Unable to edit workflow model

[VivekSr5]

Hi Team,
When I am trying to edit any workflow in my aem cloud local its throwing below error .
Please help me with this.

Access denied: Invalid path

Cannot serve request to /libs/cq/workflow/admin/console/content/models/openeditor.html in BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)

Request Progress:

      0 TIMER_START{Request Processing}
      6 COMMENT timer_end format is {<elapsed microseconds>,<timer name>} <optional message>
     17 LOG Method=GET, PathInfo=null
     23 TIMER_START{handleSecurity}
   4251 TIMER_END{4225,handleSecurity} authenticator org.apache.sling.auth.core.impl.SlingAuthenticator@3b720354 returns true
  14884 TIMER_START{ResourceResolution}
  15895 TIMER_END{1008,ResourceResolution} URI=/libs/cq/workflow/admin/console/content/models/openeditor.html resolves to Resource=JcrNodeResource, type=cq/workflow/admin/console/components/models/openeditor, superType=null, path=/libs/cq/workflow/admin/console/content/models/openeditor
  15919 LOG Resource Path Info: SlingRequestPathInfo: path='/libs/cq/workflow/admin/console/content/models/openeditor', selectorString='null', extension='html', suffix='null'
  15920 TIMER_START{ServletResolution}
  15928 TIMER_START{resolveServlet(/libs/cq/workflow/admin/console/content/models/openeditor)}
  20257 TIMER_END{4325,resolveServlet(/libs/cq/workflow/admin/console/content/models/openeditor)} Using servlet BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)
  20268 TIMER_END{4347,ServletResolution} URI=/libs/cq/workflow/admin/console/content/models/openeditor.html handled by Servlet=BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)
  20282 LOG Applying REQUESTfilters
  20295 LOG Calling filter: com.adobe.granite.resourceresolverhelper.impl.ResourceResolverHelperImpl
  20307 LOG Calling filter: org.apache.sling.security.impl.ContentDispositionFilter
  20320 LOG Calling filter: com.adobe.granite.csrf.impl.CSRFFilter
  20334 LOG Calling filter: org.apache.sling.i18n.impl.I18NFilter
  20344 LOG Calling filter: com.adobe.granite.httpcache.impl.InnerCacheFilter
  20367 LOG Calling filter: org.apache.sling.rewriter.impl.RewriterFilter
  20373 LOG Calling filter: com.adobe.cq.history.impl.HistoryRequestFilter
  21162 LOG Calling filter: com.day.cq.wcm.core.impl.WCMRequestFilter
  21232 LOG Calling filter: com.day.cq.wcm.msm.impl.MSMRequestFilter
  21242 LOG Calling filter: com.adobe.cq.wcm.core.components.internal.servlets.CoreFormHandlingServlet
  21252 LOG Calling filter: com.adobe.granite.optout.impl.OptOutFilter
  21273 LOG Calling filter: com.day.cq.wcm.foundation.forms.impl.FormsHandlingServlet
  21286 LOG Calling filter: com.day.cq.dam.core.impl.servlet.DisableLegacyServletFilter
  21295 LOG Calling filter: org.apache.sling.engine.impl.debug.RequestProgressTrackerLogFilter
  21300 LOG Calling filter: com.adobe.aem.tutorial.core.filters.LoggingFilter
  21305 LOG Calling filter: com.day.cq.wcm.mobile.core.impl.redirect.RedirectFilter
  21317 LOG Calling filter: com.day.cq.wcm.core.impl.AuthoringUIModeServiceImpl
  21555 LOG Calling filter: com.adobe.granite.rest.assets.impl.AssetContentDispositionFilter
  21565 LOG Calling filter: com.adobe.granite.requests.logging.impl.RequestLoggerImpl
  21585 LOG Calling filter: com.adobe.granite.rest.impl.servlet.ApiResourceFilter
  21702 LOG Calling filter: com.day.cq.dam.core.impl.servlet.ActivityRecordHandler
  21782 LOG Calling filter: com.day.cq.dam.core.impl.assetlinkshare.AdhocAssetShareAuthHandler
  21790 LOG Calling filter: com.day.cq.wcm.core.impl.warp.TimeWarpFilter
  21816 LOG Applying Componentfilters
  21823 LOG Calling filter: com.day.cq.personalization.impl.TargetComponentFilter
  21827 LOG Calling filter: com.day.cq.wcm.core.impl.page.PageLockFilter
  21833 LOG Calling filter: com.day.cq.wcm.core.impl.WCMComponentFilter
  22376 LOG Calling filter: com.day.cq.wcm.core.impl.monitoring.PageComponentRequestFilter
  22388 LOG Calling filter: com.adobe.granite.metrics.knownerrors.impl.ErrorLoggingComponentFilter
  22393 LOG Calling filter: com.adobe.cq.dam.cfm.ui.impl.EditorCacheFilter
  22401 LOG Calling filter: com.day.cq.wcm.core.impl.WCMDebugFilter
  22434 TIMER_START{BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)#0}
  29633 LOG Adding bindings took 200 microseconds
  58081 LOG Applying Error filters
  61841 LOG Calling filter: org.apache.sling.i18n.impl.I18NFilter
  61880 LOG Calling filter: org.apache.sling.rewriter.impl.RewriterFilter
  61893 LOG Calling filter: com.adobe.granite.cors.impl.CORSFilter
  71350 TIMER_START{handleError:status=403}
  73773 TIMER_END{2421,handleError:status=403} Using handler BundledScriptServlet (/libs/sling/servlet/errorhandler/default.jsp)
  77270 LOG Adding bindings took 116 microseconds
 300694 LOG Found processor for config ProcessorConfiguration: {contentTypes=[text/html], processErrorResponse=true, order=-1, active=true, valid=true, pipeline=(generator=Config(type=htmlparser, config={}), transformers=(Config(type=linkchecker, config={}), Config(type=mobile, config={component-optional=true}), Config(type=mobiledebug, config={component-optional=true}), Config(type=contentsync, config={component-optional=true}), serializer=Config(type=htmlwriter, config={}))} : Pipeline Processor (org.apache.sling.rewriter.impl.PipelineImpl@709e6ba8) : generator: Adobe AEM HTML Parser Generator, transformers: [Adobe AEM MetaTag PageId Injection Transformer, Adobe AEM HTML Parser Transformer, com.day.cq.mcm.core.newsletter.NewsletterTransformerFactory$NewsletterTransformer@306c10ea, com.day.cq.rewriter.linkchecker.impl.LinkCheckerTransformer@5ded843b, com.day.cq.wcm.mobile.core.impl.rewriter.MobileTransformer@741fe95a, com.day.cq.wcm.mobile.core.impl.device.DeviceInfoTransformer@77df1f5a, com.day.cq.wcm.contentsync.impl.rewriter.PathRewriterTransformer@2764aa0b], serializer: com.day.cq.rewriter.processor.impl.SAXWriterFactory$1@16192e80
 301516 TIMER_END{301512,Request Processing} Dumping SlingRequestProgressTracker Entries

[VishalKa5]

Hi @VivekSr5 ,

You're seeing this error because you're trying to edit a workflow that lives in the /libs folder — and in AEM as a Cloud Service, anything inside /libs is read-only. That means you can view it, but you can’t make changes to it.

To fix this, you need to make a copy of the workflow and save it under the /conf folder (which is editable). Once you do that, you’ll be able to open and edit it without errors.

This is how AEM Cloud works now — anything you want to change (like workflows) must be stored under /conf, not /libs.

Thanks & Regards,

Vishal

[LuisPrado]

But the same thing happens even with models created from the interface.

I created a testModel and testModel2 model directly from the interface, and the editor does not open either.

Access denied: Invalid path
Cannot serve request to /libs/cq/workflow/admin/console/content/models/openeditor.html in BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)

Request Progress:
      0 TIMER_START{Request Processing}
      3 COMMENT timer_end format is {<elapsed microseconds>,<timer name>} <optional message>
     58 LOG Method=GET, PathInfo=null
     66 TIMER_START{handleSecurity}
   2518 TIMER_END{2449,handleSecurity} authenticator org.apache.sling.auth.core.impl.SlingAuthenticator@4ffd19b7 returns true
   3470 TIMER_START{ResourceResolution}
   3831 TIMER_END{360,ResourceResolution} URI=/libs/cq/workflow/admin/console/content/models/openeditor.html resolves to Resource=JcrNodeResource, type=cq/workflow/admin/console/components/models/openeditor, superType=null, path=/libs/cq/workflow/admin/console/content/models/openeditor
   3920 LOG Resource Path Info: SlingRequestPathInfo: path='/libs/cq/workflow/admin/console/content/models/openeditor', selectorString='null', extension='html', suffix='null'
   3921 TIMER_START{ServletResolution}
   3926 TIMER_START{resolveServlet(/libs/cq/workflow/admin/console/content/models/openeditor)}
   4003 TIMER_END{76,resolveServlet(/libs/cq/workflow/admin/console/content/models/openeditor)} Using servlet BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)
   4009 TIMER_END{87,ServletResolution} URI=/libs/cq/workflow/admin/console/content/models/openeditor.html handled by Servlet=BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)
   4026 LOG Applying REQUESTfilters
   4068 LOG Calling filter: com.adobe.granite.resourceresolverhelper.impl.ResourceResolverHelperImpl
   4086 LOG Calling filter: org.apache.sling.security.impl.ContentDispositionFilter
   4113 LOG Calling filter: com.adobe.granite.csrf.impl.CSRFFilter
   4190 LOG Calling filter: org.apache.sling.i18n.impl.I18NFilter
   4202 LOG Calling filter: com.adobe.granite.httpcache.impl.InnerCacheFilter
   4225 LOG Calling filter: org.apache.sling.rewriter.impl.RewriterFilter
   4230 LOG Calling filter: com.adobe.cq.history.impl.HistoryRequestFilter
   4898 LOG Calling filter: com.day.cq.wcm.core.impl.WCMRequestFilter
   4943 LOG Calling filter: com.day.cq.wcm.msm.impl.MSMRequestFilter
   4949 LOG Calling filter: com.adobe.cq.wcm.core.components.internal.servlets.CoreFormHandlingServlet
   4957 LOG Calling filter: com.adobe.granite.optout.impl.OptOutFilter
   4978 LOG Calling filter: com.day.cq.wcm.foundation.forms.impl.FormsHandlingServlet
   4987 LOG Calling filter: com.day.cq.dam.core.impl.servlet.DisableLegacyServletFilter
   4992 LOG Calling filter: org.apache.sling.engine.impl.debug.RequestProgressTrackerLogFilter
   4995 LOG Calling filter: com.day.cq.wcm.mobile.core.impl.redirect.RedirectFilter
   4999 LOG Calling filter: com.day.cq.wcm.core.impl.AuthoringUIModeServiceImpl
   5370 LOG Calling filter: com.adobe.granite.rest.assets.impl.AssetContentDispositionFilter
   5380 LOG Calling filter: com.adobe.granite.requests.logging.impl.RequestLoggerImpl
   5443 LOG Calling filter: com.adobe.granite.rest.impl.servlet.ApiResourceFilter
   5544 LOG Calling filter: com.day.cq.dam.core.impl.servlet.ActivityRecordHandler
   5584 LOG Calling filter: com.day.cq.dam.core.impl.assetlinkshare.AdhocAssetShareAuthHandler
   5593 LOG Calling filter: com.day.cq.wcm.core.impl.warp.TimeWarpFilter
   5642 LOG Applying Componentfilters
   5647 LOG Calling filter: com.day.cq.personalization.impl.TargetComponentFilter
   5668 LOG Calling filter: com.day.cq.wcm.core.impl.page.PageLockFilter
   5691 LOG Calling filter: com.day.cq.wcm.core.impl.WCMComponentFilter
   5962 LOG Calling filter: com.day.cq.wcm.core.impl.monitoring.PageComponentRequestFilter
   5975 LOG Calling filter: com.adobe.granite.metrics.knownerrors.impl.ErrorLoggingComponentFilter
   5978 LOG Calling filter: com.adobe.cq.dam.cfm.ui.impl.EditorCacheFilter
   5985 LOG Calling filter: com.day.cq.wcm.core.impl.WCMDebugFilter
   6014 TIMER_START{BundledScriptServlet (/libs/cq/workflow/admin/console/components/models/openeditor/openeditor.jsp)#0}
   6647 LOG Adding bindings took 102 microseconds
   7504 LOG Applying Error filters
   7559 LOG Calling filter: org.apache.sling.i18n.impl.I18NFilter
   7566 LOG Calling filter: org.apache.sling.rewriter.impl.RewriterFilter
   7575 LOG Calling filter: com.adobe.granite.cors.impl.CORSFilter
   7589 TIMER_START{handleError:status=403}
   8341 TIMER_END{750,handleError:status=403} Using handler BundledScriptServlet (/libs/sling/servlet/errorhandler/default.jsp)
   8709 LOG Adding bindings took 123 microseconds
  12322 LOG Found processor for config ProcessorConfiguration: {contentTypes=[text/html], processErrorResponse=true, order=-1, active=true, valid=true, pipeline=(generator=Config(type=htmlparser, config={}), transformers=(Config(type=linkchecker, config={}), Config(type=mobile, config={component-optional=true}), Config(type=mobiledebug, config={component-optional=true}), Config(type=contentsync, config={component-optional=true}), serializer=Config(type=htmlwriter, config={}))} : Pipeline Processor (org.apache.sling.rewriter.impl.PipelineImpl@1784b026) : generator: Adobe AEM HTML Parser Generator, transformers: [Adobe AEM MetaTag PageId Injection Transformer, Adobe AEM HTML Parser Transformer, com.day.cq.mcm.core.newsletter.NewsletterTransformerFactory$NewsletterTransformer@5ec9cf4b, com.day.cq.rewriter.linkchecker.impl.LinkCheckerTransformer@1cee590b, com.day.cq.wcm.mobile.core.impl.rewriter.MobileTransformer@451e8a91, com.day.cq.wcm.mobile.core.impl.device.DeviceInfoTransformer@77290794, com.day.cq.wcm.contentsync.impl.rewriter.PathRewriterTransformer@678a2dad], serializer: com.day.cq.rewriter.processor.impl.SAXWriterFactory$1@9420656
  12882 TIMER_END{12880,Request Processing} Dumping SlingRequestProgressTracker Entries

[Vishal_Anand]

Universal solution: Overlay the workflow model from libs and customize as per your business need. 

Note: This is same as overlaying OOTB AEM components and customizing it as per business need in apps.

[kautuk_sahni]

@VivekSr5 Did you find the suggestions helpful? If you need more information, please let us know. If a response resolved your issue, kindly mark it as correct to help others in the future. Alternatively, if you discovered a solution on your own, we'd appreciate it if you could share it with the community. Thank you!

[RobWi6]

I am also seeing this error, I am on Windows, my colleagues on Mac do not see this error. The error.log shows the below:

18.08.2025 16:09:33.377 *ERROR* [[0:0:0:0:0:0:0:1] [1755529773374] GET /libs/cq/workflow/admin/console/content/models/openeditor.html HTTP/1.1] libs.cq.workflow.admin.console.components.models.openeditor.openeditor__002e__jsp Invalid model path detected: \\libs\settings\workflow\models\request_for_deletion_without_deactivation

Note the \\libs - we are using aem-sdk-2025.7.21706.20250723T205632Z-250600 and believe this may be creating a path with an extra backslash? @VivekSr5

@VishalKa5 

[RobWi6]

Adobe have now raised this with Engineering under E-001792359

[salamswapnil]

Hi @VivekSr5 

Looks like this is product issue and we are also facing it with AEM Cloud version 2025.7.21706.20250723T205632Z.

As a workaround, we can still use old editor (AEM 6.5).

e.g. http://localhost:4502/editor.html/libs/settings/workflow/models/request_for_activation.html

Thanks

Swapnil