PUBLIC - Liferay Portal Community Edition
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-29017

A user can always see user group layouts despite explicitely removing permissions

    Details

    • Type: Bug Bug
    • Status: Verified
    • Resolution: Unresolved
    • Affects Version/s: 6.1.10 EE GA1, 6.1.30 EE GA3, 6.2.0 CE M2, 7.0.0 M3
    • Fix Version/s: Master
    • Labels:
      None
    • Fix Priority:
      3
    • Similar Issues:
      Show 4 results 

      Description

      reproduce steps:

      1.set following property in portal-ext.properties
      user.groups.copy.layouts.to.user.personal.site=false

      layout.user.private.layouts.enabled=true
      layout.user.private.layouts.auto.create=false
      layout.user.private.layouts.power.user.required=false
      admin.default.role.names=User

      2. create a user group aaa

      3. create a private page bbb for user group aaa

      4. uncheck user role view permission for page bbb

      5. create a user ccc and assign user ccc to user group aaa

      6. login portal with user ccc and then click "My private pages" you will see the page bbb.

      Because the user role has no view permission for page bbb, so the user ccc should not see the page bbb

        Activity

        Hide
        Randy Zhu added a comment -

        In preparation for Ideation; we are merging New Feature and Improvement tickets into a singular ticket type called “Feature Request”.

        This ticket has been converted to story ticket type for you; so that the ticket may continue to progress through the workflow properly.

        However these tickets were not writing in the proper story format. Please format this ticket to story standards.

        Show
        Randy Zhu added a comment - In preparation for Ideation; we are merging New Feature and Improvement tickets into a singular ticket type called “Feature Request”. This ticket has been converted to story ticket type for you; so that the ticket may continue to progress through the workflow properly. However these tickets were not writing in the proper story format. Please format this ticket to story standards.
        Hide
        Edward Gonzales added a comment -

        Hello! We are in the process of removing the "General" component all together. Please help us by removing "General" from the component field and applying a relevant component. Thanks in advance for your help. formercomponentgeneral03202013EG

        Show
        Edward Gonzales added a comment - Hello! We are in the process of removing the "General" component all together. Please help us by removing "General" from the component field and applying a relevant component. Thanks in advance for your help. formercomponentgeneral03202013EG
        Hide
        Brian Wulbern added a comment -

        Hi Dale,

        Following your steps, I'm still able to reproduce this on our Master branch at head. I will reassign to Hugo, per Jonathan's comment. Thanks!

        Show
        Brian Wulbern added a comment - Hi Dale, Following your steps, I'm still able to reproduce this on our Master branch at head. I will reassign to Hugo, per Jonathan's comment. Thanks!

          People

          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Days since last comment:
              42 weeks, 2 days ago

              Development

                Structure Helper Panel