Hi Arun, Thanks for the suggestion, unfortunately users do seem to have full permissions on their /home/user/I/xxx node - including preferences ... 

Despite checking "Don't show this again" (even if completing all the slides) the Touch UI wizard (referenced in html with: granite, shell, onboarding, coral3, wizard) does not remember the preference and pops up again every time a page is edited. It's happening in Chrome and Firefox, there's nothing...

I worked with Adobe support and the issue is now resolved! Our parent pom.xml referenced uber-jar 6.5.0.Updating it to match the cfp we're on (i.e. cfp13), as well as removing the <classifier>apis</classifier> block from the uber-jar definition in our parent pom.xml, seems to have resolved the issue...

Hi Arun,  Thanks for your reply. I tried disabling the link checker and while the Profile button now shows up, the link is still invalid and leads to a 404.  The issue beingthe link used is invalid: /libs/granite/security/content/userEditor.html/home/users/x/yyinstead of the correct: /libs/granite/s...

Hi @SantoshSai,Thanks for the info. However, I mentioned I do not want to turn off the link checker just yet.I.e. - "I know it's possible to turn off the link checker, but I'd like to resolve potential issues first."I want to resolve the underlying issue.I assume if I turned off the link checker the...

I have an AEM 6.3 to 6.5.13.0 upgraded instance that's showing a broken link for the profile button under the user's avatar (at top right of TouchUI screen). The link shown in the hover text is invalid - it's missing v2 and the case of userEditor.html also causes the link to break and no Profile but...

Hi Ravi,  I believe all of the calls are anonymous, we're not doing any authenticated content on the publish/dispatcher side. Some forms may be submitted, but nothing is submitted back to AEM. Thanks for your input.  

 I understand the csrf token should not be cached at the dispatcher level. How does this play out when a CDN is in front of the dispatcher? Is it OK for the CDN to cache the csrf token? Would that be a likely configuration by default? Should we instead configure the CDN to forward the tokens back to...

Thanks for sharing your experience Shashi. We would also prefer to do better (per page/per asset) invalidations vs. short-TTL CloudFront caching across-the-board - but until there is an out of the box integration within AEM, this would appear to involve development. As Arun mentioned, https://helpx....

Re: "My problem here is clientlibs are not loading and giving 404 although..."I wonder if you need further rewrites, this doesn't seem to relate exactly to your issue, but we have rewrites similar to:RewriteCond %{REQUEST_URI} !^/(dam|site-name|content|common|etc|apps|dispatcher) RewriteRule ^/(.*) ...