Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-37997

Document library folders and journal folders asset renderer does not check user permissions.

    Details

      Description

      Steps to reproduce:

      1. Create two roles RoleA and RoleB
      2. Create two users UserAB and UserB, assign roles RoleA and RoleB to the user UserAB and only role B to user UserB.
      3. Create two folders FolderA and FolderB. Assign view permission on FolderA to RoleA and on FolderB to RoleB.
      4. Add asset publisher to a page
      5. Configure it to asset selection "manual"
      6. Select the two folders and save
      7. Visit the page using the created users.

      Expected results: UserAB can view both folders. UserB can view only one folder.
      Actual result: both users view both folders.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              pani.gui Pani Gui (Inactive)
              Reporter:
              carlos.sierra Carlos Sierra (Inactive)
              Participants of an Issue:
              Recent user:
              Marta Elicegui
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                8 years, 1 week, 1 day ago

                  Packages

                  Version Package
                  6.2.0 CE B1