Hi @Mario248 , Check access of crxde (dev only) from both the users (admin and general user) created by cloud manager console. For Project specific permission ( to access content) you need to create groups within AEM environment and add ACLs accordingly.   Thanks Himanshu

Hi @NimashaJain , May I request to be included as an aspirant please.   Thanks Himanshu

Refer https://www.albinsblog.com/2020/10/most-important-security-headers-for-websites.html#.Y89ld3ZBy5c  

Kindly refer https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#specifying-the-http-headers-to-pass-through-clientheaders  

Can you please share the headers mentioned in dispatcher config   # first farm entry (label is not important, just for your convenience) /website { /clientheaders { # List of headers that are passed on }

Is this package  embedded in parent pom file ?      

You can use query to get the list of all the assets from your folder where dam:portalReplicationAction property is set .

Are you modifying OOTB core component?If yes, then i will suggest you to extend it and then add the changes.

Can you share the cq_dialog.xml? 

Can you please explain a bit in detail what exactly you need in terms of monitoring?You can create the page in author and verify the same in publisher instance and via dispatcher.