Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-25718

User can see all organizations if he is not a member of any

    Details

      Description

      Steps to reproduce:

      1. Add a role with permission to see Users and Organizations in control panel (under Control Panel: Portal/Users and Organizations -> Access in Control Panel)
      2. Add user A and assign him the role created in 1.
      3. Add a couple of organizations (e.g. A,B,C)
      4. Log in with user A, go to control panel and click Users and Organizations

      User A can see all organizations even though user A is not a member of any of them and doesn't have portal scope VIEW permission for organizations.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  7 years, 13 weeks, 5 days ago

                  Packages

                  Version Package
                  6.0.X EE
                  6.1.20 EE GA2
                  --Sprint 11/12
                  6.2.0 CE M2