Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-156902

User can see content without permission via notification link

Details

    • 7.2.x
    • Committed
    • 3

    Description

      Steps to reproduce:

      1. Add new user "[email protected]"
      2. Add meesage "MB Thread Message Subject"
      3. Add Content Page "Message Boards Page" with Message Boards Portlet
      4. Go to Message Boards Thread, add View and Subscribe permission for User
      5. Logout and login with user "[email protected]"
      6. Subscribe to Message "MB Thread Message Subject"
      7. Logout ad login as test, reply message thread "MB Body Reply"
      8. Remove View and Subscribe permission for User and Guest
      9. Logout and login with user "[email protected]"
      10. Go to user Notifications
      11. Click the notification to view content

      Expected Result:
      User cannot view the content because he does not have permission.

      Actual Result:
      User can view the content.

      Attachments

        Issue Links

          Activity

            People

              harry.chai Harry Chai
              harry.chai Harry Chai
              Kiyoshi Lee Kiyoshi Lee
              Caleb Yun Caleb Yun (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                12 weeks, 3 days ago

                Packages

                  Version Package
                  7.2.X