Power user can't connect to the Liferay Marketplace

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.3.3 CE GA4, 7.3.10 DXP GA1, Master
• Component/s: Application Security > Permissions
• Labels:
  • QA-AUTOMATION
• Fix Priority: 3
• QA Test Name:
  • LocalFile.SecurityUsecase#NoPermissionFromUnauthorizedURLAsPowerUser
• QA Test Score: 5

Steps to reproduced:

1. Login liferay as admin
2. Add new user and assign  Power User regular roles
3. Login out admin and login new user
4. Get p_auth and plid from html source  e.g. trsuQkm3 and 30
5. Navigator to http://localhost:8080/c/portal/update_layout?cmd=add&p_p_col_id=column-1&p_p_col_pos=0&p_p_id=com_liferay_marketplace_store_web_portlet_MarketplacePurchasedPortlet&p_auth=trsuQkm3&p_l_id=30

Expected Result: connect to the Liferay Marketplace successfully.

Actual Result: Could not connect to the Liferay Marketplace. Console log throws an error:

2020-03-18 06:27:06.339 ERROR [http-nio-8080-exec-5][JSONAction:105] Portlet com_liferay_marketplace_store_web_portlet_MarketplacePurchasedPortlet cannot be added to layout 2 by user 35469 

Affect case: 
LocalFile.SecurityUsecase#NoPermissionFromUnauthorizedURLAsPowerUser