Permissions for specific groups.

[DanielMa16]

Hello,

Our client has asked us to creat user groups that can only contribute to specific folders of the project ( ie: "/content/war") but can still see the rest of the folders in order to have a guide on how to contribute or even copy components.

The way i have tried to go about it seems very flawed

I understand that using denies and allows on folders in the same path is a no go? since it seems to be causing issues.

How should i approach it? the idea is that a contributor user in this group can replicate, write and overall manage the content inside "/content/adp" "/content/dam/adp" and "/content/experience-fragments/adp-fragments" but only read the rest of the content in the project.

Thanks in advance!

Best Regards.

Daniel

[narendiran_ravi]

Hi @DanielMa16 ,

You can handle this by providing the permission as below:

/content  - jcr:read

/content/adp -  jcr:versionManagement, jcr:read, crx:replicate, rep:write, jcr:lockManagement

/content/dam/adp - jcr:versionManagement, jcr:read, crx:replicate, rep:write, jcr:lockManagement

/content/experience-fragments/adp-fragments - jcr:versionManagement, jcr:read, crx:replicate, rep:write, jcr:lockManagement

[MukeshYadav_]

Hi @DanielMa16 ,

You can create GroupA with access of read, write, replicate (all) for path /content/dam/a and read only permission to GroupB

and same way GroupB have read, write, replicate (all) for path /content/dam/b but GroupA will have read only permision for path content/dam/B and other pat apart from /content/dam/a

You may refere https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/allowing-access-to-page-pr...

https://experienceleague.adobe.com/en/docs/experience-manager-65/content/security/security

https://experienceleague.adobe.com/en/docs/experience-manager-learn/cloud-service/accessing/aem-user...

http://localhost:4502/useradmin

Thanks