User groups and permissions | Community
Skip to main content
A
abhishekb
Level 3
October 16, 2015
Solved

User groups and permissions

  • October 16, 2015
  • 4 replies
  • 1244 views

Hi,

If a user is part of multiple groups (e.g. authors, approvers, admin) and these groups have overlapping permissions in the sense that approvers can have all authors' permissions as well as some additional permissions, will that user have the maximum or minimum of these different permission sets ?

Is there any documentation around this ?

We're on AEM 6.1

Thanks,

Abhishek

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

Hi,

please follow the best practices documented at [1]. If you follow these best practices and if you mean positive acls (allow read/write/...), then it's the combination of both groups.

Jörg

 

[1] https://docs.adobe.com/docs/en/aem/6-1/administer/security/user-group-ac-admin.html#Best%20Practices

4 replies

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
October 16, 2015

Hi,

please follow the best practices documented at [1]. If you follow these best practices and if you mean positive acls (allow read/write/...), then it's the combination of both groups.

Jörg

 

[1] https://docs.adobe.com/docs/en/aem/6-1/administer/security/user-group-ac-admin.html#Best%20Practices

A
abhishekbAuthor
Level 3
October 16, 2015

The doc states that user principal permissions take precedence over group which makes sense. It is not quite clear over the permissions between two groups i.e which group will take precedence - the group with more permissions or less.

appreciate your response.

Lokesh_Shivalingaiah
Lokesh_Shivalingaiah
Level 10
October 16, 2015

One of the quick way to check is in /crx/de 

Select any folder, Click on 'Test Access Control' in Tools

Look at the order in which ACLs are listed and it would follow the same order.

Terms & ConditionsAccessibility statement

Loading footer...