Expand my Community achievements bar.

SOLVED

How to restrict updating folder properties for a user group

Avatar

Level 3

Is there a way to restrict updating the folder properties for a particular group. This group has permissions to create ,update and edit assets and it's properties in the folder but we would like to restrict this group updating the folder properties. Please advise 

Screen Shot 2022-09-22 at 10.41.06 AM.png

 

 

1 Accepted Solution

Avatar

Correct answer by
Employee

You can make use of rep: glob restrictions when setting permissions based on your use case. E.g.

https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html

 

Assuming deny all at root :-

/content/dam/<project>/<folder1>
allow
jcr:read rep:glob=""  
/content/dam/<project>/<folder1> allow jcr:read , rep:write   rep:glob="/jcr:content" all non-direct descendants of /folder1 named ‘jcr:content’
or use /content/dam/<project>/<folder1>/jcr:content  allow jcr:read , rep:write    

View solution in original post

1 Reply

Avatar

Correct answer by
Employee

You can make use of rep: glob restrictions when setting permissions based on your use case. E.g.

https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html

 

Assuming deny all at root :-

/content/dam/<project>/<folder1>
allow
jcr:read rep:glob=""  
/content/dam/<project>/<folder1> allow jcr:read , rep:write   rep:glob="/jcr:content" all non-direct descendants of /folder1 named ‘jcr:content’
or use /content/dam/<project>/<folder1>/jcr:content  allow jcr:read , rep:write