Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
BedrockMission!

Learn more

View all

Sign in to view all badges

SOLVED

Block access to CRX/CRXDE Lite

Shaheena_Sk
Level 4
Level 4

i need to block user access to CRX or CRXDE Lite. My group has inherited permission from OOTB Contributors and I have denied access to these paths as well:

/libs/crx

/libs/cq/core/content/nav/tools/general/crxdelite 

/libs/granite/core/content/nav/operations/crxdelite 

/libs/cq/core/content/welcome/features/crxdeThese helps to hide all the buttons from the instance, but, if I directly hit the CRX URL, i will be able to read the content in it, though i cant create/delete/modify. I am using AEM 6.5.5 without dispatcher.

1 Accepted Solution
Nupur_Jain
Correct answer by
Community Advisor
Community Advisor

Hi @Shaheena_Sk 

 

Crx/de lite access can be disabled on AEM instances by disabling some of the AEM bundles. 

Refer https://www.aemquickstart.in/2015/11/how-to-disable-crxde-and-crxde-lite.html.

 

There is a similar post which you can also refer https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-disable-crx-de-in-a....

 

Hope it helps!

Thanks!

Nupur

View solution in original post

4 Replies
Nupur_Jain
Correct answer by
Community Advisor
Community Advisor

Hi @Shaheena_Sk 

 

Crx/de lite access can be disabled on AEM instances by disabling some of the AEM bundles. 

Refer https://www.aemquickstart.in/2015/11/how-to-disable-crxde-and-crxde-lite.html.

 

There is a similar post which you can also refer https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-disable-crx-de-in-a....

 

Hope it helps!

Thanks!

Nupur

View solution in original post

vanegi
Employee
Employee

If you have a Dispatcher configured in front of your CQ instance, you can block access to CRX and CRXDE Light using the following filter rule in you dispatcher configuration (dispatcher.any)

/ruleLabel{/glob "* /crx*"/type "deny"}

 

To control what features/links are displayed to the users on the welcome screen in authoring mode modify permissions for nodes under /libs/cq/core/content/welcome/features.

Shaheena_Sk
Level 4
Level 4
i need it blocked only for a specific group of users not all other groups. will that work for all other groups as well?