diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
index cc08de0e..fc789a2b 100644
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -14,6 +14,8 @@ quarkus.ssl.native=true
 
 # cors properties
 quarkus.http.cors=true
+#quarkus.http.cors.exposed-headers=x-total-artifacts,x-total-pages,x-next-page,x-current-pages,x-per-page,last-update
+#quarkus.http.cors.headers=X-Custom,x-next-page
 
 # jwt verification configuration
 mp.jwt.verify.publickey.location=${JWT_PUBLIC_KEY_LOCATION:META-INF/resources/publicKey.pem}
@@ -32,7 +34,7 @@ quarkus.http.auth.policy.role-reader.roles-allowed=reader,writer
 quarkus.http.auth.policy.role-writer.roles-allowed=writer
 
 # set the /config endpoint(s) to reader or admin role
-quarkus.http.auth.permission.read.paths=/config
+quarkus.http.auth.permission.read.paths=/config/*
 quarkus.http.auth.permission.read.policy=role-reader
 
 # set the /engagements/* endpoint(s) to writer for PUT and POST methods