Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

SOLVED

Question reagarding Permissions in AEM

NitinTA
Level 2
Level 2

Hi Experts,

 

We have a requirements where user need to select the tag with their own name  and they should not be able to select any other Tag.

 

So for example lets say we have Tag Structure as

Franchisor-> Franchisee-> Agents. Now Agent A should only be able to select the Tag Which is at Level 3 and that too only its own Tag. So Basically they should NOT be able to select "Franchisor", NOR Franchisee and Under Agents only its own Tag.

 

How can we implement the Security for this kind of requirement?

 

Thanks,

Nitin

 

 

 

1 Accepted Solution
SivaPrasadReddyS
Correct answer by
Level 8
Level 8

@NitinTA , where do you want to restrict the access for the user? is it at component level or Tag admin console? 

View solution in original post

4 Replies
SantoshSai
Level 5
Level 5

Hi @NitinTA 

 

You can create custom folder structure for each such tags and place them in that, rest is all about permissions to the user/group level access however you need.
Hope this helps!

 

Thanks!

SivaPrasadReddyS
Correct answer by
Level 8
Level 8

@NitinTA , where do you want to restrict the access for the user? is it at component level or Tag admin console? 

View solution in original post

SivaPrasadReddyS
Level 8
Level 8

If you have below kind of structure and wanted to restrict access to only child level, then it's not possible.

 

Franchisor-> Franchisee-> Agents -> Agent A

Franchisor-> Franchisee-> Agents -> Agent B

Franchisor-> Franchisee-> Agents -> Agent C

 

you can't just enable permissions at particular (Agent A) tag level, for example, If you want to provide access to  Agent A (for only tag called Agent A) then he should also have access at the parent level ( Franchisor-> Franchisee-> Agents ->  ) which means, he would be able to select any of other tags like Franchisor orFranchisee or Agents as well along with tag AgentA which is not your requirement 😞 

 

Even with above approach, you need to provide access at User level which is not the best option. May be you can divide the agents into different category groups and manage access at group level but you can't achieve what you're expecting. 

 

I would say, it's better to instruct AEM user to select appropriate tag.

 

Hope this info helps you.