Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-42374

Users without permission can access to Application Display Templates Add form



      Steps to reproduce:

      1. Create a new user.
      2. Sign in as the new user.
      3. Navigate to user's My Profile.
      4. Go to Admin > Configuration > Applications Display Templates.
      5. Verify the user does not have permissions to add a template.
      6. Navigate to user's My Profile.
      7. Add Asset Publisher portlet.
      8. Click Options > Configuration > Setup > Display Settings > Manage Display Templates for user's name.
      9. Click +Add > Asset Publisher Template.
      10. Fill out name and script.
      11. Save.
      12. Get "You do not have the required permissions." message.

      Expected result:
      The user should not see +Add link on Application Display Tempaltes window.

      Actual result:
      The user can access to Application Display Templates Add format even though he does not have permissions.


        1. +Add link.jpg
          88 kB
          Pani Gui
        2. Application Display Templates in user's site administration.jpg
          103 kB
          Pani Gui
        3. Fixed.PNG
          31 kB
          Serena Song

          Issue Links



              • Assignee:
                he.song Serena Song (Inactive)
                pani.gui Pani Gui (Inactive)
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                1 Start watching this issue


                • Created:
                  Days since last comment:
                  5 years, 51 weeks, 1 day ago


                  Version Package
                  6.2.2 CE GA3
                  6.2.X EE
                  7.0.0 M1