Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-38360

Permissions - User can see certain content (Blogs Entry, Message Board Thread, Wiki Node, Dynamic Data List, Recycle Bin) in the Control Panel without view permissions

    Details

    • Fix Priority:
      4

      Description

      In 6.2.x, if a user is assigned a regular role with 'Access in Site Administration', the user can view the content from the following portlet in Sites Administration: Blogs, Message Boards, Wiki, Dynamic Data Lists, Bookmarks, Polls, Tags, Categories, and Recycle Bin.

      For Web Content and Documents and Media, a user must be given the "View" permissions for that particular content (ie Web Content View) in order to view content. The behavior should be the same for all portlets under Site Administration > Content.

      Reproduction steps:

      1. Create regular role 'testRole'
      2. Define the following permissions to te 'testRole'
        1. Blogs portlet View (Site Applications -> Blogs)
        2. Blogs Access in Control Panel and View (under 6.2.x)
        3. Blogs Access in Site Administration (6.2.x)
        4. Site Go to Site Administration (6.2.x)
      3. Create user 'test2'
      4. Revoke the 'Power User' role from the 'test2' user and grant the 'testRole'
      5. Add a Blogs portlet to a page and add a Blogs Entry
      6. Revoke from the Blogs Entry the Guest View permission
      7. Sign In with 'test2' user

      Actual:

      1. You can't see the created Blogs Entry from the Blogs portlet
      2. You can see the created Blogs Entry from the Control Panel

      Expected:
      You can't see the Blogs Entry in all cases.

        Attachments

          Activity

            People

            Assignee:
            robert.srisamang Robert Srisam-ang (Inactive)
            Reporter:
            tibor.kovacs Tibor Kovács (Inactive)
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              7 years, 4 weeks, 4 days ago

                Packages

                Version Package
                6.2.0 CE RC4