Expand my Community achievements bar.

Learn about Edge Delivery Services in upcoming GEM session

Does OOTB ACL Setup Service support rep:glob directives

Avatar

Adobe Champion

We are especially looking to leverage rep:glob directives as documented in  

https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html

 

The most interesting feature in my opinion is the rep:glob="" directive which would restrict my ACE to the particular node. Is this supported ? 

 

The service configuration provides the following default tip 

Defines an ACL rule of the format: ( "allow" | "deny" ) ";" ( privileges | "inherit" ) ";" principal ";" path (cq.aclsetup.rules)

1 Reply

Avatar

Level 1

Found an answer to this in the OOTB configs. Hope this helps!

cq.aclsetup.rules.7=["allow;jcr:read;everyone;/apps;rep:glob\=*/widgets/*"]

cq.aclsetup.rules.3=["allow;jcr:read;everyone;/libs;rep:glob\=*/widgets/*"]

cq.aclsetup.rules.2=["allow;jcr:read;everyone;/libs;rep:glob\=*/widgets"]