Details

    • Branch Version/s:
      6.0.x
    • Backported to Branch:
      Committed
    • Similar Issues:
      Show 3 results 

      Description

      If view permissions on a Web Content entry are removed for a certain role, that role can still view the entry in the Web Content Display portlet as long as the portlet itself has view permissions for that role enabled.

      To reproduce:
      1.) Create a WC entry
      2.) Disable Guest view permissions for the WC entry
      3.) Add the WC Display portlet to a page
      4.) Enable Guest view permissions for the WCD portlet
      5.) Log out
      6.) View the WCD portlet as the Guest user

      The portlet will display the WC entry to the Guest user. The portlet has view access enabled, but the entry does not. Normally this would result in a visible portlet with blocked or invisible content.

        Issue Links

          Activity

          Hide
          Justin Choi added a comment -

          PASSED Manual Testing following the steps in the description.

          Special note: The entry has to be created in the control panel, change the permissions there, and then the user has to go to the portal to add the WC portlet. The user also has to associate that article with that portlet before signing out.

          Reproduced on:
          Tomcat 7.0.20 + MySQL 5. 6.1.x Revision 88148.

          Fixed on:
          Tomcat 7.0.21 + MySQL 5. 6.1.x Revision 88884.

          Show
          Justin Choi added a comment - PASSED Manual Testing following the steps in the description. Special note: The entry has to be created in the control panel, change the permissions there, and then the user has to go to the portal to add the WC portlet. The user also has to associate that article with that portlet before signing out. Reproduced on: Tomcat 7.0.20 + MySQL 5. 6.1.x Revision 88148. Fixed on: Tomcat 7.0.21 + MySQL 5. 6.1.x Revision 88884.
          Hide
          Vicki Tsang added a comment -

          This is being bulk closed in preparation for the new workflow.

          Show
          Vicki Tsang added a comment - This is being bulk closed in preparation for the new workflow.
          Hide
          Justin Choi added a comment -

          PASSED Manual Testing following the steps in the description.

          Fixed on:
          Tomcat 6.0.33 + MySQL 5. Portal 6.0.x EE GIT ID: d3035f70b94d8b2576dd287049dcd6963e2e2d91.

          • WCD article that has no guest permission will not appear on the page when viewed with Guest permissions.
          Show
          Justin Choi added a comment - PASSED Manual Testing following the steps in the description. Fixed on: Tomcat 6.0.33 + MySQL 5. Portal 6.0.x EE GIT ID: d3035f70b94d8b2576dd287049dcd6963e2e2d91. WCD article that has no guest permission will not appear on the page when viewed with Guest permissions.

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                1 year, 6 weeks, 6 days ago

                Development

                  Structure Helper Panel