Assets not rendered correctly when user has only VIEW permissin

• Type: Bug
• Status: Verified
• Resolution: Unresolved
• Affects Version/s: 7.2.X, 7.3.X, 7.3.1 CE GA2, 7.3.2 CE GA3, Master
• Fix Version/s: None
• Component/s: Asset Framework
• Labels:
  • QA-V
• Fix Priority: 3

When searched with the global Search a list of assets is shown. When clicking on the title of a search result the portal renders a page depending on the target (e.g. "abstract" or "full_content") and the UPDATE and VIEW permission of the current user.

 

When the user has UPDATE permission this works fine. (getEDITUrl() is called)

But when the user has only VIEW permission the target page is not rendered correctly. I think that getViewUrl() is never called and getViewInContext() is called when implemented. But in all cases the full_content.jsp is not rendered.

Instead abstract.jsp is somehow rendered but looks not as intended. I think a wrong PortletUrl is produced by the Asset Framework.

This is not only true for my custom asset-enabled entity but also for Liferay assets like blogs.