The fragments can not be rendered when user with Update Page Content permission access to page editor

• Type: Regression Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: Master
• Component/s: Fragment Administration, Pages > Page Editor
• Labels:
  • QA-AUTOMATION
  • frontend
  • pt-app-security-review
• Fix Priority: 4
• Last Working Version:
  Master
• Git Pull Request: https://github.com/liferay-echo/liferay-portal/pull/211
• QA Test Name:
  • LocalFile.ContentPagesWithPermissions#EditInlineContentWithUpdatePageContentPermission
  • LocalFile.ContentPagesWithPermissions#MapInlineContentWithUpdatePageContentPermission
• QA Test Score: 10

Step to reproduce:

1. Add a new site role with the following permission:
   • Pages: View
   • Pages > Page: Update Page Content
   • Pages > Page: View
2. Add a new user
3. Assign new user to default site
4. Assign new site role to user
5. Add a page based on Blank
6. Add a Heading fragment
7. Publish
8. Impersonate user as new user
9. Navigate to new page
10. Click Pencil icon

Expected Results:
The Heading fragment should be shown normally.

Actual Results:
The Heading fragment is not rendered. The following error is thrown in browser console:

Reproduced on:
Tomcat 9.0.33 + MySQL 5.7. Portal master GIT ID: 5541574134ec571532683f18408ae3b68c484f3b.