Remove replicate permission for administrators - AEM 6.4

Avatar

Avatar

skmAem

Avatar

skmAem

skmAem

01-06-2020

Hello AEM Gurus,

 

We have a requirement to prevent everyone (including administrators) from replicating assets from a certain path under /content/dam. I have removed replicate permission for this path (eg /content/dam/testfldr) for all of the groups including the administrators group. But users in this administrators group are still able to replicate the assets under this path. When I see the permissions for administrators in useradmin for /content/dam/testfldr path, it has a *! markup next to the Replicate checkbox. When I hover over that checkbox, it says "Noneffective administrators (deny)" in a modal popup.

 

Is it possible to prevent administrators from replicating assets from certain paths? If setting permission through useradmin is not possible, is there an alternative way to achieve this?

 

Appreciate any help/pointers on this.

-SKM

View Entire Topic

Avatar

Avatar

skmAem

Avatar

skmAem

skmAem

02-06-2020

@hamidk92094312 

When I denied the replicate permission through useradmin, i can see that the deny for crx:replicate action for administrators group in crxde access control tab. Pls see the screenshot. But it still allows a user in the administrators group to replicate assets.Screen Shot 2020-06-02 at 9.58.01 AM.png

 

@Shashi_Mulugu  & @ArpitVarshney , I agree that we should have followed the setup as you mentioned, but unfortunately I recently joined this project and they already have several power users added under administrators group for some reason. How do I work around it? 

 

On this document: https://docs.adobe.com/content/help/en/experience-manager-64/administering/security/security.html they say you set "deny-everyone" on a node, administrators will have to be enabled explicitly to get them the access, what do they mean by "deny-everyone"? Pls see screenshot below:Screen Shot 2020-06-02 at 10.09.16 AM.png

Thanks everyone for your inputs!

-Shridev