acs-aem-tools
acs-aem-tools copied to clipboard
Tool to find difference between ACL & PermissionStore
Basically to address [1]. POC at
-
Install the attach package. https://files.acrobat.com/a/preview/bae5d7f1-3480-4eae-8b06-d7b476bc495c
-
Login as admin and Get the output of below resources http://host:port/apps/day/support/scripts/acljson/run.jhtml http://host:port/apps/day/support/scripts/acljson/run.html
-
Compare the output using http://jsondiff.com/. Only missing piece is convert privileges bits into string array. Example the permission store /jcr:system/rep:permissionStore/crx.default/recs-deleted-products-listener-service/524162640/0/@rep:privileges has a value 1279. When converted should get ["jcr:read","rep:write”] .
-
Other things to consider are [2].
[1] https://issues.apache.org/jira/browse/OAK-1448
[2]
- convert privileges bits into string array
- Provide more filter options.