Instance admin sees self MFA TOTP status on Edit User page

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.3.4 CE GA5, 7.3.10 DXP GA1
• Component/s: Application Security > Multi-Factor Authentication
• Labels:
  • 7.3-known-issues
• Story Points: 1
• Fix Priority: 4
• Sprint: Iteration 43
• Git Pull Request: https://github.com/liferay-appsec/liferay-portal/pull/21

Given Instance admin logs in to Portal
And he enables MFA + Time based One Time Password
And goes to Control Panel / Users / Users and Organizations

When he selects any user to edit their profile
And he clicks on the Multi-Factor Authentication tab

Then he sees his MFA TOTP form, which is either shows a QRCode setup state or a button to remove the setup

Expectation: Has to be decided with PM

Note: Either the admin submits the form with the QR code, or turns off the TOTP setup, has no effect on the selected user neither the admin.

 

Note 2: A submitted QR Code form in this case, throws the following log:

2020-07-30 11:31:12.775 ERROR [http-nio-8080-exec-8][PortletServlet:119] javax.portlet.PortletException: javax.portlet.PortletException: processAction method not implemented2020-07-30 11:31:12.775 ERROR [http-nio-8080-exec-8][PortletServlet:119] javax.portlet.PortletException: javax.portlet.PortletException: processAction method not implementedjavax.portlet.PortletException: javax.portlet.PortletException: processAction method not implemented at com.liferay.portal.kernel.portlet.LiferayPortlet.callActionMethod(LiferayPortlet.java:185) at com.liferay.portal.kernel.portlet.bridges.mvc.MVCPortlet.callActionMethod(MVCPortlet.java:396) at com.liferay.portal.kernel.portlet.LiferayPortlet.processAction(LiferayPortlet.java:88) at com.liferay.portal.kernel.portlet.bridges.mvc.MVCPortlet.processAction(MVCPortlet.java:249) at com.liferay.portlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:77) at com.liferay.portal.kernel.portlet.PortletFilterUtil.doFilter(PortletFilterUtil.java:50)