To achieve this, you will need to provide read access to just the DAM folder, its properties and then allow read permission to folders below DAM. Add allow node with rep:glob="", rep:privileges= "jcr:read, jcr:readAccessControl", rep:principalName="group_name" under /content/dam .Add allow node with...