AEM dialog field restrictions to Group or Users

 A Granite Render Condition is a way of conditionally rendering a component in an AEM Touch UI dialog.

User case: A set of AEM dialog fields need to be restrcited to a group of AEM users 

Below is the Example for Custom Render Condition 

Lets create a Sling model 

import com.adobe.granite.ui.components.rendercondition.RenderCondition;
import com.adobe.granite.ui.components.rendercondition.SimpleRenderCondition;
import org.apache.jackrabbit.api.security.user.Authorizable;
import org.apache.jackrabbit.api.security.user.Group;
import org.apache.jackrabbit.api.security.user.UserManager;
import org.apache.sling.api.SlingHttpServletRequest;
import org.apache.sling.api.resource.ResourceResolver;
import org.apache.sling.models.annotations.Model;
import org.apache.sling.models.annotations.injectorspecific.Self;
import org.apache.sling.models.annotations.injectorspecific.SlingObject;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.annotation.PostConstruct;
import javax.inject.Inject;
import javax.jcr.RepositoryException;
import java.util.Arrays;
import java.util.Iterator;
import java.util.List;

@Model(adaptables = SlingHttpServletRequest.class)
public class UserGroupRenderCondition {

   /**
    * The Constant LOGGER.
    */
   private static final Logger LOGGER = LoggerFactory.getLogger(UserGroupRenderCondition.class);

   @Self
   private SlingHttpServletRequest request;

   @SlingObject
   private ResourceResolver resourceResolver;

   @Inject
   private String groups;

   @PostConstruct
   public void init() {
      List<String> allowedGroups = Arrays.asList(groups.split(","));
      LOGGER.info("allowedGroups ", allowedGroups.toString());
      UserManager userManager = resourceResolver.adaptTo(UserManager.class);
      if (userManager == null) {
         return;
      }
      boolean belongsToGroup = false;
      try {
         Authorizable currentUser = userManager.getAuthorizable(resourceResolver.getUserID());
         Iterator<Group> groupsIt = currentUser.memberOf();
         while (groupsIt.hasNext()) {
            Group group = groupsIt.next();
            String groupId = group.getID();
            if (allowedGroups.stream().anyMatch(g -> g.equals(groupId))) {
               belongsToGroup = true;
               break;
            }
         }
      } catch (RepositoryException e) {
         LOGGER.error("Exception in UserGroupRenderCondition ", e);
      }
      request.setAttribute(RenderCondition.class.getName(),
            new SimpleRenderCondition(belongsToGroup));
   }
}

Below is the sightly html code which need to be loaded into our project. The file will be created in below location

/apps/mysite/renderconditions/user-group/user-group.html

and copy below code

<sly data-sly-use="com.sample.aem.core.models.UserGroupRenderCondition"></sly>

Now let's try adding below granite:rendercondition in our AEM dialog fields at below example

<title
    jcr:primaryType="nt:unstructured"
    sling:resourceType="granite/ui/components/coral/foundation/form/textfield"
    fieldLabel="Title"
    name="./title">
    <granite:rendercondition
            jcr:primaryType="nt:unstructured"
            sling:resourceType="/apps/mysite/renderconditions/user-group"
            groups="Group_1,Group_2"/>

</title>

Outcome : From above example we can hide the Title field in AEM dialog to Group_1 & Group_2 users