NetCentric's actool-service has no ACL in Permission

[aemUser2345]

We installed netcentric ac tool in the AEM Cloud as a Service. The installhook has applied the ac tool successfully based on the log. But when we checked the permissions, actool-service shows no entries of principal. Is this expected? 

[anupampat]

Hi @aemUser2345 ,

You will have to explicitly add jcr:all to the root - refer https://github.com/Netcentric/accesscontroltool

Thanks.

[aemUser2345]

Thanks for the reply. A couple questions:

1. I am using AEM Cloud as a Service, is this still the requirement that i need to manually add this in the permission? I thought NetCentric can add via installhook.

2. In the link you referenced: accesscontroltool/accesscontroltool-package/src/main/jcr_root-cloud/apps/netcentric/actool/config/or...

It says I need to add jcr:all in :repository. But I cannot find this path ":repository" in crxde. Is this expected?

scripts=["create service user actool-service with forced path system/cq:services/actool
set principal ACL for actool-service
allow jcr:all on /
allow jcr:all on :repository
end
"]