Web Content Display portlet displays Web Content the user does not have view permission for when staging is enabled

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.20 EE GA2, 6.2.0 CE GA1, 7.0.0 M3
• Fix Version/s: 6.1.X EE, 6.2.2 CE GA3 , 6.2.X EE, 7.0.0 M1
• Component/s: Content Display Widgets > Web Content Display widget, Sites Administration > Sites, Staging, ~[Archived] WCM > Publication
• Labels:
  • QA-R
  • QA-TP
  • ee-ts
  • liferay-fixpack-platform-17-6210
  • liferay-fixpack-wcm-core-4-6130
• Environment: LIFERAY VERSION: 6.1 GA2 ; OPERATING SYSTEM: Red Hat Enterprise 5; APPLICATION SERVER: Tomcat 7.0 ; JAVA VIRTUAL MACHINE: Java 6; DATABASE: Oracle 11.2
• Branch Version/s:
  6.2.x, 6.1.x
• Backported to Branch:
  Committed
• Story Points: 4
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/15387

Steps to reproduce/Testing done

1. Start Liferay
2. Go to Control Panel > Users & Organizations
3. Create a new user and add it to the default Liferay site
4. Enable Local Staging with Page Versioning enabled for Public and Private pages
5. Go to Control Panel > Web Content
6. Add a new web content article
7. Remove the View permissions of the web content article from Site Member and Guest roles
8. Go to Control Panel > Site Pages
9. Great a new Private Page
10. View the new page created and add a Web Content Display Portlet
11. Configure the WCD Portlet to show the Web Content created earlier
12. Mark the page as Ready for Publication
13. Publish to live ensuring that the Permissions are pushed
14. Impersonate or login as the new user created earlier
15. Notice that the web content is visible in the WCD Portlet on the private page