The Access Control Tool for Adobe Experience Manager (ACTool) simplifies the specification and deployment of complex [Access Control Lists in AEM] (http://docs.adobe.com/docs/en/cq/current/administering/security.html#Access%20Control%20Lists%20and%20how%20they%20are%20evaluated). Instead of existing solutions that build e.g. a content package with actual ACL nodes you can write simple configuration files and deploy them with your content packages.
Features:
- compatible with AEM 6.x and CQ 5.6.1
- easy-to-read Yaml configuration file format
- run mode support
- automatic installation with install hook
- cleans obsolete ACL entries when configuration is changed
- ACLs can be exported
- stores history of changes
- ensured order of ACLs
- built-in expression language to reduce rule duplication
The ACTool requires Java 7 and AEM 6.0 - 6.2 or CQ 5.6.1 (min. SP2).
The package is available via Maven. Install it e.g. via CRX package manager.
<groupId>biz.netcentric.cq.tools.accesscontroltool</groupId>
<artifactId>accesscontroltool-package</artifactId>
In case you run AEM 6 with Oak (required as of 6.1) we recommend to install the Oak index package. It will speed up installation of ACLs.
You can get the ZIP file via Maven. Install it e.g. via CRX package manager.
<groupId>biz.netcentric.cq.tools.accesscontroltool</groupId>
<artifactId>accesscontroltool-oakindex-package</artifactId>
You need to setup Yaml configuration files to specify your users, groups and ACL entries. See also the best practices for hints on structuring.
There are also some advanced configuration options supported such as loops, conditional statements and permissions for anonymous.
There are multiple options to apply the ACL entries (e.g. install hook, JMX and upload listener) to your target system.
The JMX interface provides utility functions such as installing and dumping ACLs or showing the history.
A history object collects messages, warnings, and also an exception in case something goes wrong. This history gets saved in CRX under /var/statistics/achistory. The number of histories to be saved can be configured in the history service.
If needed you can build the ACTool yourself.
The ACTool is licensed under the Eclipse Public License - v 1.0.