Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-29732

Social Activities do not respect User privileges

    Details

      Description

      Social Activities at the moment contain only information about the receiverUserId, but not the information about the receiverRoleId. This is causing troubles to which activities are displayed to which user. For example, in one Site we have two group of users with two different roles:
      *site member (all users are site members)
      *site full member (all users are site full member)

      Now in DL or Message boards or in Wikis etc.. - we have resources which can be visible / updateable by all or only by users with "site full member" privileges.

      However, the respective default Liferay behavior is that when a resource is created or modified, it creates a social activity for a site, and in most cases receiveruserid=0.
      This is causing that all members of the site can see all social activities, irrespectively of the role/privilege they have on the resource.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                7 years, 20 weeks, 5 days ago

                Packages

                Version Package