Permissions based on usergroups using components | Community
Skip to main content
kristinas125273
kristinas125273
February 22, 2017
Solved

Permissions based on usergroups using components

  • February 22, 2017
  • 3 replies
  • 2534 views

Hi @all,

we have a few questions regarding permissions based on usergroups using components. Our research could not really answer the questions a way that we are sure with the possibilities given by AEM 6.2.

  1. Which possibilities do we have to restrict usergroups in working with components?
  2. Can we hide a component in sidekick based on usergroup?
  3. Can we hide a component in sidekick based on usergroup and template?
  4. Can we hide a used component from usergroup (author/publish)?
  5. Can we restrict that a usergroup can edit, move or delete an already used component?
  6. Can we restrict that a usergroup can use a page template?

Thanks in advance

Kristina

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Prince_Shivhare

Hey,

please check the link:

https://forums.adobe.com/thread/1097617

Check the comments:

 

On a JCR level this is easily possible, as you can set ACL on every node you want. And your component is also "only" a node. CQ5 itself is not designed to support component level security ootb, the smallest entity you can set ACLs on are pages. The useradmin does not support a granularity of components.So, as a recommendation: Do not try to implement component-based security. Because you will run into  problems you need to handle.

 

* Maintaining ACLs on components (no UI available for this ootb)

* The editmode is not built to handle write-protected components.

 

 

~ Prince

3 replies

Prince_Shivhare
Community Advisor
Prince_ShivhareCommunity AdvisorAccepted solution
Community Advisor
February 22, 2017

Hey,

please check the link:

https://forums.adobe.com/thread/1097617

Check the comments:

 

On a JCR level this is easily possible, as you can set ACL on every node you want. And your component is also "only" a node. CQ5 itself is not designed to support component level security ootb, the smallest entity you can set ACLs on are pages. The useradmin does not support a granularity of components.So, as a recommendation: Do not try to implement component-based security. Because you will run into  problems you need to handle.

 

* Maintaining ACLs on components (no UI available for this ootb)

* The editmode is not built to handle write-protected components.

 

 

~ Prince

kautuk_sahni
Community Manager
kautuk_sahniCommunity Manager
Community Manager
February 23, 2017


Adding to what Prince has shared, please also have a look at this forum post:

Link:- http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manager.topic.html/forum__bbzx-how_can_i_limitdialo.html

// Component/dialog level permissions are not supported in AEM. The only way that is possible would be for some to add the permissions through the user admin.  Drill down to the nodes in the user admin and take a look, however this is officially not supported by Adobe. 

~kautuk

Kautuk Sahni
kristinas125273
kristinas125273Author
March 6, 2017

Many thanks for your answers. We are first going to try it without restrictions.

Terms & ConditionsAccessibility statement

Loading footer...