Why CUG not restricting auther to access the folder when it is not present in CUG?

[akshaybhujbale]

I have added only 2 users into CUG on myfolder.

Logically only 2 users should to access myfolder.

But By using admin credentials I am able to access the myfolder.

Why this so?

Which ACL privilege makes admin to access all content?

[sdouglasmc]

Administrators group is the exception to CUGs.  By default, if a user is a member of the administrators group, CUGs won't have an effect on them. 

[akshaybhujbale]

Hi @sdouglasmc 

But admin is not part of Administrators group

Can we change the name of administrators group name in AEM.

[Mohit_KBansal]

Admin user is a superuser, who can perform any action in AEM, so even if you have added any restriction on an action in AEM, admin can also perform this action.

[akshaybhujbale]

so admin will have always name as "admin"? or there could be another name ?

And also how to make any user as admin?

[Mohit_KBansal]

as per jackrabbit documentation [1], "The admin user is always being created. The ID of this user is retrieved from the user configuration parameter PARAM_ADMIN_ID, which defaults to admin."

You can create users and add them to Administrator groups.

[1] https://jackrabbit.apache.org/oak/docs/security/user/default.html

[akshaybhujbale]

@Mohit_KBansal 

Thanks

What is the default name of administrators group ? Can we change the default name of administrators group?

[Mohit_KBansal · Accepted solution]

The default name is "administrators" only, you can change the name, but not id.