InlineSQLHelperImpl inserts ResourcePermissionSQL to first WHERE clause

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.2.X, Master
• Fix Version/s: 7.2.X, 7.3.10 DXP FP1, 7.3.10.1 DXP SP1, 7.3.6 CE GA7, 7.3.X, Master
• Component/s: Application Security > Permissions
• Labels:
  • backend_test
  • ee-ts
  • liferay-dxp-73-sp1
  • liferay-fixpack-dxp-1-7310
  • liferay-fixpack-dxp-9-7210
• Branch Version/s:
  7.3.x, 7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Sprint: Iteration 49
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/95300

Reproduction steps:

1. Create a new user "user1"
2. Replace the groupId in the attached Groovy script test.groovy

   import java.util.ArrayList;
   import com.liferay.journal.service.JournalArticleServiceUtil;
   import com.liferay.portal.kernel.model.User;
   import com.liferay.portal.kernel.security.auth.CompanyThreadLocal;
   import com.liferay.portal.kernel.security.permission.PermissionChecker;
   import com.liferay.portal.kernel.security.permission.PermissionCheckerFactoryUtil;
   import com.liferay.portal.kernel.security.permission.PermissionThreadLocal;
   import com.liferay.portal.kernel.service.UserLocalServiceUtil;
   
   long groupId = <<INSERT GROUP ID HERE>>;
   long companyId = CompanyThreadLocal.getCompanyId();
   User user1 = UserLocalServiceUtil.getUserByScreenName(companyId, "user1");
   
   PermissionChecker checker = PermissionCheckerFactoryUtil.create(user1);
   PermissionThreadLocal.setPermissionChecker(checker);
   
   try {
   	JournalArticleServiceUtil.search(
   		companyId, groupId, new ArrayList<Long>(), 0,
   		null, null, null, null,
   		"asdfgh", "BASIC-WEB-CONTENT", "BASIC-WEB-CONTENT",
   		null, null, 0, null,
   		true, -1, -1,
   		null);
   }
   catch(Exception ex) {
   	out.println("ERROR:");
   	ex.printStackTrace(out);
   }
   

3. Run the script at Control Panel→Configuration→Server Administration→Script→copy-paste→Execute

Expected behaviour: No error is shown in the output
Actual behaviour: SQL error is shown in the output