Make Pages in Draft not publicly accessible and not indexed

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.4.3.21 CE GA21, 7.4.13 DXP U21
• Component/s: Pages > Content Pages
• Labels:
  • d_22_03
  • fc_22_04
  • liferay-update-dxp-22-7413
  • liferay-update-dxp-23-7413
  • pt-app-security-review
• Epic Link: Make pages in Draft not publicly accessible and not indexed
• Git Pull Request: https://github.com/liferay-echo/liferay-portal/pull/7753

Description

When I am working with content pages that allow for draft + published status, it is happening that when I create a new page and keep it as Draft (no click on Publish button), the page is:

• Already added to the sitemap and indexed by Google.
• already accessible via URL.

This is the current expected behavior since content pages were created with consistency with Widget Pages, that do not have this draft+published status and are directly published upon page creation.

Requirements

When I create a new Content Page and keep it as draft:

• The URL should throw a 404 error since the page is not published.
• The page should not be added to the sitemap and not indexed by search engines since, as said, it is still in draft. 
• It should not appear in the site search results.

 

 Acceptance Criteria

Given a site in which I want to create new content pages to publish content,

When I create a new content page and keep it as draft without clicking on Publish,

Then the newly created content page, which is a draft version, does not have an accessible URL yet, giving a 404 error if I type its URL

 

Given a site in which I want to create new content pages to publish content,

When I create a new content page and keep it as draft without clicking on Publish,

Then the newly created content page, which is a draft version, is still not listed in the sitemap, so that it cannot be indexed by Google

 

Given a site in which I want to create new content pages to publish content,

When I create a new content page and keep it as draft without clicking on Publish,

Then the newly created content page and all of its content, which is in a draft version, does not appear in the Site's search engine.

 

Test Scenarios

Test Scenarios	Test Strategy	Kind of test	Is it covered by FrontEnd ? (JS-Unit)	Is it covered by BackEnd ? (unit or integration)	Could it be covered by POSHI?
The user without permission should view 404 when access to a content page without publish version	Critical	Manual	No	Yes	Yes
The user cannot view content page without publish version in sitemap	Critical	Manual	No	Yes	Yes
The user cannot search a content page without publish version and its content	Critical	Manual	No	No	Yes