Affects Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2, 6.2.0 CE M2
Environment:Liferay Version: 6.1 GA 1
Operating System: Windows XP
Application Server: Tomcat 7.0.x
Java Virtual Machine: Java 6
Database: Oracle 11g
Backported to Branch:Committed
Search results display for guests even though guest view permissions are disabled.
Steps to reproduce:
1. Add Search Portlet
2. Create Web content
3. Remove guest "view" permissions
6. Search for web content
Content will display in asset publisher when it's not supposed to. and you can also click on the link, which leads you to an empty asset publisher.
See steps in video
Search should not produce results, and no link should be available.