I have checked the session's permission and I reckon this is the issue. Before retrieving the privileges of the child pages (inside buildSiteMap function), I have added these lines: public String buildSiteMap(SlingHttpServletRequest slingRequest, Page rootPage, int siteMapLevels, int currentL...