Regarding the question on restricting the users from accessing specific paths (assuming you need it on author instance), I can think of achieving it in the following wayCreate product profiles on admin console. These profiles will be synced to the author and appear as user groupsOn AEM author, creat...

 I got to know from wknd tech team that the request  was hitting the line https://github.com/adobe/aem-guides-wknd/blob/main/dispatcher/src/conf.d/available_vhosts/wknd.vhost#L89RewriteRule "^(.*)" - [R=204,L]I got to know that this will be addressed in the upcoming release.

@aanchal-sikka did you find a resolution to this issue? I'm also facing the same error with wknd code deployed on AEM as a cloud. One interesting observation is when I trigger the same post request through Postman /system/sling/login/j_security_check, the request does reach AEM publish and I get a 2...