Expand my Community achievements bar.

Dive into Adobe Summit 2024! Explore curated list of AEM sessions & labs, register, connect with experts, ask questions, engage, and share insights. Don't miss the excitement.
SOLVED

Can you set up folder level permissions for Assets HTTP API?

Avatar

Level 2

I have a scenario where multiple developers need to access the same AEM DAM environment. Each developer will have their own workspace folder in the DAM. They will be accessing the assets and updating the metadata in their respective folders using the Assets HTTP API.

 

Is there a way to apply HTTP API (token-based) permissions for each developer so that they perform operations in their own specified folders in AEM DAM and by accident not mess up other workspaces?

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

@uafzal,

One way, you can create an AEM user for each of your developers with ACL (read,write,delete) permissions to only allow specific folder path restrictions.

View solution in original post

5 Replies

Avatar

Correct answer by
Community Advisor

@uafzal,

One way, you can create an AEM user for each of your developers with ACL (read,write,delete) permissions to only allow specific folder path restrictions.

Avatar

Level 2

@BrianKasingliThank you for the response.

The developers need to access the DAM using the HTTP API - HTTP API works with service credentials/access-tokens - Each developer will have the same service credentials because they are on the same AEM instance.
How will I link each AEM developer user with the HTTP API access? 

Avatar

Community Advisor

With POSTMAN you can do something like this:
http://localhost:4502/api/assets/my-site/carouselFolder.json

BrianKasingli_1-1616609959918.png

Use Basic Authentication, and after authentication, the "Authorization" value will be set In the header.

BrianKasingli_0-1616610054776.png

I hope this helps.

Avatar

Employee Advisor

Don't give the developers Admin access to that instance, but limit the permissions of the users they are using.