AEM - Restricting CRXDE Access for few users

In AEM, CRXDE access can be disabled by

 1. Disabling the required bundles 

• Adobe CRXDE Support (com.adobe.granite.crxde-support)
• Adobe Granite CRX Explorer (com.adobe.granite.crx-explorer)
• Adobe Granite CRXDE Lite (com.adobe.granite.crxde-lite)

2. From dispatcher https://helpx.adobe.com/experience-manager/kb/LimitAccessCRXandCRXDE.html

What if CRXDX needs to be disabled/restricted for a few users/groups.

One of the solutions could be to check the user when the user attempts to access CRXDE and block the access or re-route.

Step to Implement the above approach :

1. Create a Sling Filter to check the CRXDE access request.

2. Create an OSGi configuration and service to maintain restriction data(Users, groups, excluded user)

3. Create a clientlibs to re-route the user to another page while accessing CRXDE.

In the Sling Filter get the current user and check against service configuration and if found then replace/redirect one of the existing js to our custom clientlibs js.

Custom clientlibs will then take care of blocking CRXDE.

OSGi Configuration

Custom Clientlibs

Create a clientlibs with redirection code 

window.location="/aem/start.html"

You can find the code at : 
https://github.com/arunpatidar02/aem63app-repo/tree/master/java/crxde