@kalyanar Shouldn't this be the `anonymous` resourceResolver? If a logged in user (with access to non-public pages) hits this servlet, could a sitemap of non-public pages listed in it get cached in dispatcher? Or am i missing something? This feels like too expensive of a page to not cache.

I can't think of a real use case where you'd want non-anonymously accessible content in a sitemap.xml?

This of course would result in empty sitemaps on author but then again, sitemap.xml's arent useful there.