Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-130588

User can perform actions on user group that they have no permission

Details

    Description

      Steps to Reproduce

      1. Add a user group: User Group 1
      2. Add a reg role with following permissions
        1. Portal: View Control Panel Menu
        2. User Groups: Access in Control Panel
        3. User Groups > User Group: View
      3. Add a user: User1 with the role assigned
      4. Login or Impersonate User1
      5. Go to Control Panel > Users > User Groups
      6. Assert User Group 1 listed
      7. Assert User1 can perform actions on User Group 1

      Attachments

        Activity

          People

            patricia.perez Patricia Perez
            sharry.shi Sharry Shi
            Chao Wang Chao Wang
            Drew Brokke Drew Brokke
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              2 years, 7 weeks, 1 day ago

              Packages

                Version Package
                7.4.0 CE GA1 DXP 7,4
                7.4.13 DXP GA1
                7.4.3.5 CE GA5
                7.4.13 DXP U1
                7.4.3.6 CE GA6
                7.4.13 DXP U2
                Master