Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-28550

Able to view any journal structure/template's source

    Details

      Description

      1. Add web content template or structure
      2. Remove guest view permissions
      3. Get the templateId or structureId and go to URL like this:
      http://localhost:8080/c/journal/get_template?templateId=10811

      Even if guests have permission to view it (this will be default on all public sites), I think only users who can update should actually be able to see the source of a template.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              luyang.tan Luyang Tan (Inactive)
              Reporter:
              amos.fong Amos Fong
              Participants of an Issue:
              Recent user:
              Marta Elicegui
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 11 weeks, 1 day ago

                  Packages

                  Version Package
                  6.1.2 CE GA3
                  6.1.30 EE GA3
                  6.2.0 CE M2