Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACL viewer issue in AEM #316

Closed
stoerr opened this issue Oct 25, 2023 · 2 comments · Fixed by #317
Closed

ACL viewer issue in AEM #316

stoerr opened this issue Oct 25, 2023 · 2 comments · Fixed by #317
Assignees

Comments

@stoerr
Copy link
Member

stoerr commented Oct 25, 2023

Two problems:

  1. if you set the Nodes Browser tree to unfiltered and go into a rep:policy tree and have the acl viewer open, you get the error e.g. "Error on loading policies - 400 Tree /conf/rep:policy/allow5/rep:restrictions defines access control content."
  2. the ACL viewer does not handle properties with multiple values. E.g. in AEM at /conf/global we get errors like "rep:subtrees:javax.jcr.ValueFormatException: Attempt to retrieve single value from multivalued property"
@stoerr stoerr self-assigned this Dec 7, 2023
@stoerr
Copy link
Member Author

stoerr commented Dec 7, 2023

  1. can be seen as the right thing, so I'll leave it at that. I'm fixing 2., though.

@stoerr
Copy link
Member Author

stoerr commented Dec 7, 2023

After the fix, we get now e.g. in http://localhost:4502/bin/cpm/nodes/security.accessPolicies.effective.json/conf

  {
    "principal": "everyone",
    "path": "/conf",
    "allow": true,
    "privileges": [
      "jcr:read"
    ],
    "restrictions": [
      "rep:subtrees=/global/site-templates/",
      "rep:subtrees=/settings/wcm/",
      "rep:subtrees=/sling:configs/",
      "rep:subtrees=/settings/dam/cfm/models/",
      "rep:subtrees=/settings/graphql/persistentQueries"
    ]
  },

That is not 100% satisfactory, but since this is a rare case that never surfaced, I think it's OK. How to make a nicer display in policiesTab.js out if this is not quite obvious - it now shows

rep:subtrees=/global/site-templates/,rep:subtrees=/settings/wcm/,rep:subtrees=/sling:configs/,rep:subtrees=/settings/dam/cfm/models/,rep:subtrees=/settings/graphql/persistentQueries

but again, it's interpretable and a rare case, and certainly an improvement. 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant