Question reagarding Permissions in AEM

[NitinTA]

Hi Experts,

We have a requirements where user need to select the tag with their own name  and they should not be able to select any other Tag.

So for example lets say we have Tag Structure as

Franchisor-> Franchisee-> Agents. Now Agent A should only be able to select the Tag Which is at Level 3 and that too only its own Tag. So Basically they should NOT be able to select "Franchisor", NOR Franchisee and Under Agents only its own Tag.

How can we implement the Security for this kind of requirement?

Thanks,

Nitin

[SantoshSai]

Hi @NitinTA 

You can create custom folder structure for each such tags and place them in that, rest is all about permissions to the user/group level access however you need.
Hope this helps!

Thanks!

[Siva_Sogalapalli · Accepted solution]

@NitinTA , where do you want to restrict the access for the user? is it at component level or Tag admin console? 

[NitinTA]

I will be selecting the tags in Content Fragments.

[Siva_Sogalapalli]

If you have below kind of structure and wanted to restrict access to only child level, then it's not possible.

Franchisor-> Franchisee-> Agents -> Agent A

Franchisor-> Franchisee-> Agents -> Agent B

Franchisor-> Franchisee-> Agents -> Agent C

you can't just enable permissions at particular (Agent A) tag level, for example, If you want to provide access to  Agent A (for only tag called Agent A) then he should also have access at the parent level ( Franchisor-> Franchisee-> Agents ->  ) which means, he would be able to select any of other tags like Franchisor orFranchisee or Agents as well along with tag AgentA which is not your requirement  

Even with above approach, you need to provide access at User level which is not the best option. May be you can divide the agents into different category groups and manage access at group level but you can't achieve what you're expecting. 

I would say, it's better to instruct AEM user to select appropriate tag.

Hope this info helps you.