ACL to access http://localhost:4502/mnt/overlay/netcentric/actool/content/overview.html/actool

[aemUser2345]

This is what i have setup so far in order to view AC Tool in AEM Cloud:

• path: /apps/cq/core/content/nav/tools/security/actool
  permission: allow
  privileges: jcr:read

But when i click on this link: http://localhost:4502/mnt/overlay/netcentric/actool/content/overview.html/actool, it shows error of "Resource at '/mnt/overlay/netcentric/actool/content/overview.html/actool' not found: No resource found" I was wondering if there is any ACL permissions needed in order to view this page?

[ManviSharma]

Hello @aemUser2345 ,

The error “Resource at '/mnt/overlay/netcentric/actool/content/overview.html/actool' not found” indicates that Sling cannot resolve the specified resource. This is not primarily an ACL issue but rather due to the resource path not existing or being unreadable.

Please verify the following:

1. Check resource existence , confirm that /apps/netcentric/actool/content/overview (or /libs/netcentric/actool/content/overview) exists in CRXDE Lite.

2. Validate permissions , ensure the user or group has jcr:read access on /apps/netcentric/actool and its subpaths.

3. Overlay resolution ,the /mnt/overlay/... path merges /apps and /libs; if the resource is missing in both, it will result in a 404.

4. Component reference ,ensure the page’s jcr:content has a valid sling:resourceType that exists under /apps or /libs.

If the resource exists and is accessible with admin but not other users, grant jcr:read on /apps/netcentric/actool to the respective user/group.

[giuseppebaglio · Accepted solution]

hi @aemUser2345,

For AEM Cloud, the AC Tool relies on the actool-service system user, and this user must have sufficient permissions to access its own nodes and any content it manages. The official recommendation is to manually grant jcr:all privileges to the root (/) for the actool-service principal for the tool to operate correctly. Without this, pages and overlays provided by AC Tool may not be accessible, even if other navigation ACLs exist.