Without getting into details, I suggest you a couple of milestones regarding the permissions management: 1) the administrator user is the only one that can and must access everything with every possible operation. The administrator has even access the Felix OSGi console so do your math. Reducing its...

Talking about the service packs, one of the main problems with them is that you can't effectively uninstall them once they are installed, and in any case removing them it absolutely does not help.You must understand that they are special packages and they have to be handled in a special way. Using t...

You need to adapt the resource to a Node.class Node node = resource.adaptTo(Node.class); to create a child node you can use the "addNode" methods which returns the new created node Node childNode = node.addNode("newNode"); to read it from its parent you can do the following Node childNode = node.get...

If no headers-cache are created in the AEM origin and in the dispatcher, then the CDN is somehow caching it: in this case there might be a problem with the configuration on the CDN layer because it would be a really weird and error-prone behavior to cache even a dynamic request by default. I agree w...

the only way to make the publish agent work by default is to install the publish AEM instance in the localhost, with the port 4503. Assumed that you did that properly, the publish action should work. In any case you can check the publish agent in the author instance here (localhost is by default, if...