We are especially looking to leverage rep:glob directives as documented in
https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html
The most interesting feature in my opinion is the rep:glob="" directive which would restrict my ACE to the particular node. Is this supported ?
The service configuration provides the following default tip
Defines an ACL rule of the format: ( "allow" | "deny" ) ";" ( privileges | "inherit" ) ";" principal ";" path (cq.aclsetup.rules)
Views
Replies
Total Likes
Found an answer to this in the OOTB configs. Hope this helps!
cq.aclsetup.rules.7=["allow;jcr:read;everyone;/apps;rep:glob\=*/widgets/*"]
cq.aclsetup.rules.3=["allow;jcr:read;everyone;/libs;rep:glob\=*/widgets/*"]
cq.aclsetup.rules.2=["allow;jcr:read;everyone;/libs;rep:glob\=*/widgets"]
Views
Replies
Total Likes