Can you set up folder level permissions for Assets HTTP API?

[uafzal]

I have a scenario where multiple developers need to access the same AEM DAM environment. Each developer will have their own workspace folder in the DAM. They will be accessing the assets and updating the metadata in their respective folders using the Assets HTTP API.

Is there a way to apply HTTP API (token-based) permissions for each developer so that they perform operations in their own specified folders in AEM DAM and by accident not mess up other workspaces?

[BrianKasingli · Accepted solution]

@uafzal,

One way, you can create an AEM user for each of your developers with ACL (read,write,delete) permissions to only allow specific folder path restrictions.

[uafzal]

@BrianKasingliThank you for the response.

The developers need to access the DAM using the HTTP API - HTTP API works with service credentials/access-tokens - Each developer will have the same service credentials because they are on the same AEM instance.
How will I link each AEM developer user with the HTTP API access? 

[BrianKasingli]

With POSTMAN you can do something like this:
http://localhost:4502/api/assets/my-site/carouselFolder.json

Use Basic Authentication, and after authentication, the "Authorization" value will be set In the header.

I hope this helps.

[uafzal]

Thank you @BrianKasingli - It worked!

[Jörg_Hoh]

Don't give the developers Admin access to that instance, but limit the permissions of the users they are using.