Expand my Community achievements bar.

SOLVED

Distinguishing ACL for folder creation and assets CRUD operations

Avatar

Level 5

hi,

 

is it possible to have one role that can create assets folders plus CRUD operation on the files/assets and another role that could only do CRUD operations on files but without possibilities to create folders ?

 

I couldn't find documentation explaining different roles for assets (owner, editor)

 

Thanks

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restric...

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?l...

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-princi...

 

Regards,

Rajashankar.R

 

View solution in original post

2 Replies

Avatar

Correct answer by
Community Advisor

Hi @nbg62 

For this case you need to overlay below path and add render condition to hide create holder option to users of a specific group 

/libs/dam/gui/content/assets/jcr:content/actions/secondary/create/items/createfolder

/libs/wcm/core/content/sites/jcr:content/actions/secondary/create/items/createfolder

Please refer below thread for same:

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/acl-permissions-to-restric...

 

AEM comes with a default group "dam-users" for Dam users.Please refer: 

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?l...

Also refer the below to get details on privileges

https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/touch-ui-princi...

 

Regards,

Rajashankar.R

 

Avatar

Level 5

Thank you Raj,

 

this is what we need, I was hoping there is more granular user roles that can support different actions...

Can you advise if I can get current user's group name using OOB render condition ?