Files in DDL are uploaded without permission issue warning

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.2.X, 7.3.X, Master
• Fix Version/s: 7.4.3.52 CE GA52, Master
• Component/s: Dynamic Data Lists
• Labels:
  • QA-AUTOMATION
  • ee-ts
  • pt-app-security-review
• Fix Priority: 3
• Git Pull Request: https://github.com/liferay-forms/liferay-portal/pull/1954
• QA Test Name:
  • LocalFile.CPKaleoformsadmin#DeactivateAndActivateWorkflowDefinition
  • LocalFile.CPKaleoformsadmin#DeactivateAndDeleteWorkflowDefinition
  • LocalFile.CPKaleoformsadmin#DeleteProcess
  • LocalFile.CPKaleoformsadmin#EditProcessForms
  • LocalFile.CPKaleoformsadmin#EditProcessNewWorkflowViaSourceTab
  • LocalFile.CPKaleoformsadmin#EditSingleApproverWorkflowViaSourceTabViaAddProcess
  • LocalFile.KaleoformsUsecase#CompleteProcessAndViewNotifications
  • LocalFile.KaleoformsUsecase#CompleteProcessWithUploadedDefinition
  • LocalFile.KaleoformsUsecase#ViewApprovedProcessRecords
  • LocalFile.KaleoformsUsecase#WithdrawProcess
• QA Test Score: 50

Steps to reproduce:

1. Start a vanilla bundle
2. Go to Contents and Data/Dynamic Data Lists.
3. Add a new data definition with a text and a Documents and Media field.
4. Create a new dynamic data list based on this definition.
Checkpoint: Open the permissions of the list, and make sure Guest View permission is not ticked (it shouldn't be, but just to make sure).
5. Add a record to the list, and for the DM field upload a file from your PC.

 Result: The file is uploaded to Documents & media with a Guest View permission without the user's knowledge
 Expected: A warning message shows, alerting the user to the possible permission issue

 
EDIT:
2. Add a new data definition
3: Add a Documents and Media field.

 Expected: A warning message shows, alerting the user to the possible permission issue