Debugging access controls

CRXDE Lite provides a way to test and evaluate access control on a specific node for a specific user or group (aka principal).

To access the Test Access Control console in CRXDE Lite, navigate to:

  • CRXDE Lite > Tools > Test Access Control …

CRXDE Lite - Test Access Control

  1. Using the Path field, select a JCR Path to evaluate
  2. Using the Principal field, select the user or group to valuate the path against
  3. Tap the Test button

The results display below:

  • Path reiterates the path that was evaluated
  • Principal reiterates the user or group that the path was evaluated for
  • Principals lists all the principals the selected principal is part of.
    • This is helpful to understand the transitive group memberships that may provide permissions via inheritance
  • Privileges at Path lists all the JCR permissions the selected principal has on the evaluated path

Explain Query

Explain Query

Explain Query web-based tool in AEM SDK’s local quickstart, that provides key insights into how AEM interprets and executes queries, and an invaluable tool to ensure queries are being executed in a performant manner by AEM.

Explain Query is located at: