Georg Henzler

With https://github.com/Netcentric/accesscontroltool/blob/develop/docs/Configuration.md#configuration-of-groups `migrateFrom` you can rename groups while maintaining their members, is it that what you need? Would you like to have an operation that only performs the groups maintenance...

@chetanyajain, to achieve this you can run `java.lang.String execute(java.lang.String paths)` in JMX with a path like `/does-not-exist` which will do all the "group work" but skip the ACEs with a...

> 2. All packages being contained in the complete package are being replicated (asynchronously) doing this in parallel sounds unreasonable... why are packages in this setup installed in parallel? Why...

+1 for improving this and reduce duplication. Probably it would be better to use macros that include even more than the above example: ``` - fragment-restrict-for-everyone: - FUNCTIONALITY_DENIES # if...

@gruberrolandvaltech Not sure if it is the best idea to encourage having production passwords (even if it is only the initial passwords) in the yaml files - do you have...

But what password would you choose? Would it be the same for all users? Then the first user can guess the username of other users and use his initial password...

Hi @tongc, we create the AC configurations for a project in SCM (git) and install it with the software version (often using the install hook to make applying ACLs automatic...

The problem with changing this behaviour now could be that it unexpectedly breaks existing setups - we might still do though but we should mention it in the release notes....

We support runmodes in folder names for AC Tool yaml configuration in the same way as AEM/Sling supports runmode-specific OSGi configs: https://github.com/Netcentric/accesscontroltool/blob/dbb2c88cf4523df756ae32c9832eedb003022e18/docs/Configuration.md#run-modes Therefore currently the package `org.apache.sling.settings` is also used...

The problem with that the JMX console is highly dependent on the configured path - if you run e.g. `apply()` exactly that one configured path will be used. The best...