Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-28550

Able to view any journal structure/template's source

Details

    Description

      1. Add web content template or structure
      2. Remove guest view permissions
      3. Get the templateId or structureId and go to URL like this:
      http://localhost:8080/c/journal/get_template?templateId=10811

      Even if guests have permission to view it (this will be default on all public sites), I think only users who can update should actually be able to see the source of a template.

      Attachments

        Issue Links

          Activity

            People

              luyang.tan Luyang Tan (Inactive)
              amos.fong Amos Fong
              Kiyoshi Lee Kiyoshi Lee
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                10 years, 4 weeks, 5 days ago

                Packages

                  Version Package
                  6.1.2 CE GA3
                  6.1.30 EE GA3
                  6.2.0 CE M2