What are the aggregate privilege rep:write contains?

[karthick1356]

I have a use case where i need to restrict the custom group for deleting the page. And also custom group should be able author the pages like adding components and removing the those. I'm using repo init script for this restriction. the issue is when i try to restrict group for deletion its also disabling the modification.

[Love_Sharma · Accepted solution]

Try using below combination

jcr:read\,jcr:versionManagement\,jcr:modifyProperties\,jcr:addChildNodes\,jcr:lockManagement\,jcr:nodeTypeManagement

And JFYI, below is the mapping for permissions (might help)

"READ": ["jcr:read"]

"MODIFY": ["jcr:modifyProperties","jcr:lockManagement","jcr:versionManagement","jcr:removeChildNodes","jcr:removeNode","jcr:addChildNodes","jcr:nodeTypeManagement"]

"CREATE": ["jcr:addChildNodes","jcr:nodeTypeManagement"]

"DELETE": ["jcr:removeChildNodes","jcr:removeNode"]

"READACL": ["jcr:readAccessControl"]

"EDITACL": ["jcr:modifyAccessControl"]

"REPLICATE": [“crx:replicate"]

[milind_bachani]

hi @karthick1356 

You may find this trick useful for your usecase :
https://aemexperience.wordpress.com/2020/03/07/aem-permission-tricks-remove-delete-access-without-im...

Thanks.