Restrictions are not working.

[akshaybhujbale]

Hi I have added rep:glob restriction on "/content/we-retail/us"  as shown in below fig.

When I am login Aem using TestUser credentials I should not able to access /content/we-retail/us as it is in restriction but TestUser able to access. Why this is so?

Please let me know how restriction are working and why it behaving as above in this case.

[arunpatidar · Accepted solution]

Hi,

will allow type with below restriction

rep:glob	Result
/us	‘/content/we-retail/us’ and all it's descendants

Please check details at https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html 

[akshaybhujbale]

Hi @arunpatidar 

Will you please explain little about above usecase.

[akshaybhujbale]

Hi @arunpatidar 

Do you mean I can access all except /content/we-retail/us

[arunpatidar]

Hi,

If you want to deny access then you have to use deny not allow

http://localhost:4502/useradmin will give you the better picture of permissions

[akshaybhujbale]

@arunpatidar 

So what is meaning of restriction.

[arunpatidar]

you can check here https://jackrabbit.apache.org/oak/docs/security/authorization/restriction.html