Documents and Media Display added in Staging by user who is not admin will result in permission error

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.0 CE GA1, 6.1.1 CE GA2, 6.1.20 EE GA2
• Fix Version/s: 6.2.0 CE RC1, 6.2.0 CE RC6
• Component/s: Staging, Staging > Export/Import
• Labels:
  • QA-KC
  • QA-R
• Branch Version/s:
  6.1.x
• Backported to Branch:
  Committed
• Fix Priority: 5

Steps to reproduce:

1. Create a new site rol called "staging admin" and assign all the permissions in the "Site" section
2. Create a new user and assign him this role in the guest site
3. Log in as this user, go to this site and enable staging
4. Add the Documents and Media portlet to a page --> There will be a message saying that you don't have permissions to view this portlet

[Tammy Fong (Inactive)]

Committed on:
Portal 6.2.x GIT ID: d31a1b5b0bd1ea3e45c2472487cf0cd372533db5.

[Yang Gao (Inactive)]

PASSED Manual Testing following the steps in the description.

Reproduced on:
Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: 9ee8a4106740010165b617fbe5a0fc1c54a91dc7.

When add the Documents and Media portlet to a page, there will be a message saying that you don't have permissions to view this portlet.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: b34c38b784fc2329bef299720a5d8ab0b4a8b16c.
Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: d31a1b5b0bd1ea3e45c2472487cf0cd372533db5.

When add the Documents and Media portlet to a page, it will not result in permission error.

[Michael Saechang]

Thank you Yang for testing, closing as 'Fixed'.

[Josef Šustáček]

Needs to be rolled back and reimplemented, since original fix is causing LPS-34861.

[Daniel Kocsis]

Please test LPS-34681 again, because the new fix should resolve that as well.

[Kenji Heigel]

PASSED Manual Testing using the following steps:

1. Create a regular role with staging permissions
2. Create a site with a page
3. Add a user who is a member of the site, and has the created regular role.
4. Login as the user and activate staging
5. Add the DMD portlet to the page
6. View the DMD portlet

Fixed on:
Tomcat 7.0.40 + MySQL 5. Portal 6.2.x GIT ID: 34080ddff849c33d7ef0d0e2cea4bba264d11d1f.

There is no permission error, as the user should have permissions to view the portlet. The user is able to view the portlet. LPS-34861 has also been fixed and that ticket has been closed.