Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-32468

Control Panel Page shows all tools without permissions

Details

    • Bug
    • Status: Closed
    • Resolution: No Longer Reproducible
    • 6.1.1 CE GA2, 6.1.20 EE GA2
    • 6.2.0 CE M4
    • Legacy
    • None

    Description

      An user who is able to manage a page can change the type from "portlet" to "control panel". The tool list which will be shown now will show all installed tools, no matter if the user has permissions to the tool nor if it's activated. When choosing tools the user isn't allowed to see, he does not see them on the page, so it's not a security bug.

      Attachments

        Activity

          People

            mika.koivisto Mika Koivisto (Inactive)
            mod David Kubitza (Inactive)
            Kiyoshi Lee Kiyoshi Lee
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              9 years, 37 weeks, 3 days ago

              Packages

                Version Package
                6.2.0 CE M4