Jahia module that provides utilities related to the access rights
You need to install the Extended Groovy Console
Then, in the console, you will find two prepackaged scripts.
Use this script to dump the roles, as defined in the current server, into a JSON file. You can choose to have the file saved on the file system (server side) or uploaded in the JCR.
You can open the file in your prefered JSON client (Firefox has a native support) if you want to view the roles structure, or use it as the input for the other script.
Use this script to compare the roles defined in your Jahia server with those saved in a JSON file. If some differences are raised, then you can apply them to your Jahia server.
Use a JSON file generated on a Jahia server installed in the same version, and with no customization, in order to check the differences with your own server. You might want to reset a native role to its default state, or restore a deleted role.
Save your current state, then add/remove some permissions to your roles in the administration (native roles or custom). If you are satisfied with the result, then you can save it into a new file, otherwise you can restore your roles in their previous state.
After having validated your new roles structure on a lower environment (UAT), you can save it into a JSON file, and then restore it on your upper environments (preprod, prod).