Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-40580

User can view details of User Groups that he can't manage

    Details

      Description

      Steps to reproduce-

      1. Create a Regular Role (RR) with permission User Groups Access in Control Panel
      2. Create an user1, and add the role.
      3. Create an user2, and user3
      4. Create an organization Org, and add user1 and user2 to the Org
      5. Create an User Group: UG , and add user2 and user3 to the UG
      6. As user1, go to Control Panel > User Groups

      Result: User can view UG and a link over the UG and the action "View members". After view members he can view the user2 in the list ( user2 belongs to the same Org )

      Expected: User can view the UG but no action can be performed over it, he doesn't have any permission over the group.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                lu.liu Lu Liu
                Reporter:
                jose.jimenez Jose Jimenez
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  6 years, 7 weeks, 4 days ago

                  Packages

                  Version Package
                  6.0.X EE