Hi One can protect the following URL, which displays the data repository sitetree http://127.0.0.1:8080/yanel/MY_REALM/yanel/data-repository-sitetree.html but if one allows access, then one can see the whole sitetree and not just the parts which one has actually access to it, right? Thanks Michi