Hi. I'm trying setting privileges on different groups. Each gruop has specific privileges in two root nodes (nt:folder type) /templates /media Nodes already created and all groups too. There are five groups. My intention is that only DESIGNER ("desginers") group can adding child nodes in /templates node For this, i'm using Principal-base ACLs write over DESIGNER group a set of privileges and update acl by its path. This is the i do: get the group as principal: Obtains applicable policies: Create privileges Setting restrictions: And write acl: Now i create user in group DESIGNERS: throws AccesDenied: Can someone help me, pelase? Thanks. -- View this message in context: http://jackrabbit.510166.n4.nabble.com/Setting-privileges-over-groups-using-Principal-base-ACL-tp4656873.html Sent from the Jackrabbit - Users mailing list archive at Nabble.com.