Details

    • Type: Bug
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: 5.1.2, 5.2.0
    • Fix Version/s: 5.2.1
    • Component/s: None
    • Labels:
      None
    • Liferay Contributor's Agreement:
      Accept

      Description

      Document Library Portlet.

      Rights for document:
      Owner - View, Update, Add Discussion
      Some Other Role (Owner's not in it) - View, Update, Add Discussion
      no other people have any permissions for the file.

      Problem: owner doesn't have "Add reply" links.
      Reason: html/taglib/ui/discussion/page.jsp, multiple "MBDiscussionPermission.contains(permissionChecker, scopeGroupId, className, classPK, ActionKeys.ADD_DISCUSSION)" calls do not check whether 'userId' (the param which is also passed by document library) is owner of "className+classPK'.
      Solution: permissionChecker.hasOwnerPermission(fileEntry.getCompanyId() - ???, className, classPK, userId, ActionKeys.ADD_DISCUSSION).

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                amos.fong Amos Fong
                Reporter:
                zverik Ilya Zverev (Inactive)
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  9 years, 30 weeks ago

                  Zendesk Support