Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-27608

Wrong permission checking for managing personal site pages

    Details

      Description

      Steps to reproduce the issue:

      1. Change the default permissions of the POWER USER role by removing the Manage Pages permission with scope User Personal Site (see attached screenshot)
      2. Then, create a new user (he will automatically get the POWER USER role.

      Then, the user can create pages in his personal site even though we removed the permission for doing it.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  7 years, 19 weeks, 5 days ago

                  Packages

                  Version Package
                  6.1.1 CE GA2
                  6.1.20 EE GA2
                  --Sprint 11/12
                  6.2.0 CE M2