Handling GDPR Requests for the AEM Foundation

Search
User Guide

On this page

在中国购买的 Creative Cloud 产品不含 CC 桌面应用程序中的 Creative Cloud 移动应用程序和在线服务及相关功能。

You're viewing help content for version:

AEM Foundation GDPR support

At the AEM Foundation level, the Personal Data that is stored is the User Profile. Therefore, the information in this article primarily addresses how to access and delete user profiles, to address the GDPR Access and Delete requests respectively.

 

Accessing a User Profile

Manual Steps

  1. Open the User Administration console, by browsing to Settings - Security - Users or by browsing directly to http://serveraddress:serverport/libs/granite/security/content/useradmin.html

    useradmin2

  2. Then, search for the user in question by typing the name in the search bar at the top of the page:

    usersearch

  3. Finally, open the user profile by clicking it, then check under the Details tab.

    userprofile_small

HTTP API

As mentioned, Adobe provides APIs for accessing user data, in order to facilitate automation. There are several types of APIs which you can use:

UserProperties API

curl -u user:password http://localhost:4502/libs/granite/security/search/profile.userproperties.json\?authId\=cavery

Sling API

Discovering the user home:

curl -g -u user:password 'http://localhost:4502/libs/granite/security/search/authorizables.json?query={"condition":[{"named":"cavery"}]}'
     {"authorizables":[{"type":"user","authorizableId_xss":"cavery","authorizableId":"cavery","name_xss":"Carlene Avery","name":"Carlene Avery","home":"/home/users/we-retail/DSCP-athB1NYLBXvdTuN"}],"total":1}

Retrieving user data


Using the node path from the home property of the JSON payload returned from the above command:

curl -u user:password  'http://localhost:4502/home/users/we-retail/DSCP-athB1NYLBXvdTuN/profile.-1.json'
curl -u user:password  'http://localhost:4502/home/users/we-retail/DSCP-athB1NYLBXvdTuN/profiles.-1.json'

Disabling a User and Deleting the Associated Profiles

Disable User

  1. Open the User Administration console and search for the user in question, as described above.

  2. Hover over the user and click the select icon. The profile will turn grey indicating that it is selected.

  3. Press the Disable button in the upper menu to disable the user:

    userdisable

  4. Fianlly, confirm the action:

    image2018-2-6_1-40-58

    The user interface will then indicate that the user has been deactivated by greying out and adding a lock to  the profile card:

    disableduser

Delete User Profile Information

  1. Log in to CRXDE Lite, then search for the userId:  

    image2018-2-6_1-57-11

  2. Open the user node which is located under /home/users by default:

    image2018-2-6_1-58-25

  3. Delete profile nodes and all their children. There are two formats to the profile nodes, depeding on the AEM version:

    1. The default private profile under /profile
    2. /profiles, for new profiles created using AEM 6.4.
    image2018-2-6_2-0-4

HTTP API

The following procedures use the curl command line tool to illustrate how to disable the user with the cavery userId and delete her profiles available at the default location.

  • Discovering the user home
curl -g -u user:password 'http://localhost:4502/libs/granite/security/search/authorizables.json?query={"condition":[{"named":"cavery"}]}'
     {"authorizables":[{"type":"user","authorizableId_xss":"cavery","authorizableId":"cavery","name_xss":"Carlene Avery","name":"Carlene Avery","home":"/home/users/we-retail/DSCP-athB1NYLBXvdTuN"}],"total":1}
  • Disabling the user

Using the node path from the home property of the JSON payload returned from the above command:

curl -X POST -u user:password -FdisableUser="describe the reasons for disabling this user (GDPR in this case)" 'http://localhost:4502/home/users/we-retail/DSCP-athB1NYLBXvdTuN.rw.userprops.html'
  • Deleting user profile(s)

Using the node path from the home property of the JSON payload returned from the account discovery command and the known out of the box profile node locations:

curl -X POST -u user:password -H "Accept: application/json,**/**;q=0.9" -d ':operation=delete' 'http://localhost:4502/home/users/we-retail/DSCP-athB1NYLBXvdTuN/profile'
curl -X POST -u user:password -H "Accept: application/json,**/**;q=0.9" -d ':operation=delete' 'http://localhost:4502/home/users/we-retail/DSCP-athB1NYLBXvdTuN/profile'

This work is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported License  Twitter™ and Facebook posts are not covered under the terms of Creative Commons.

Legal Notices   |   Online Privacy Policy