Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-30437

Users without permission can create folders/files in the root folder

    Details

    • Branch Version/s:
      6.1.x
    • Backported to Branch:
      Committed
    • Story Points:
      2

      Description

      1. Create a new user (e.g., user1). Make sure this user has the Power User role
      2. Add a Documents and Media portlet to /web/guest/home
      3. Add a folder (e.g., folder1)
      4. For this new folder, give the Power User role permission to Add Subfolder permission
      5. Login as user1

      Observe that user1 has no permission to add folders to the root/home folder of the Documents and Media portlet

      6. Click on folder1
      7. Add a sub-folder (e.g., folder2)
      8. Select the move option on folder2
      9. Select the Home folder as the new parent folder.
      10. Click the Move button.
      11. Navigate to the root/home folder

      Observe that folder1 and folder2 are now both in the root/home folder.

      Same issue applies to moving a file

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  4 years, 15 weeks ago