Details

    • Branch Version/s:
      6.0.x
    • Backported to Branch:
      Committed

      Description

      If view permissions on a Web Content entry are removed for a certain role, that role can still view the entry in the Web Content Display portlet as long as the portlet itself has view permissions for that role enabled.

      To reproduce:
      1.) Create a WC entry
      2.) Disable Guest view permissions for the WC entry
      3.) Add the WC Display portlet to a page
      4.) Enable Guest view permissions for the WCD portlet
      5.) Log out
      6.) View the WCD portlet as the Guest user

      The portlet will display the WC entry to the Guest user. The portlet has view access enabled, but the entry does not. Normally this would result in a visible portlet with blocked or invisible content.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  3 years, 37 weeks, 4 days ago