Expand my Community achievements bar.

Dive into Adobe Summit 2024! Explore curated list of AEM sessions & labs, register, connect with experts, ask questions, engage, and share insights. Don't miss the excitement.
SOLVED

Question reagarding Permissions in AEM

Avatar

Level 2

Hi Experts,

 

We have a requirements where user need to select the tag with their own name  and they should not be able to select any other Tag.

 

So for example lets say we have Tag Structure as

Franchisor-> Franchisee-> Agents. Now Agent A should only be able to select the Tag Which is at Level 3 and that too only its own Tag. So Basically they should NOT be able to select "Franchisor", NOR Franchisee and Under Agents only its own Tag.

 

How can we implement the Security for this kind of requirement?

 

Thanks,

Nitin

 

 

 

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

@NitinTA , where do you want to restrict the access for the user? is it at component level or Tag admin console? 

View solution in original post

4 Replies

Avatar

Community Advisor

Hi @NitinTA 

 

You can create custom folder structure for each such tags and place them in that, rest is all about permissions to the user/group level access however you need.
Hope this helps!

 

Thanks!

Avatar

Correct answer by
Community Advisor

@NitinTA , where do you want to restrict the access for the user? is it at component level or Tag admin console? 

Avatar

Community Advisor

If you have below kind of structure and wanted to restrict access to only child level, then it's not possible.

 

Franchisor-> Franchisee-> Agents -> Agent A

Franchisor-> Franchisee-> Agents -> Agent B

Franchisor-> Franchisee-> Agents -> Agent C

 

you can't just enable permissions at particular (Agent A) tag level, for example, If you want to provide access to  Agent A (for only tag called Agent A) then he should also have access at the parent level ( Franchisor-> Franchisee-> Agents ->  ) which means, he would be able to select any of other tags like Franchisor orFranchisee or Agents as well along with tag AgentA which is not your requirement  

 

Even with above approach, you need to provide access at User level which is not the best option. May be you can divide the agents into different category groups and manage access at group level but you can't achieve what you're expecting. 

 

I would say, it's better to instruct AEM user to select appropriate tag.

 

Hope this info helps you.