Editable Templates - Access on /conf for anonymous user

[rajeev_yadav]

Hi All,

I am trying to develop site using editable templates. These works fine with logged in user on publish but when trying to access the site using anonymous user, page content is not rendered properly. I found out that on giving read permission for anonymous user on /conf folder resolves this issue.

I want to check if this is a good idea/best practice to provide read access on /conf for anonymous user or is there any better approach to resolve this issue?

Thanks,

Rajeev

[arunpatidar · Accepted solution]

Hi,

Its ok to give anonymous user read access to /conf on AEM; but the dispatcher should block any direct access to /conf.

[rajeev_yadav]

Thanks Arun for the confirmation. We are blocking direct /conf access on dispatcher. I was checking this because OOTB permissions on /conf is set to deny all for everyone.

Thanks,

Rajeev

[yogeshVaidya]

As explained by Arun, it is ok to have read access to /conf. Permission to /conf is required because you are probably adding client library through page design hence read permission to /conf(i.e. templates) is required. In cases where component level client libraries are used, permission to /conf is not required.