Revoke Experience Manager shell ui

[GiovannaFe]

Hi All,

I currently have a business request to revoke access to exp manager ui where an user that currently has only authors and workflow-users permissions allowed, because though this UI this same user is allowed to see and access some links that they should not, such as "Penetration Tests, Universal Editor, tools, permissions and others:

A user can currently access this page just by hitting "Experience Manager", on AEM navigation (witch i'm also not able to hide and revoke access to).

I've tried to use several ACLs to control it, but could not achieve my goal.

Any toughts on how can i customize it?

[TarunKumar]

Hi @GiovannaFe ,

You can fine tune access on specific nodes like /libs, /content) for groups, preventing users from seeing or interacting with sensitive areas through denying privileges like jcr:read, modify, or using Closed User Groups (CUGs) for content. 

In the non-cloud AEM experience you can hide these types of things easily through ACLs by creating a deny for the paths  /libs/wcm/core/content/sites and /libs/cq/core/content/nav/sites to hide Sites, for example.

You can follow below link for more details on it.

Hope it helps!

-Tarun