Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-24308

User can create/delete private pages even if "layout.user.private.layouts.modifiable" is set to false

    Details

      Description

      Steps to reproduce:

      • Add this to potral-ext.properties:
        layout.user.private.layouts.enabled=true
        layout.user.private.layouts.modifiable=false
        layout.user.private.layouts.auto.create=true    
        
        layout.user.public.layouts.enabled=false
        layout.user.public.layouts.modifiable=true
        layout.user.public.layouts.auto.create=true
        
      • register new user and do to his private pages
      • the default "Welcome" private page is created. Portlet control icons are not present - this is OK
      • problem 1 -> user can add (from "Add" drop down) and delete pages
      • problem 2 -> user can go to manage pages in Control panel
      • problem 3 -> even if "access control panel" permission is removed from "User" role the "manage pages" button is still available, resulting in "Not Found" error message on click

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              pani.gui Pani Gui (Inactive)
              Reporter:
              azzazzel Milen Dyankov
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 8 weeks, 5 days ago

                  Packages

                  Version Package
                  6.1.1 CE GA2
                  6.1.20 EE GA2
                  6.2.0 CE M2