User Access based on Experience Fragments Templates | Community
Skip to main content
June 10, 2020
Solved

User Access based on Experience Fragments Templates

  • June 10, 2020
  • 4 replies
  • 2713 views

Typically AEM allows to have ACL (Access control) based on folder structure and then it by default applies to hierarchy under that node.

 

We have a use case where we want to have access control based on Template of Experience Fragments with the expectations that any content created using that template will have same access control irrespective which folder the content is created.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

That's not possible with AEM ootb. If you have that requirement, your content structure is probably not in-line with the Adobe best practices. Because there access control is a strong factor when you design it.

Can you share some of your requirements which lead you the approach of "create ACL per template"?

 

Jörg

4 replies

sandeepm744005
Level 5
June 10, 2020

You might need to look into below thread. AEM security ACLs are not designed to provide access based on component level.

 

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/permissions-based-on-usergroups-using-components/qaq-p/195367/comment-id/18130

VeenaVikraman
Community Advisor
Community Advisor
June 11, 2020

I don't think that is something achievable OOTB in AEM. But I will check for more expert advice here. 

 

@joerghoh @arunpatidar @theo_pendle @user05162 @kautuk_sahni 

joerghoh
Adobe Employee
joerghohAdobe EmployeeAccepted solution
Adobe Employee
June 11, 2020

That's not possible with AEM ootb. If you have that requirement, your content structure is probably not in-line with the Adobe best practices. Because there access control is a strong factor when you design it.

Can you share some of your requirements which lead you the approach of "create ACL per template"?

 

Jörg

arunpatidar
Community Advisor
Community Advisor
June 11, 2020

I would suggest using the content structure to restrict template and access.

 

Example

/content/experience-fragments/myapp/exp-type1/ (allow only exp-type1 template and use ACL/group to restrict access)

/content/experience-fragments/myapp/exp-type2/ (allow only exp-type2 template and use ACL/group to restrict access)

Arun Patidar