Here is the reply from our team:
- Will the passwords of users also be synced when installing the ACL package?
[DG] Not unless the checkbox to “include principals” is selected when packaging up the ACLs. That will also include the rep:principal nodes (passwords and everything else) in the package.
2. Any ways to create a user sync between author and publisher which are in the same environment?
[DG] Perhaps Sling Content Distribution would be helpful? IIRC there is some documentation for this on docs as part of communities. Also, often that sync is 1 way; pub -> author; seems strange having author users synced to pub. Usually those users would register/login.
You can always replicate users, or package them up (ACS Commons Authorizable Packager) and push that package. You can automate the package push via https://adobe-consulting-services.github.io/acs-aem-commons/features/automatic-package-replicator/index.html
3. Any other best method to handle this use-case.?
[DG] Feels like details are missing in the use case (truly bi-directional? Real-time? Scheduled? One time/manual?).. but see above.