Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-122393

Users are able to see the form delete option without permission

    Details

      Description

      Users are able to see the form delete option without permission

      Steps to reproduce:
      1. Create a form
      2. Create a page with the form widget and select the created form
      3. Go to the created page and submit the form multiple times.
      4. Create a site role with the following permissions
           All the permissions of Site Administration -> Content & Data -> Forms except the related with Form Instance -> Delete
      5 Create a user member of this site with the created site role
      6 Login with this user and go to Content & Data -> Forms -> View Entries
      7 Select an Entry

      Expected behaviour
      The user is unable to see or use the delete option

      Actual behaviour
      The user is able to see and use the delete option and if I click on delete generates an error:

       

       

       

        Attachments

          Activity

            People

            Assignee:
            walter.shao Walter Shao
            Reporter:
            roberto.diaz Roberto Díaz
            Participants of an Issue:
            Recent user:
            Yunlin "Steven" Sun
            Engineering Assignee:
            Roberto Díaz
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              16 weeks, 1 day ago

                Packages

                Version Package
                7.0.0 DXP FP97
                7.0.X
                7.1.10 DXP FP20
                7.1.10.5 SP5
                7.1.X
                7.2.X
                7.3.X
                Master