I'm setting up a closed user group (CUG), which seems to be working well. The problem is that the application is still in development and gets redeployed often. Everytime this happens, the CUG settings get overwritten. I'm assuming these setting are somewhere in the repository, but my bundle export filter seems to not include them.
Are CUG settings persisted in the repo? If so, where?
I found it. On the page content node, there are three properties: cq:cugEnabled, cq:cugLoginPage, and cq:cugPrincipals. But there is also information writen into the rep:policy, specifying permissions for the principals named in the cq:cugPrincipals property.