Expand my Community achievements bar.

SOLVED

Page Properties Read Only Mode

Avatar

Level 6

Hi Team,

 

Is there any way that only admin group (A) can modify Page Properties whereas other Editors Group (B) only can see them in READ ONLY Mode.

 

I know that using Render Condition, we can show/hide based on user/group. But how to play with Permission to achieve above.

 

BR,

KTNR

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

Restrict write access to a property (example:pageTitle) by following steps

  • Open CRXDE
  • Browse to /content/we-retail/language-masters/en
  • Click on the Access Control tab
  • Click the green plus
  • Select <some_group> as the principal
  • Select Deny
  • Select rep:write as the privilege
  • Open the Advanced section
  • In the rep:glob field enter */pageTitle
  • Click OK
  • Click Save All

If a user from configured group, will try to update pageTitle, they would get following error:

aanchalsikka_0-1670179101562.png

However, they would be able to save other properties


Aanchal Sikka

View solution in original post

4 Replies

Avatar

Community Advisor

Hi @arvind ,

you can give only read permission to the template for the other users through user management and no need to use render conditions to show/hide to certain users, please leverage CUG(closed user group) feature for the same.

User management and administering

CUG

Thank you.

-Sravan

Avatar

Employee Advisor

Page properties are stored in the page/jcr:content node, so you should disallow the privilege "writeProperties" on this node (use wildcard ACLs for it at best, see [1]).

 

[1] https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html

Avatar

Level 6

@Jörg_Hoh @B_Sravan

Thank you for Reply.

But Requirement is "NOT ALL, but only few Page Properties should be in read only mode for GROUP B".

Avatar

Correct answer by
Community Advisor

Restrict write access to a property (example:pageTitle) by following steps

  • Open CRXDE
  • Browse to /content/we-retail/language-masters/en
  • Click on the Access Control tab
  • Click the green plus
  • Select <some_group> as the principal
  • Select Deny
  • Select rep:write as the privilege
  • Open the Advanced section
  • In the rep:glob field enter */pageTitle
  • Click OK
  • Click Save All

If a user from configured group, will try to update pageTitle, they would get following error:

aanchalsikka_0-1670179101562.png

However, they would be able to save other properties


Aanchal Sikka