Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-40597

Permissions for Documents and Media home directory are not checked during search



      Steps to Reproduce:
      1. Add the Documents and Media and the Search portlets to a page.
      2. Edit the permissions on the Home directory of the document library. Uncheck all of the boxes under "View" so that no one has the permission to view. (Admin will still be able to view)
      3. Add a basic document to the Home directory.
      4. Add a subfolder to the Home directory. (view permissions on the subfolder should be granted to test if the permissions from the Home directory are being inherited)
      5. Add a document to the subfolder.
      6. Sign out so that you are viewing the site as a guest.
      7. Search for the names of the documents you created.

      Expected Result:
      That there would be no results in the search when permissions.view.dynamic.inheritance=true (which is the default)

      Actual Result:
      The search returns the documents you created. This allows you to select and download the document as well.


          Issue Links



              • Votes:
                1 Vote for this issue
                6 Start watching this issue


                • Created:
                  Days since last comment:
                  5 years, 6 weeks ago


                  Version Package
                  6.1.X EE
                  6.2.2 CE GA3
                  6.2.X EE
                  7.0.0 M1