Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-26001

Web Content Permissions are ignored in search result list

    Details

    • Fix Priority:
      3

      Description

      When searching for content of an asset where a user has no view permissions, the link to that asset and the title of the content are displayed in the search result list.

      Reproduce:

      1. Login as admin user
      2. Create new Web content element. Title="Secret web content" Content="Secret content". Make sure the content is searchable
      3. Go to "My workflow tasks" in the control panel and review and approve the web content.
      4. Go back to the web content and open the permission page. Remove all view permissions (except for the owner)
      5. Add the search portlet to a public page
      6. Log out
      7. As guest user: Go to the search portlet and search for "secret".

      The webcontent with the title "Secret web content" will be shown in the result list.

        Attachments

          Activity

            People

            • Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                7 years, 17 weeks, 6 days ago

                Packages

                Version Package
                6.1.20 EE GA2
                --Sprint 11/12
                6.2.0 CE M2