Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-32468

Control Panel Page shows all tools without permissions

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: No Longer Reproducible
    • Affects Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2
    • Fix Version/s: 6.2.0 CE M4
    • Component/s: Legacy
    • Labels:
      None

      Description

      An user who is able to manage a page can change the type from "portlet" to "control panel". The tool list which will be shown now will show all installed tools, no matter if the user has permissions to the tool nor if it's activated. When choosing tools the user isn't allowed to see, he does not see them on the page, so it's not a security bug.

        Attachments

          Activity

            People

            Assignee:
            mika.koivisto Mika Koivisto
            Reporter:
            mod David Kubitza
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              8 years, 36 weeks, 4 days ago

                Packages

                Version Package
                6.2.0 CE M4