Hi Rohit, Thanks for taking a look at the problem.The first option you suggested is already tried out.The second option defeats the purpose of permission sensitive caching, so we can't implement it. We want content to be served from cache while auth checker validates permission from servlet.We tried...