazeDev작성자
    Level 9
    January 10, 2023

    Thanks @krati_garg , I am fetching it via resource adaptable but @@slingobject and getting externalizer using adaptTo from resolver. This is for the sling model 

    for the wcmusepojo, this is done using the getResourceResolver and just like the sling model using adaptTo I get the externalizer service . I don’t use the sling http request object. 

    also, I do the mapping to get a shortened url 

    externalizer.authorLink(resolver.map(currentPage.getPath())+”.html”

    does that seem ok ? 

    does .map also look for read access ? I believe yes but looking for consensus 
    update- yes, there are no jcr operations like valuemap or anything done for the asset path stored at the image node, just externalizing of asset path is done.


    Quick test- on pub - I took away read permissions from anonymous for the asset it tries to externalize and it worked .

    I tried this on author for fun by removing all rights for the asset path (that is stored at the jcr:content/image ) for an admin user and it still worked. - strange. I believe something with permissions might be involved in externalizer service

    약관 및 조건Accessibility statement

    Loading footer...