Log User permission or Group permission changes in AEM 6.5

Question

Hello Community,

I want to log the permission changes at any user level or group level.

My logger is set to debug and these are the classes added.

com.adobe.granite.security.permissions.internal.servlets.PoliciesServlet
com.adobe.granite.security.user.internal.servlets.AuthorizableServlet
com.adobe.granite.security.user.internal.audit

I could see the group/user created/removed but not the permission changes

SureshDhulipudi · Accepted Answer

Did you check the Audit log?

The Audit Log feature in AEM logs all the activities performed in the system, including changes to user and group permissions.

To specifically log permission changes, you might need to create a custom event handler that listens for changes to the rep:policy nodes (which store the permissions) and logs these changes.

kautuk_sahni · Answer

@sateeshre2 Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded