Expand my Community achievements bar.

SOLVED

Page Properties Read Only Mode

Avatar

Level 6

Hi Team,

 

Is there any way that only admin group (A) can modify Page Properties whereas other Editors Group (B) only can see them in READ ONLY Mode.

 

I know that using Render Condition, we can show/hide based on user/group. But how to play with Permission to achieve above.

 

BR,

KTNR

1 Accepted Solution

Avatar

Correct answer by
Level 8

Restrict write access to a property (example:pageTitle) by following steps

  • Open CRXDE
  • Browse to /content/we-retail/language-masters/en
  • Click on the Access Control tab
  • Click the green plus
  • Select <some_group> as the principal
  • Select Deny
  • Select rep:write as the privilege
  • Open the Advanced section
  • In the rep:glob field enter */pageTitle
  • Click OK
  • Click Save All

If a user from configured group, will try to update pageTitle, they would get following error:

aanchalsikka_0-1670179101562.png

However, they would be able to save other properties

4 Replies

Avatar

Community Advisor

Hi @arvind ,

you can give only read permission to the template for the other users through user management and no need to use render conditions to show/hide to certain users, please leverage CUG(closed user group) feature for the same.

User management and administering

CUG

Thank you.

-Sravan

Avatar

Employee Advisor

Page properties are stored in the page/jcr:content node, so you should disallow the privilege "writeProperties" on this node (use wildcard ACLs for it at best, see [1]).

 

[1] https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html

Avatar

Level 6

@Jörg_Hoh @B_Sravan

Thank you for Reply.

But Requirement is "NOT ALL, but only few Page Properties should be in read only mode for GROUP B".

Avatar

Correct answer by
Level 8

Restrict write access to a property (example:pageTitle) by following steps

  • Open CRXDE
  • Browse to /content/we-retail/language-masters/en
  • Click on the Access Control tab
  • Click the green plus
  • Select <some_group> as the principal
  • Select Deny
  • Select rep:write as the privilege
  • Open the Advanced section
  • In the rep:glob field enter */pageTitle
  • Click OK
  • Click Save All

If a user from configured group, will try to update pageTitle, they would get following error:

aanchalsikka_0-1670179101562.png

However, they would be able to save other properties

page footer