Problem - User/Groups "deny" permission overlapping "allow" permission

[VeenaVikraman]

How to remove a users/groups deny permission ?

I had faced this similar situations long time back and drafted the solution somewhere in my mail and forgot about it. But again today I faced a similar situation and the I bugged the internet to get a solution but with very less help. I couldn't find the exact solution except for few pointers here and there. So I went back and dig out all my old mails .

I know many of you might have ended up in a similar situation where you by mistake "checked and unchecked" a permission which set a deny permission and this overlapped with another permission ending up in not letting the user access the content which he was supposed to access. Adding this solution here for those who might search the web for a solution for similar problem

[VeenaVikraman]

BEST PRACTICES

The following describes best practices when working with permissions and privileges: https://docs.adobe.com/docs/en/cq/5-6-1/administering/security.html#Best Practices

• Once u set a permission and uncheck it ; it will create a DENY permission in the corresponding node. DENY permission will cause trouble when user is assigned in more than one group
• Even if you delete a user/group its permission set on any node will be present as such (So if you create a user/group with same name again the permissions will be automatically set to that user/group)

DELETE rep:Policy set in any node

1. 1.      Select Access Control Editor from crx/explorer

2. Search the path where you have the conflict

3. Select the delete bucket symbol for whichever permissions you want to delete

4.Click apply. Now the settings will be removed for that node Happy working with user settings and permissions

Thanks

Veena

[smacdonald2008]

Great Post!

[kautuk_sahni]

This is really nice thread!! Thanks for sharing!!

~kautuk