Relationship deletion types will not work correctly if the user does not have permission to all the Objects affected

• Type: Bug
• Status: Verified
• Resolution: Unresolved
• Affects Version/s: Master
• Fix Version/s: None
• Component/s: Objects
• Labels:
  • 7.4-known-issues
  • liferay-ga1-dxp-7413
  • liferay-ga4-ce-743
  • liferay-ga5-ce-743
  • liferay-ga6-ce-743
  • liferay-ga7-ce-743
  • liferay-ga8-ce-743
  • liferay-u1-dxp-7413
  • liferay-u2-dxp-7413
• Fix Priority: 4

Summary:
Relationship deletion types will not work correctly if the user does not have permission to all the Objects affected

Steps to Reproduce:

1. Go to Objects
2. Create an Object A and an Object B with a field
3. Go to Object A and create a Relationship One to Many with Object B
4. Choose any Relationship Deletion Type
5. Create a Layout with that contains the Relationship tab for Object A
6. Publish them
7. Add some entries on Object B and one entry on Object A
8. Click on the Object A entry and add relations with the entries from Object B
9. Go to Roles
10. Create a Role > Define Permissions
11. Search for Object A
12. Give it all permissions
13. Create a new user and assign the created Role to it
14. Log in with the new user
15. Go to Object A and delete its entry
16. Log in with Test Test
17. Go to Object B and click to view any entry

Expected Result:

• Prevent: Entry cannot be deleted
• Cascade: Entry is deleted and all its relations entries on Object B are deleted too
• Disassociate: Entry is deleted and all its relations entries on Object B are dissociated

Actual Result:
Entry is deleted for any Deletion Type selected and its ID keep being displayed on the Relationship field on Object B entries

Verified on master: 2ef2546d5f8ce61aaecc9898bdd386cc6f29aae1