Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>I found one alternative I hadn't considered before: using the Day CQ ACL Setup Service. It is mentioned at <a href="http://dev.day.com/docs/en/cq/5-5/developing/security_model_changes.html" rel="nofollow">http://dev.day.com/docs/en/cq/5-5/developing/security_model_changes.html</a>.</p> <p>AclSetupService allows one to add permission to a single path or a given user/group. This will be applied on each restart of CQ to guaranteed a certain permission state within CQ. For example, "allow;inherit;everyone;/" prevent everyone from accessing CQ (i.e. it forces all users to login first). As noted in the description of AclSetupService, you will need the following pattern per entry:</p> <p>( "allow" | "deny" ) ";" ( privileges | "inherit" ) ";" principal ";" path</p> <ol> <li>Choose either "allow" or "deny" for the first part.</li> <li>Next enter one of the privilege below or set it to inherit permission from ancestor.</li> <li>Then enter a single user/group.</li> <li>Finally enter a single path to apply the permission to.</li> </ol> <p>Using this will replace permission set within the repository when you restart CQ. These could be scripted by using the process outlined <a href="http://dev.day.com/docs/en/cq/current/deploying/configuring_osgi.html#OSGi%20Configuration%20in%20the%20Repository" rel="nofollow">here</a> and <a href="http://dev.day.com/docs/en/cq/current/deploying/configure_runmodes.html" rel="nofollow">here</a>.</p> <p>Privileges can be:<br> jcr:read<br> rep:write<br> jcr:all<br> crx:replicate<br> imp:setComplete<br> jcr:addChildNodes<br> jcr:lifecycleManagement<br> jcr:lockManagement<br> jcr:modifyAccessControl<br> jcr:modifyProperties<br> jcr:namespaceManagement<br> jcr:nodeTypeDefinitionManagement<br> jcr:nodeTypeManagement<br> jcr:readAccessControl<br> jcr:removeChildNodes<br> jcr:removeNode<br> jcr:retentionManagement<br> jcr:versionManagement<br> jcr:workspaceManagement<br> jcr:write<br> rep:privilegeManagement </p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload