PUBLIC - Liferay Portal Community Edition
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-24697

Comment Permissions - a user cannot edit / delete his own comments and cannot edit / delete the comments of other users if given the permission to do so

    Details

    • Type: Regression Bug Regression Bug
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: 6.1.0 CE RC1, 6.2.0 CE M2
    • Labels:
    • Environment:
      Tomcat 7.0.23 + MySQL 5. 6.1.x GIT ID: 345193895dfe4cab689db540c7238881877845f5.
      Tomcat 7.0.23 + MySQL 5. 6.2.x GIT ID: 65450046dcbb21c793742e9d0cdc0942d7b6f5a1.
    • Fix Priority:
      4
    • Similar Issues:
      Show 4 results 

      Description

      Users are unable to edit or delete their own comments. Additionally, if the user is given permission to edit and delete comments, the user will only be able to edit and delete his or her own comment and not the comments of other users. This also prevents admins from being able to create a discussion moderator that can edit or delete the comments of other users.

      Steps to reproduce:

      1. Create a role that allows a user to edit and delete comments
        • Navigate to Control Panel > Roles
        • Click Add > Regular Role
        • Enter Member in the Name field and click Save
        • Click Actions > Define Permissions for the Member
        • Select Site Content > Web Content in the drop down
          • Under Web Content, flag Add Discussion and View
        • Click Save
      2. Create a user and assign that user to the Member role
      3. Add a web content display portlet and add a web content article to it
      4. Configure the portlet to allow comments
      5. Add a comment
      6. Sign out, and then sign in as the user created in Step 2
      7. Navigate to the web content article.
      8. Add a comment
        • Note that the user will be unable to edit or delete the comment he or she posted
      9. Sign out, and sign in as the Admin user
      10. Add the delete and update discussion permissions to the Member role
        • Navigate to Control Panel > Roles
        • Click on Actions > Define Permissions for the Member role
        • Select Site Content > Web Content under the drop down
          • Under Web Content, flag Delete Discussion and Update Discussion
        • Click Save
      11. Sign out, and sign in as the user created in Step 2
      12. Navigate to the web content article
        • Now, the user will have permission to edit his or her own comment. However, the user will not have the ability to edit the Admin user's comment.

        Activity

          People

          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Days since last comment:
              3 years, 16 weeks, 3 days ago

              Development

                Structure Helper Panel