Unable to move tag back to original location in AEMaaCS

Description description

Environment

  • Product: Adobe Experience Manager Sites on Cloud Service (AEMaaCS) - Sites
  • Instance: Production

Issue/Symptoms

  • Moving a tag back to its original location fails with Permissions Denied error.
  • The operation fails with a Permissions Denied error.
  • Admin users can move the tags without issues.
  • The issue affects tags with active references.

Cause

When a tag is moved, AEM updates internal metadata and references at /content/cq:tags, including properties like cq:movedTo and cq:backlinks. These updates require broader permissions than those typically granted within subfolders such as /content/cq:tags/xx. Without sufficient access at /content/cq:tags, AEM cannot complete these updates, resulting in a Permissions Denied error.

Resolution resolution

  1. Identify the affected user or group that’s unable to move the tag.
  2. Check current permissions on /content/``cq:tags for that user or group.
  3. Grant rep:write and jcr:read privileges at /content/``cq:tags.

When a tag is moved, AEM updates metadata like cq:movedTo and cq:backlinks under /content/cq:tags. These updates need broader permissions than those set on subfolders. Without access at the parent level, the operation fails with a Permissions Denied error.

Granting the required permissions allows AEM to update all necessary metadata during both forward and reverse tag moves.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f