Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-125456

Not authorized users can still see documents uploaded by other users

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: Master
    • Fix Version/s: 7.3.X, Master
    • Component/s: Forms
    • Labels:
      None

      Description

      Steps to reproduce

      1. Go to Control Panel -> Users and Organizations -> Add User 
        1. Create a new user and save;
        2. Still on the edit page of the created user:
        3. Go to Memberships -> Sites -> Select the option Liferay -> Save;
        4. Go to Password and create a new password -> Save;
      2. Go to Control Panel -> Instance Settings -> User Authentication 
        1. Disable the option "Require strangers to verify their email address?"
      3. Go to Content & Data > Forms
      4. Add a new Form
      5. Add an Upload Field
      6. Publish the Form
      7. Copy the public URL created after publish the Form
      8. Log out and Log in with the new User created previously
      9. Go to the public URL
      10. Click on the Select button of the Upload Field

      Actual result
      The opened modal (Item Selector) displays a breadcrumb which allows the current user navigate through it and view the documents uploaded by other users.

      Expected result
      The current user must not view the documents uploaded by other users.

      Fix suggestions:

      • Disable breadcrumb navigation
      • Hide breadcrumb

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              cleyton.magalhaes Cleyton Magalhaes (Inactive)
              Reporter:
              renato.rego Renato Rêgo
              Participants of an Issue:
              Recent user:
              Enterprise Release HU
              Engineering Assignee:
              Carolina Barbosa
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                7 weeks, 6 days ago

                  Packages

                  Version Package
                  7.3.X
                  Master