Log User permission or Group permission changes in AEM 6.5

[SateeshRe]

Hello Community,

I want to log the permission changes at any user level or group level.

My logger is set to debug and these are the classes added.

com.adobe.granite.security.permissions.internal.servlets.PoliciesServlet
com.adobe.granite.security.user.internal.servlets.AuthorizableServlet
com.adobe.granite.security.user.internal.audit

I could see the group/user created/removed but not the permission changes

[SureshDhulipudi · Accepted solution]

Did you check the Audit log?

The Audit Log feature in AEM logs all the activities performed in the system, including changes to user and group permissions.

To specifically log permission changes, you might need to create a custom event handler that listens for changes to the rep:policy nodes (which store the permissions) and logs these changes.

[kautuk_sahni]

@SateeshRe Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.