Dynamically node creation in AEM publisher without administrative access | Community
Skip to main content
S
shubhankarb2742
October 16, 2015
Solved

Dynamically node creation in AEM publisher without administrative access

  • October 16, 2015
  • 3 replies
  • 1816 views

I have one scenario to discuss in programatically node creation in JCR with out administrative access.

Is there any way we can create node in publisher , lets say we hit the URL like below via dispatcher

http://example.domain.com/content/project/example.html

and in the component jsp we will write some code to create the node, if not present in Publisher JCR.

Right now the node creation is happening , but only when we logged in the publisher.

I need to create the node , with out logging to JCR .

Can anybody help?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

Hi,

In publish you are acessing the repository using the anonymous user, which does not have any write permission (which is a good thing). So you need to bypass this restriction, and the easiest and most secure way is to create a user, which has write access on the specific area, where you need to write. Nothing more. And then write a service, which uses this user's session to write the data. The service is called from your component.

But: I think, that in your design there are some shortcomings, when you need to create content nodes on publish in a non-UGC context. Carefully review if you can do this in a more controlled manner. Because you open a can of worms, if these write activities are not properly controlled.

kind regards,
Jörg

3 replies

edubey
edubey
October 16, 2015

I think you should probably take a look at comments component in AEM 

There for every comment a node gets created., it uses anonymous user and sing default post servlet. have a look this page

http://localhost:4502/cf#/content/geometrixx-media/en/entertainment/summer-blockbuster-hits-and-misses.html

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
October 16, 2015

Hi,

In publish you are acessing the repository using the anonymous user, which does not have any write permission (which is a good thing). So you need to bypass this restriction, and the easiest and most secure way is to create a user, which has write access on the specific area, where you need to write. Nothing more. And then write a service, which uses this user's session to write the data. The service is called from your component.

But: I think, that in your design there are some shortcomings, when you need to create content nodes on publish in a non-UGC context. Carefully review if you can do this in a more controlled manner. Because you open a can of worms, if these write activities are not properly controlled.

kind regards,
Jörg

smacdonald2008
smacdonald2008
October 16, 2015

You can create a Sling Servlet and bind it to the resource that is rendered at that URL. In the Sling Servlet - you can use the JCR API or SLing API to create nodes dynamically. Then make sure that you deploy the OSGi that contains the Sling Servlet to Pub. 

For access to the JCR - make sure that you create a dedicated user account and that account has read/write privileges to the JCR location where you want to create nodes. 

Terms & ConditionsAccessibility statement

Loading footer...