Cannot publish portlet permissions to live site

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.2.X, Master
• Fix Version/s: 7.2.10 DXP FP5, 7.2.10.2 DXP SP2, 7.2.X, 7.3.1 CE GA2, Master
• Component/s: Application Security > Permissions, Staging
• Labels:
  • ee-ts
  • liferay-dxp-72-sp2
  • liferay-fixpack-dxp-5-7210
  • pt-app-security-review
• Branch Version/s:
  7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 4
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/83933

When attempting to publish newly modified portlet permissions to the live site, said permissions are not published.  However, when using the "Copy from Live" option, live site permissions are copied into the staging site correctly.

Steps to reproduce:

1. Create a new site and page.
2. Add web content display portlet to the page.
3. Add content to the web content display portlet.
4. Verify an unauthenticated user can view the content on the page.
5. Go to Site > Content & Data > Web Content > Info (small "i" icon near search bar) > ellipse > Permissions.
6. adjust the permissions so only the Owner role has access (remove guest and user VIEW permission).  Save.
7. Verify the unauthenticated user can no longer view the content on the page.
8. Enable locale live staging.
9. On the staging site, go to Site > Content & Data > Web Content > Info (small "i" icon near search bar) > ellipse > Permissions.
10. Modify the permissions again, granting access for the guest user to VIEW.
11. In the Web Content portlet, click the ellipse at the top of the page and select "Staging".
12. Under the "Permissions" area, enable "Publish Permissions".  Publish to Live.

Expected Results: The permissions were successfully published, so the unauthenticated user can view the content on the page.

Actual Results: The permissions were not published, so the unauthenticated user cannot view the content on the page.

Reproduced in master: ae69e39b628a47ee4a64eaff6ab69855a7e3a5cf