Create User group similar to forms-power-users without access to crx/packmgr/index.jsp

[aemuser001]

Hi,

Is there a way to create a new user group that has full access to create/modify/delete/upload forms, but does not have access to the crx package manager?

Currently, when adding a user to the forms-power-users, it provided the necessary access to work with forms, but it also provides access to server:port/crx/packmgr/index.jsp. 

I tried using form-users group but it gives the following error when the user in this group tries to upload a form.

Thanks

[SureshDhulipudi]

You can create a custom group and give all the permissions which has 
forms-power-users and just remove the crx/de read 
check the permissions tab and give all the permissions.

[aemuser001]

Thank you, I will give this a try.

[Jörg_Hoh · Accepted solution]

The problem is that you give only access to repository areas. But the permission do not apply directly for functionality. That means if you want to effectively disable the package manager for some users, you need to remove the permissions from the repository, which the package manager requires to work properly (it's /etc/packages).

There is no real solution, if your users need to have read and/or write access to /etc/packages, but are not allowed to use the package manager. The only chance is then block access to the package manager, but that's often not possible, because others need to access it.