CUG Exempted Principal Behaviour is not proper | Community
Skip to main content
Level 6
April 12, 2023
Solved

CUG Exempted Principal Behaviour is not proper

  • April 12, 2023
  • 1 reply
  • 519 views

I have added cugCheckUser as CUG on folder given in screenshot 

Then I have added publishUser in CUG exempted principal configuration as below. 

 

When I am logging with publishUser credentials. I should able to see the content as publishUser is added in CUG Exempted principal configuration.

If I login with cugCheckUser credentials I can see content.

 

Why CUG Exempted principal not behaving properly.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by lukasz-m

Hi @akshaybhujbale,

It's not working because you are using deprecated configuration. According to the documentation:

Instead of Adobe Granite Closed User Group (CUG) Support (com.day.cq.auth.impl.CugSupportImpl) you should use

Apache Jackrabbit Oak CUG Exclude List (org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugExcludeImpl) to define users/groups you would like to exclude from CUG verification.

1 reply

lukasz-m
Community Advisor
lukasz-mCommunity AdvisorAccepted solution
Community Advisor
May 5, 2023

Hi @akshaybhujbale,

It's not working because you are using deprecated configuration. According to the documentation:

Instead of Adobe Granite Closed User Group (CUG) Support (com.day.cq.auth.impl.CugSupportImpl) you should use

Apache Jackrabbit Oak CUG Exclude List (org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugExcludeImpl) to define users/groups you would like to exclude from CUG verification.