CUG access denied response code

[#1]

Hi Team,

I have setup CUG in my local environment. I have created 2 groups and 2 users. I assigned the groups to 2 pages say page1 and page2. Now user1 accessed page1 and after login user1 is redirected to page1. Now the user1 accessed page2. He is getting "Page not found" this might be because of 404 response code. 404 is when the accessed resource (ideally page) is not available. But here it is there but the user (user1) doesn't have access to the page. We would like to display message like "Access Denied/ You don't have permission to access this page" something like this.

How can I differentiate these 2 scenarios?

Please help me in this.

Thanks,

AryA

[akhilat16351269 · Accepted solution]

CUG is implemented via groups, that means using the permissions built into the repository itself. As a user you only see the pages which are visible to you, but not the ones which you are denied to see.

That means that the repository will give you the same response (from an API point of view) if

* you want to access a non-existing node

* you want to access a node, which you are not allowed to see.

This is for security reasons.

If you want to give the user a hint, that the permissions are insufficient, you should implement a custom 404 handler, which internally checks which of the both cases are the true reason behind the 404.

Jörg

[akhilat16351269 · Accepted solution]

Hi Jorj,

We have a website where some of the pages are rendered from non AEM application also. So we have implemented errorhandling via dispatcher. If the error handling is done via dispatcher, how can we achieve this?

Thanks,

Akhila