Blog Aggregator portlet throws an exception for users who have been deleted

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.2.3
• Fix Version/s: 6.1.0 CE RC1
• Component/s: Collaboration > Blogs
• Labels: None
• Environment: Linux, TcServer 6, MySQL 5
• Similar Issues: Show 5 results ; ;

  LPS-28227	Blog Aggregator portlet throws an exception for users who have been deleted
  LPS-5169	Can Not Edit A Thread Created By A User Who Has Been Deleted.
  LPS-714	Blogs Aggregator portlet permissions
  LPS-3430	links in Blogs Aggregator not relative
  LPS-21139	An "Open Script Tag" <script> in the title of a "Blogs Entry" throws Exceptions when viewed

If any of the users who would normally be displayed by the Blog Aggregator portlet have been removed, the portlet throws the following exception:

20:19:12,492 ERROR [IncludeTag:78] Current URL /web/oracle-sun/news generates exception: javax.servlet.ServletException?: com.liferay.portal.NoSuchUserException?: No User exists with the primary key 13205
20:19:12,493 ERROR [IncludeTag:157] com.liferay.portal.NoSuchUserException?: No User exists with the primary key 13205

at com.liferay.portal.service.persistence.UserPersistenceImpl?.findByPrimaryKey(UserPersistenceImpl?.java:680)
at com.liferay.portal.service.impl.UserLocalServiceImpl?.getUserById(UserLocalServiceImpl?.java:1327)
at com.liferay.portal.service.UserLocalServiceUtil?.getUserById(UserLocalServiceUtil?.java:489)
at org.apache.jsp.html.portlet.blogs_005faggregator.view_jsp._jspService(view_jsp.java:985)
at org.apache.jasper.runtime.HttpJspBase?.service(HttpJspBase?.java:70)
at javax.servlet.http.HttpServlet?.service(HttpServlet?.java:717)
at org.apache.jasper.servlet.JspServletWrapper?.service(JspServletWrapper?.java:374)
at org.apache.jasper.servlet.JspServlet?.serviceJspFile(JspServlet?.java:342)
at org.apache.jasper.servlet.JspServlet?.service(JspServlet?.java:267)
at javax.servlet.http.HttpServlet?.service(HttpServlet?.java:717)
at org.apache.catalina.core.ApplicationFilterChain?.internalDoFilter(ApplicationFilterChain?.java:290)
at org.apache.catalina.core.ApplicationFilterChain?.doFilter(ApplicationFilterChain?.java:206)
at org.apache.catalina.core.ApplicationDispatcher?.invoke(ApplicationDispatcher?.java:646)
at org.apache.catalina.core.ApplicationDispatcher?.doInclude(ApplicationDispatcher?.java:551)
at org.apache.catalina.core.ApplicationDispatcher?.include(ApplicationDispatcher?.java:488)
at com.liferay.taglib.util.IncludeTag?.doEndTag(IncludeTag?.java:66)
at org.apache.jsp.html.common.themes.portlet_jsp._jspService(portlet_jsp.java:2844)
at org.apache.jasper.runtime.HttpJspBase?.service(HttpJspBase?.java:70)
at javax.servlet.http.HttpServlet?.service(HttpServlet?.java:717)
at org.apache.jasper.servlet.JspServletWrapper?.service(JspServletWrapper?.java:374)

[Cynthia Wilburn]

Thank you for the report. Can you please help us by evaluating this issue to confirm that it is reproducible in the recently released 6 CE GA and provide this information via a comment on this ticket?

This new release contains hundreds of bug fixes and will be the version under active development by the Liferay team. Tickets reported against 5.2.3 that are fixed in 6.0.5 will be closed in order to keep our ticketing system up-to-date and to help our development team focus on the unresolved issues.

If you are able to reproduce the ticket, please be sure to give us step-by-step directions to repeat the anomaly, the circumstances where it does NOT occur (where applicable), all environmental details, logs, property files, etc - necessary for Liferay and the community to help determine the root cause. Issues that do not contain this information are difficult to troubleshoot and may be closed as "cannot reproduce".

[Tammy Fong]

1) Log in as admin
2) Control Panel> Portal> Users> Remove a user from community/organization
3) Add Blogs Aggregator portlet to a page of the organization
4) Click on an article that the removed user blogged
Results: See the whole blogged entry with no exceptions in tomcat.

Change 2) to deactivating user
Results: "Forbidden: You do not have permission to access the requested source" is shown and the following exception

[PortalImpl:3812] Current URL /web/michelle/blog/-/blogs/we-have-an-amazing-chat%21?_33_redirect=http%3A%2F%2Flocalhost%3A8080%2Fweb%2Fguest%2Fblogga%3Fp_p_id%3D115%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_p_col_id%3Dcolumn-1%26p_p_col_pos%3D1%26p_p_col_count%3D2 generates exception: User 10876 is not allowed to access the public pages of group 11022
[PortalImpl:3827] com.liferay.portal.security.auth.PrincipalException: User 10876 is not allowed to access the public pages of group 11022
com.liferay.portal.security.auth.PrincipalException: User 10876 is not allowed to access the public pages of group 11022

Reproduced in: Tomcat 6.0.26. + HSQL. Firefox 3.6.13. 6.0.5GA3.

It is fixed in 6.0.x Revision 71721 and 6.1.x Revision 71721; blogs of deactivated and removed users can be read.