Account Group permissions for Organization role do not take effect

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: Master
• Fix Version/s: 7.4.3.10 CE GA10, 7.4.3.11 CE GA11, Master
• Component/s: User Management > Business Accounts
• Labels:
  • 7.4-must
  • liferay-update-dxp-6-7413
  • pt-app-security-review
• Fix Priority: 4
• Git Pull Request: https://github.com/liferay-usm/liferay-portal/pull/419

Steps to Reproduce:

1. Add a regular role with the following permissions:

• Control Panel > General Permissions > View Control Panel Menu

1. Add an organization
2. Add an organization role and select all Application Permissions and Resource Permissions for Account Groups
3. Add a user and assign it to the regular role
4. Assign same user to the organization and the organization role
5. Log in as new user

Expected results: User has access to Account Groups
Actual results: Account Groups does not display in Control Panel. This is not reproducible with Accounts and Account Users.

Reproduced on:
Tomcat 9.0.43 + MySQL 5.7
Portal master GIT ID: b9c556921d024b2841d578dd6290302c88966888