diff --git a/.gitignore b/.gitignore
index cbd4fe33eaa..8170948c4af 100644
--- a/.gitignore
+++ b/.gitignore
@@ -92,3 +92,7 @@ web/src/main/webapp/data/
 web/src/main/webapp/doc/en
 web/src/main/webapp/doc/fr
 web/src/main/webapp/WEB-INF/data/data/resources/schemapublication
+
+# geonetwork-ui git project
+web/src/main/geonetwork-ui/
+web/node/
diff --git a/core/src/main/java/org/fao/geonet/kernel/setting/Settings.java b/core/src/main/java/org/fao/geonet/kernel/setting/Settings.java
index d4482cdcd7a..d991745de92 100644
--- a/core/src/main/java/org/fao/geonet/kernel/setting/Settings.java
+++ b/core/src/main/java/org/fao/geonet/kernel/setting/Settings.java
@@ -161,6 +161,9 @@ public class Settings {
 
     public static final String MICROSERVICES_ENABLED = "microservices/enabled";
 
+    public static final String GEONETWORK_UI_DATAHUB_CONFIGURATION = "geonetwork-ui/datahub/configuration";
+    public static final String GEONETWORK_UI_DATAHUB_ENABLED = "geonetwork-ui/datahub/enabled";
+
     public static class GNSetting {
         private String name;
         private boolean nullable;
diff --git a/core/src/main/java/org/fao/geonet/web/DatahubFilter.java b/core/src/main/java/org/fao/geonet/web/DatahubFilter.java
new file mode 100644
index 00000000000..6c44cc63603
--- /dev/null
+++ b/core/src/main/java/org/fao/geonet/web/DatahubFilter.java
@@ -0,0 +1,159 @@
+package org.fao.geonet.web;
+
+import org.apache.commons.io.FilenameUtils;
+import org.apache.commons.io.IOUtils;
+import org.apache.http.HttpHeaders;
+import org.apache.log4j.Logger;
+import org.fao.geonet.ApplicationContextHolder;
+import org.fao.geonet.NodeInfo;
+import org.fao.geonet.domain.Source;
+import org.fao.geonet.domain.SourceType;
+import org.fao.geonet.kernel.setting.SettingManager;
+import org.fao.geonet.kernel.setting.Settings;
+import org.fao.geonet.repository.SourceRepository;
+
+import javax.servlet.Filter;
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletContext;
+import javax.servlet.ServletException;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.ByteArrayInputStream;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.nio.file.Files;
+import java.util.stream.Collectors;
+import java.util.stream.Stream;
+import java.util.zip.GZIPOutputStream;
+
+public class DatahubFilter implements Filter {
+    private static final Logger log = Logger.getLogger(DatahubFilter.class);
+
+    @Override
+    public void init(FilterConfig config) {
+    }
+
+    @Override
+    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+        HttpServletRequest req = (HttpServletRequest) request;
+        HttpServletResponse res = (HttpServletResponse) response;
+        ServletContext context = req.getServletContext();
+
+        String reqPath = req.getPathInfo();
+        if (reqPath == null || !reqPath.matches("^/[a-zA-Z0-9_\\-]+/datahub.*")) {
+            chain.doFilter(request, res);
+            return;
+        }
+
+        String isDatahubEnabled = getSettingManager().getValue(Settings.GEONETWORK_UI_DATAHUB_ENABLED);
+        if (!isDatahubEnabled.equals("true")) {
+            res.setStatus(404);
+            return;
+        }
+
+        // a req path will be "/srv/datahub/bla/bla"
+        String[] parts = reqPath.split("/");
+        String portalName = parts[1]; // element at i=0 is empty
+
+        SourceRepository sourceRepository = getSourceRepository();
+        Boolean datahubEnabled = false;
+        if (NodeInfo.DEFAULT_NODE.equals(portalName)) {
+            datahubEnabled = getSettingManager().getValue(Settings.GEONETWORK_UI_DATAHUB_ENABLED).equals("true");
+        } else if (sourceRepository.existsByUuidAndType(portalName, SourceType.subportal)) {
+            datahubEnabled = sourceRepository.findOneByUuid(portalName).getDatahubEnabled();
+        }
+
+        if (!datahubEnabled) {
+            res.setStatus(404);
+            return;
+        }
+
+        String filePath = Stream.of(parts).skip(2).collect(Collectors.joining("/"));
+        File actualFile = new File(context.getRealPath("/" + filePath));
+
+        // fallback to index.html if the file doesn't exist
+        if (!actualFile.exists()) {
+            actualFile = new File(context.getRealPath("/datahub/index.html"));
+
+            // disable cache only for index.html
+            res.setHeader(HttpHeaders.CACHE_CONTROL, "no-cache");
+            res.setHeader(HttpHeaders.PRAGMA, "no-cache");
+            res.setHeader(HttpHeaders.EXPIRES, "0");
+        }
+
+        res.setStatus(200);
+        String extension = FilenameUtils.getExtension(actualFile.getName()).toLowerCase();
+        String contentType;
+        if (extension.equals("js")) {
+            contentType = "text/javascript; charset=UTF-8";
+        } else {
+            contentType = Files.probeContentType(actualFile.toPath());
+        }
+        res.setContentType(contentType);
+
+        InputStream inStream;
+
+        // the config is read from the settings
+        if (actualFile.getName().equals("default.toml")) {
+            inStream = readConfiguration(portalName);
+        } else {
+            inStream = new FileInputStream(actualFile);
+        }
+        OutputStream outStream = res.getOutputStream();
+
+        // handle gzip compression
+        if(req.getHeader(HttpHeaders.ACCEPT_ENCODING).contains("gzip")) {
+            res.setHeader(HttpHeaders.CONTENT_ENCODING, "gzip");
+            outStream = new GZIPOutputStream(outStream);
+        }
+
+        IOUtils.copy(inStream, outStream);
+        outStream.close();
+    }
+
+    private InputStream readConfiguration(String portalName) {
+        String configuration = getSettingManager().getValue(Settings.GEONETWORK_UI_DATAHUB_CONFIGURATION);
+
+        if (!portalName.equals(NodeInfo.DEFAULT_NODE)) {
+            Source portal = getSourceRepository().findOneByUuid(portalName);
+            if (portal != null && !portal.getDatahubConfiguration().isEmpty()) {
+                configuration = portal.getDatahubConfiguration();
+            }
+        }
+
+        /*TomlParseResult toml = Toml.parse(configuration);
+        Map<String, Object> tomlMap = toml.toMap();
+
+        // Force the "gn4_api_url" field to a value including the portal name
+        if (!tomlMap.containsKey("global")) {
+            tomlMap.put("global", Map.of());
+        }
+        Map<String, String> globalSection = (Map<String, String>) tomlMap.get("global");
+        globalSection.put("geonetwork4_api_url", "/geonetwork/" + portalName + "/api");
+
+        TomlWriter tomlWriter = new TomlWriter();
+        configuration = tomlWriter.write(tomlMap);*/
+
+        // remove url & add new one
+        configuration = configuration.replaceAll("\ngeonetwork4_api_url\\s?=.+", "\n")
+                .replace("[global]", "[global]\ngeonetwork4_api_url = \"/geonetwork/" + portalName + "/api\"");
+        return new ByteArrayInputStream(configuration.getBytes());
+    }
+
+    @Override
+    public void destroy() {
+    }
+
+    private SettingManager getSettingManager() {
+        return ApplicationContextHolder.get().getBean(SettingManager.class);
+    }
+    private SourceRepository getSourceRepository() {
+        return ApplicationContextHolder.get().getBean(SourceRepository.class);
+    }
+}
diff --git a/domain/src/main/java/org/fao/geonet/domain/Source.java b/domain/src/main/java/org/fao/geonet/domain/Source.java
index 7fb337745dc..791464d69f9 100644
--- a/domain/src/main/java/org/fao/geonet/domain/Source.java
+++ b/domain/src/main/java/org/fao/geonet/domain/Source.java
@@ -27,6 +27,7 @@
 import org.fao.geonet.domain.converter.BooleanToYNConverter;
 import org.fao.geonet.entitylistener.SourceEntityListenerManager;
 import org.fao.geonet.repository.LanguageRepository;
+import org.hibernate.annotations.Type;
 
 import javax.annotation.Nonnull;
 import javax.persistence.*;
@@ -64,6 +65,9 @@ public class Source extends Localized {
     private Integer groupOwner;
     private Boolean listableInHeaderSelector = true;
 
+    private Boolean datahubEnabled = false;
+    private String datahubConfiguration = ""; // will use the main conf if empty
+
     /**
      * Default constructor.  Required by framework.
      */
@@ -224,6 +228,29 @@ public Source setUiConfig(String uiConfig) {
         return this;
     }
 
+    /**
+     * Only applies to subportal.
+     *
+     * @return
+     */
+    public Boolean getDatahubEnabled() {
+        return datahubEnabled;
+    }
+    public Source setDatahubEnabled(Boolean datahubEnabled) {
+        this.datahubEnabled = datahubEnabled;
+        return this;
+    }
+
+    @Lob
+    @Type(type = "org.hibernate.type.TextType")
+    public String getDatahubConfiguration() {
+        return datahubConfiguration;
+    }
+    public Source setDatahubConfiguration(String datahubConfiguration) {
+        this.datahubConfiguration = datahubConfiguration;
+        return this;
+    }
+
 
     /**
      * Get the date that the source was created.
diff --git a/services/src/main/java/org/fao/geonet/api/sources/SourcesApi.java b/services/src/main/java/org/fao/geonet/api/sources/SourcesApi.java
index 5b50c543e5c..55bee35e903 100644
--- a/services/src/main/java/org/fao/geonet/api/sources/SourcesApi.java
+++ b/services/src/main/java/org/fao/geonet/api/sources/SourcesApi.java
@@ -327,6 +327,8 @@ private void updateSource(String sourceIdentifier,
             entity.setGroupOwner(source.getGroupOwner());
             entity.setServiceRecord(source.getServiceRecord());
             entity.setUiConfig(source.getUiConfig());
+            entity.setDatahubEnabled(source.getDatahubEnabled());
+            entity.setDatahubConfiguration(source.getDatahubConfiguration());
             entity.setLogo(source.getLogo());
             entity.setListableInHeaderSelector(source.isListableInHeaderSelector());
             Map<String, String> labelTranslations = source.getLabelTranslations();
diff --git a/web-ui/src/main/resources/catalog/js/admin/SourcesController.js b/web-ui/src/main/resources/catalog/js/admin/SourcesController.js
index 2a6c5e86e62..746ec1939d0 100644
--- a/web-ui/src/main/resources/catalog/js/admin/SourcesController.js
+++ b/web-ui/src/main/resources/catalog/js/admin/SourcesController.js
@@ -133,7 +133,9 @@
           filter: "",
           serviceRecord: null,
           groupOwner: null,
-          listableInHeaderSelector: true
+          listableInHeaderSelector: true,
+          datahubEnabled: false,
+          datahubConfiguration: ""
         };
         // TODO: init labels
       };
diff --git a/web-ui/src/main/resources/catalog/templates/admin/settings/sources.html b/web-ui/src/main/resources/catalog/templates/admin/settings/sources.html
index a0315d50b0f..85cd4e0fafc 100644
--- a/web-ui/src/main/resources/catalog/templates/admin/settings/sources.html
+++ b/web-ui/src/main/resources/catalog/templates/admin/settings/sources.html
@@ -177,6 +177,28 @@
               <span data-translate="">displayInHeaderSwitcher</span>
             </label>
             <p class="help-block" data-translate="">displayInHeaderSwitcher-help</p>
+
+            <label data-translate="">datahubEnabled</label>
+            <input
+              type="checkbox"
+              name="datahubEnabled"
+              id="datahubEnabled"
+              data-ng-model="source.datahubEnabled"
+            />
+            <p class="help-block" data-translate="">sourceDatahubEnabled-help</p>
+
+            <label data-translate="">datahubConfiguration</label>
+            <textarea
+              data-gn-autogrow=""
+              type="text"
+              name="datahubConfiguration"
+              class="form-control"
+              id="datahubConfiguration"
+              data-ng-model="source.datahubConfiguration"
+            >
+{{source.datahubConfiguration}}</textarea
+            >
+            <p class="help-block" data-translate="">sourceDatahubConfiguration-help</p>
           </form>
 
           <div>
diff --git a/web-ui/src/main/resources/catalog/templates/admin/settings/system.html b/web-ui/src/main/resources/catalog/templates/admin/settings/system.html
index 6adfb7f93a1..f168a1b199e 100644
--- a/web-ui/src/main/resources/catalog/templates/admin/settings/system.html
+++ b/web-ui/src/main/resources/catalog/templates/admin/settings/system.html
@@ -778,6 +778,24 @@ <h4 class="modal-title" data-translate="">
                         data-ng-disabled="!isTranslationProviderSelected"
                       />
 
+                      <input
+                        data-ng-switch-when="geonetwork-ui/datahub/enabled"
+                        type="checkbox"
+                        id="{{s['name']}}"
+                        name="{{s.name}}"
+                        data-ng-model="s.value"
+                      />
+                      <textarea
+                        data-gn-autogrow=""
+                        data-ng-switch-when="geonetwork-ui/datahub/configuration"
+                        type="text"
+                        class="form-control"
+                        id="{{s['name']}}"
+                        name="{{s.name}}"
+                      >
+{{s.value}}</textarea
+                      >
+
                       <!-- Default -->
                       <input
                         data-ng-switch-default=""
diff --git a/web/pom.xml b/web/pom.xml
index 11a53de7522..ee9eacb607b 100644
--- a/web/pom.xml
+++ b/web/pom.xml
@@ -633,6 +633,123 @@
 
   <build>
     <plugins>
+      <!--   DATAHUB INTEGRATION   -->
+
+      <!-- Git clone geonetwork-ui -->
+      <plugin>
+        <groupId>org.codehaus.mojo</groupId>
+        <artifactId>exec-maven-plugin</artifactId>
+        <version>3.3.0</version>
+        <executions>
+          <execution>
+            <id>delete-existing</id>
+            <phase>initialize</phase>
+            <goals>
+              <goal>exec</goal>
+            </goals>
+            <configuration>
+              <executable>rm</executable>
+              <arguments>
+                <argument>-rf</argument>
+                <argument>src/main/geonetwork-ui</argument>
+              </arguments>
+            </configuration>
+          </execution>
+          <execution>
+            <id>checkout-geonetwork-ui</id>
+            <phase>initialize</phase>
+            <goals>
+              <goal>exec</goal>
+            </goals>
+            <configuration>
+              <executable>git</executable>
+              <arguments>
+                <argument>clone</argument>
+                <argument>--branch</argument>
+                <argument>${geonetwork-ui.git.branch}</argument>
+                <argument>https://github.com/geonetwork/geonetwork-ui.git</argument>
+                <argument>src/main/geonetwork-ui</argument>
+              </arguments>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
+      <!--   Install node & npm -> npm install -> npm run build  -->
+      <plugin>
+        <groupId>com.github.eirslett</groupId>
+        <artifactId>frontend-maven-plugin</artifactId>
+        <version>1.15.0</version>
+        <executions>
+          <execution>
+            <!--   Installing node and npm   -->
+            <id>install-node-and-npm</id>
+            <goals>
+              <goal>install-node-and-npm</goal>
+            </goals>
+            <configuration>
+              <nodeVersion>v20.12.2</nodeVersion>
+              <npmVersion>10.7.0</npmVersion>
+            </configuration>
+          </execution>
+          <!--   Install geonetwork-ui dependencies   -->
+          <execution>
+            <id>npm-install</id>
+            <goals>
+              <goal>npm</goal>
+            </goals>
+            <configuration>
+              <arguments>ci --loglevel error</arguments>
+              <workingDirectory>src/main/geonetwork-ui</workingDirectory>
+              <installDirectory>${basedir}</installDirectory>
+            </configuration>
+          </execution>
+          <!--   Build datahub app   -->
+          <execution>
+            <id>npm-build</id>
+            <goals>
+              <goal>npm</goal>
+            </goals>
+            <configuration>
+              <environmentVariables>
+                <NX_DAEMON>false</NX_DAEMON>
+              </environmentVariables>
+              <arguments>
+                run nx -- build datahub --base-href=./
+              </arguments>
+              <workingDirectory>src/main/geonetwork-ui</workingDirectory>
+              <installDirectory>${basedir}</installDirectory>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
+      <!--   Copy of datahub files   -->
+      <plugin>
+        <artifactId>maven-resources-plugin</artifactId>
+        <version>3.1.0</version>
+        <executions>
+          <execution>
+            <id>copy-resources</id>
+            <phase>generate-resources</phase>
+            <goals>
+              <goal>copy-resources</goal>
+            </goals>
+            <configuration>
+              <overwrite>true</overwrite>
+              <encoding>UTF-8</encoding>
+              <outputDirectory>${build.webapp.resources}/datahub</outputDirectory>
+              <resources>
+                <resource>
+                  <directory>src/main/geonetwork-ui/dist/apps/datahub</directory>
+                  <filtering>false</filtering>
+                </resource>
+              </resources>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
       <!-- Generate a properties file with the commit hash to be displayed on the admin.console -->
 	    <plugin>
         <groupId>io.github.git-commit-id</groupId>
@@ -1395,6 +1512,7 @@
   </profiles>
 
   <properties>
+    <geonetwork-ui.git.branch>main</geonetwork-ui.git.branch>
     <geonetwork.version>${project.version}</geonetwork.version>
     <geonetwork.subversion>SNAPSHOT</geonetwork.subversion>
     <geonetwork.webapp.dir>${basedir}/src/main/webapp</geonetwork.webapp.dir>
diff --git a/web/src/main/webResources/WEB-INF/web.xml b/web/src/main/webResources/WEB-INF/web.xml
index d75022d9890..4d56aae727f 100644
--- a/web/src/main/webResources/WEB-INF/web.xml
+++ b/web/src/main/webResources/WEB-INF/web.xml
@@ -82,6 +82,20 @@
     <url-pattern>/*</url-pattern>
   </filter-mapping>
 
+
+  <!-- Datahub filter -->
+  <filter>
+    <filter-name>datahubFilter</filter-name>
+    <filter-class>org.fao.geonet.web.DatahubFilter</filter-class>
+  </filter>
+
+  <filter-mapping>
+    <filter-name>datahubFilter</filter-name>
+<!--    <url-pattern>/*/datahub*</url-pattern>-->
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
+
+
   <!-- Filter to verify the portal parameter in the URL is a valid portal defined in GeoNetwork.
        If a non-valid value is provided, it redirects to the same URL in the default portal (srv).
   -->
diff --git a/web/src/main/webapp/WEB-INF/classes/setup/sql/migrate/v445/migrate-default.sql b/web/src/main/webapp/WEB-INF/classes/setup/sql/migrate/v445/migrate-default.sql
index 4f2bf012c9d..35028c94497 100644
--- a/web/src/main/webapp/WEB-INF/classes/setup/sql/migrate/v445/migrate-default.sql
+++ b/web/src/main/webapp/WEB-INF/classes/setup/sql/migrate/v445/migrate-default.sql
@@ -4,3 +4,78 @@ UPDATE Settings SET value='SNAPSHOT' WHERE name='system/platform/subVersion';
 INSERT INTO Settings (name, value, datatype, position, internal) VALUES ('system/translation/provider', '', 0, 7301, 'n');
 INSERT INTO Settings (name, value, datatype, position, internal) VALUES ('system/translation/serviceUrl', '', 0, 7302, 'n');
 INSERT INTO Settings (name, value, datatype, position, internal) VALUES ('system/translation/apiKey', '', 0, 7303, 'y');
+
+INSERT INTO Settings (name, value, datatype, position, internal) VALUES ('geonetwork-ui/datahub/enabled', 'false', 2, 7304, 'n');
+INSERT INTO Settings (name, value, datatype, position, internal) VALUES ('geonetwork-ui/datahub/configuration', '
+[global]
+proxy_path = ""
+# metadata_language = "current"
+# login_url = "/cas/login?service=${current_url}"
+# web_component_embedder_url = "/datahub/wc-embedder.html"
+# languages = [''en'', ''fr'', ''de'']
+# contact_email = "opendata@mycompany.com"
+
+[theme]
+primary_color = "#c82850"
+secondary_color = "#001638"
+main_color = "#555"
+background_color = "#fdfbff"
+# header_background = "center /cover url(''assets/img/header_bg.webp'')" or "var(--color-gray-500)"
+# header_foreground_color = ''white''
+# thumbnail_placeholder = ''assets/img/my_custom_placeholder.png''
+# main_font = "''My Custom Font'', fallback-font"
+# title_font = "''My Custom Title Font'', fallback-font-title"
+# fonts_stylesheet_url = "https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Permanent+Marker&display=swap"
+# favicon = "assets/favicon.ico"
+
+[search]
+# filter_geometry_url = "https://my.domain.org/assets/boundary.geojson"
+# filter_geometry_data = ''{ "coordinates": [...], "type": "Polygon" }''
+# advanced_filters = [''publisher'', ''format'', ''publicationYear'', ''topic'', ''isSpatial'', ''license'']
+
+# [[search_preset]]
+#     name = ''filterByName''
+#     filters.q = ''Full text search''
+#     filters.publisher = [''Org 1'', ''Org 2'']
+#     filters.format = [''format 1'', ''format 2'']
+#     filters.documentStandard = [''iso19115-3.2018'']
+#     filters.inspireKeyword = [''keyword 1'', ''keyword 2'']
+#     filters.topic = [''boundaries'']
+#     filters.publicationYear = [''2023'', ''2022'']
+#     filters.isSpatial = [''yes'']
+#     filters.license = [''unknown'']
+#     sort = ''createDate''
+
+[metadata-quality]
+# enabled = true
+
+[map]
+# max_zoom = 10
+# max_extent = [-418263.418776, 5251529.591305, 961272.067714, 6706890.609855]
+# external_viewer_url_template = ''https://dev.geo2france.fr/mapstore/#/?actions=[{"type":"CATALOG:ADD_LAYERS_FROM_CATALOGS","layers":["${layer_name}"],"sources":[{"url":"${service_url}","type":"${service_type}"}]}]''
+# external_viewer_open_new_tab = false
+# do_not_tile_wms = false
+# do_not_use_default_basemap = false
+
+# [[map_layer]]
+# type = "xyz"
+# url = "https://{a-c}.basemaps.cartocdn.com/light_all/{z}/{x}/{y}.png"
+# [[map_layer]]
+# type = "wfs"
+# url = "https://www.geo2france.fr/geoserver/cr_hdf/ows"
+# name = "masque_hdf_ign_carto_latin1"
+# [[map_layer]]
+# type = "geojson"
+# data = """
+# {
+#   "type": "FeatureCollection",
+#   "features": [{"type": "Feature", "geometry": {"type": "Point", "coordinates": [125.6, 10.1]}}]
+# }
+# """
+
+# [translations.en]
+# results.sortBy.dateStamp = "Last time someone changed something"
+# [translations.fr]
+# results.sortBy.dateStamp = "Dernière fois que quelqu''un a modifié quelque chose"
+
+', 0, 7305, 'n');
diff --git a/web/src/main/webapp/WEB-INF/config-security/config-security-mapping.xml b/web/src/main/webapp/WEB-INF/config-security/config-security-mapping.xml
index 1da3e0c5fac..1ee4b251a77 100644
--- a/web/src/main/webapp/WEB-INF/config-security/config-security-mapping.xml
+++ b/web/src/main/webapp/WEB-INF/config-security/config-security-mapping.xml
@@ -89,6 +89,9 @@
           pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/admin.config.csw.customelementset.save!?.*"
           access="hasAuthority('Administrator')"/>
 
+        <sec:intercept-url
+          pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/datahub.*"
+          access="permitAll"/>
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/admin.harvester.list!?.*"
                            access="hasAuthority('UserAdmin')"/>
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/admin.harvester.add!?.*"
@@ -236,7 +239,7 @@
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/atom/describe/service!?.*" access="permitAll"/>
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/atom/describe/dataset!?.*" access="permitAll"/>
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/atom/download/dataset!?.*" access="permitAll"/>
-        
+
         <!-- Metadata identifier templates -->
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/metadataIdentifierTemplates!?.*"
                            access="hasAuthority('Editor')"/>
@@ -255,7 +258,11 @@
                            access="permitAll"/>
         <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/[a-z]{2,3}/getSLD/.*" access="permitAll"/>
 
+        <!-- Datahub endpoint -->
+        <sec:intercept-url pattern="/[a-zA-Z0-9_\-]+/datahub.*" access="permitAll"/>
+
         <sec:intercept-url pattern="/.*" access="denyAll"/>
+
       </sec:filter-security-metadata-source>
     </property>
   </bean>