Repoinit not able to set ACL properly in AEM SDK | Not Able to correctly retrieve a Session in AEM
The path /content/dam/aem-showcase/comments is within the /content/dam hierarchy, which is typically used for storing digital assets. It is possible that the permissions for the system user you created do not allow access to this path or its parent folders.
To verify this, you can try creating a test node outside of the /content/dam hierarchy, such as /content/aem-showcase/test, and see if you are able to access it using the system user. If you are able to access the test node, then the issue might be related to the permissions for the /content/dam hierarchy.
If this is the case, you can try updating the permissions for the system user to allow access to the /content/dam hierarchy and its child nodes. You can do this by modifying the repoinit script to include the necessary permissions. For example:
create service user aem-showcase-jcr-service-user with forced path system/cq:services/aem-showcase-jcr-service-user set principal ACL for aem-showcase-jcr-service-user allow jcr:all on /content/dam/aem-showcase allow jcr:all on /content/dam/aem-showcase/comments
Hey Raja, thanks for the reply,
I tried your suggestions and also tried the ones from @Imran__Khan , I tried them all actually.
I've made some changes to my repoinit and here is how it looks like now
{
"scripts": [
"create path /content/dam/aem-showcase(sling:OrderedFolder)",
"create path /content/dam/aem-showcase/jcr:content(nt:unstructured)",
"create path /content/dam/aem-showcase/comments(nt:Folder)",
"create path /content/dam/aem-showcase/comments/jcr:content(nt:unstructured)",
"create service user aem-showcase-jcr-service-user with forced path system/cq:services/aem-showcase-jcr-service-user",
"set ACL for aem-showcase-jcr-service-user\n",
"\tallow jcr:all on /content/aem-showcase\n",
"\tallow jcr:all on /content/aem-showcase/comments\n",
"\tallow jcr:all on /content/dam/aem-showcase\n",
"\tallow jcr:all on /content/dam/aem-showcase/comments\nend",
"set properties on /content/dam/aem-showcase/jcr:content\n set cq:conf{String} to /conf/aem-showcase\n set jcr:title{String} to \"AEM Showcase\"\nend"
]
}
Also I've changed my code just to make sure I was not trying to access some locked node or something, so that is how the code looks like now
package com.aem.showcase.core.services.impl;
import java.util.Collections;
import java.util.List;
import java.util.Map;
import java.util.Objects;
import javax.jcr.Node;
import javax.jcr.PathNotFoundException;
import javax.jcr.Session;
import javax.jcr.nodetype.NodeType;
import org.apache.sling.api.resource.LoginException;
import org.apache.sling.api.resource.ResourceResolver;
import org.apache.sling.api.resource.ResourceResolverFactory;
import org.apache.sling.serviceusermapping.ServiceUserMapped;
import org.osgi.service.component.annotations.Component;
import org.osgi.service.component.annotations.Reference;
import com.aem.showcase.core.pojos.CommentPojo;
import com.aem.showcase.core.services.CommentsService;
@Component(
service = CommentsService.class,
reference = {
@Reference(
name = CommentServiceImpl.SERVICE_ID,
service = ServiceUserMapped.class,
target = "(subServiceName=AEMShowCaseUserJCR)"
)
},
immediate = true)
public class CommentServiceImpl implements CommentsService{
@Reference
ResourceResolverFactory resourceResolverFactory;
protected static final String SERVICE_ID = "AEMShowCaseUserJCR";
@Override
public boolean createComment(CommentPojo commentPojo) {
try (ResourceResolver resolver = resourceResolverFactory.getResourceResolver(getAdminResourceResolverMap())){
Session session = resolver.adaptTo(Session.class);
Node commentsNode = null;
try {
commentsNode = session.getNode("/content/aem-showcase/comments");
} catch (PathNotFoundException e) {
commentsNode = session.getNode("/content/aem-showcase").addNode("comments", NodeType.NT_FOLDER);
}
Node comment = commentsNode.addNode(commentPojo.getId(), NodeType.NT_UNSTRUCTURED);
comment.setProperty("id", commentPojo.getId());
comment.setProperty("content", commentPojo.getContent());
comment.setProperty("created", commentPojo.getCreated());
comment.setProperty("fullName", commentPojo.getFullname());
comment.setProperty("upvote", commentPojo.getUpvote_count());
session.save();
session.logout();
return true;
} catch (Exception e) {
String test = "Just to see the exception";
// TODO: handle exception
}
return false;
}
@Override
public boolean deleteComment(CommentPojo commentPojo) {
// TODO Auto-generated method stub
return false;
}
@Override
public List<CommentPojo> findAll(String fullname) {
// TODO Auto-generated method stub
return null;
}
@Override
public CommentPojo getComment(long id) {
// TODO Auto-generated method stub
return null;
}
Map<String, Object> getAdminResourceResolverMap() {
Map<String, Object> authInfo = Collections.singletonMap(
ResourceResolverFactory.SUBSERVICE, SERVICE_ID);
return authInfo;
}
}
I'm not failing to get an session but I do fail once I try to grab the nodes, I tried grabing it and in case it did not exist (that should be the case in my first attempt given that I did not create the folder this one time using the repoinit) but once I try getting the first node that does exist (the one with the path /content/aem-showcase) it throws an exception saying that the node does not exist as you guys can see in the image down bellow
Also I've tried looking at the /useradmin in order to see if the user had the correct accesses but it looks like the ACLs in that case are not working as you guys can see in the image down bellow:
Please let me know if you guys see any error on my logic, maybe I'm failing to see something, I also kindly ask you guys to try running the code in one of you guys instance just to make sure.
Thanks in advance.
@VasconcelosAquila Did you find the suggestions from users helpful? Please let us know if more information is required. Otherwise, please mark the answer as correct for posterity. If you have found out solution yourself, please share it with the community.
Kautuk Sahni
Related Conversations
