Permissions and Move to the Recycle Bin options visible in Message Boards threads to users without those permissions

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X, 7.1.X, 7.2.X, Master
• Fix Version/s: 7.0.0 DXP FP91, 7.0.10.14 DXP SP14, 7.0.X, 7.1.10 DXP FP17, 7.1.10.4 SP4, 7.1.X, 7.2.10 DXP FP5, 7.2.10.2 DXP SP2, 7.2.X, 7.3.1 CE GA2, 7.3.2 CE GA3, 7.3.10 DXP GA1, Master
• Component/s: Message Boards
• Labels:
  • ee-ts
  • liferay-dxp-70-sp14
  • liferay-dxp-71-sp4
  • liferay-dxp-72-sp2
  • liferay-fixpack-de-91-7010
  • liferay-fixpack-dxp-17-7110
  • liferay-fixpack-dxp-5-7210
• Branch Version/s:
  7.2.x, 7.1.x, 7.0.x
• Backported to Branch:
  Committed
• Story Points: 1
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/85577

Steps to Reproduce

1. Add a Message Board portlet to the page
2. Create two users and assign them to the site
3. Log in as the first user and create a new message board thread
4. Log in as the second user
5. View the thread and verify that the ellipse menu does not contain "Permissions" or "Move to Recycle Bin"
6. Reply to the thread

Expected Result: The ellipse menu does not contain "Permissions" or "Move to Recycle Bin"

Actual Result: The options for "Permissions" and "Move to the Recycle Bin" become viewable. Clicking on either of them results in a permission exception and no action is performed.