Search code examples
aemaclaem-6

How to use READ ACL, Edit ACL permissions in AEM?

Am trying to understand what exactly differs the usage of the (READ,MODIFY,CREATE,DELETE) VS (READ ACL, EDIT ACL) permissions in AEM/CQ5.

On surfing internet i found a line "AEM uses an access control list that consists of a list of actions that a user can perform on resources within the system. These actions can include creating a new page in a given path, modify components on an existing page, and replicating data between instances."

Can any one explain this with a good example.?

enter image description here

Solution

  • As per reference link

    Read ACLs - The user can read the access control list of the page or child pages.

    Edit ACL - The user can modify the access control list of the page or any child pages.

    Example to understand details - Create a test user and provided permissions (make this to be part of content-author group, so that user can access aem, instead of manually providing all permissions). On apps folder test user provide both Read and Edit ACLs. On content folder test user provide only Read ACLs permission. When test user logs in a new instance and accesses /useradmin.

    • test user cannot see permissions on other folders, as there is not permission to read ACLs

    • test user can see read only checkboxes on content folder as there is only Read ACLs permission

    • test user can see the checkboxes as editable on apps as user has both Read ACLs and Edit ACLs permissions. Just Edit ACLs doesn't works without Read ACLs.

    enter image description here

    For Create, Modify, Update, Delete - if user has that permission on that node, test user would be able to perform that action on that node.

    ACLs related - If user has read/edit ACL permission, user would be able to read/edit permissions of that node