Changing user's e-mail address when e-mail address verification is turned on can cause cache inconsistency in clustered environment

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.20 EE GA2, 6.1.30 EE GA3, 7.0.0 M3
• Fix Version/s: 6.1.X EE, 6.2.4 CE GA5, 6.2.X EE, 7.0.0 M1
• Component/s: Core Infrastructure, Fault Tolerance, Fault Tolerance > Clustering Framework, Performance > Caching Infrastructure
• Labels:
  • QA-R
  • QA-TP
  • ee-ts
  • liferay-fixpack-platform-27-6130
  • liferay-fixpack-portal-62-6210
• Branch Version/s:
  6.2.x, 6.1.x
• Backported to Branch:
  Committed
• Story Points: 12
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/16089

Steps to reproduce

1. Setup 2 nodes for clustering
2. Set up mail properties, clustering properties and e-mail address verification in portal-ext.properties for each node
   e.g.:

   company.security.strangers.verify=true
   
   cluster.link.enabled=true
   lucene.replicate.write=true
   
   ## Mail server settings ##
   mail.session.mail.pop3.host=localhost
   mail.session.mail.store.protocol=smtp
   mail.session.mail.transport.protocol=smtp
   mail.session.mail.smtp.host=smtp.gmail.com
   mail.session.mail.smtp.password=******
   mail.session.mail.smtp.user=[e-mail]
   mail.session.mail.smtp.port=465
   mail.session.mail.smtp.auth=true
   mail.session.mail.smtp.starttls.enable=true
   mail.session.mail.smtp.socketFactory.class=javax.net.ssl.SSLSocketFactory
   mail.session.mail.smtp.sendpartial=true
   

3. Start both nodes
4. Login to node1 with the administrator user ([e-mail] for default login)
5. Create a user (use an existing e-mail address as e-mails will be sent and needed)
6. Record the e-mail address of the user for later use
7. Change the e-mail address of the user to another existing one
8. Keep this browser window opened
9. Verify that you received the confirmation e-mail to your new e-mail address
10. Copy the link from the e-mail and change the url to point node2 e.g.: if node1 runs on http://localhost:8080 and node2 runs on http://localhost:8181 then change http://localhost:8080 part of the url to http://localhost:8181
11. Paste the prepared url into a new browser window
12. Press the verify button
13. Login as administrator to this node (should be node2)
14. Navigate to Control Panel > Users and Organizations
15. Click on the user to edit the details
16. Verify that the newly set e-mail address is displayed for this user
17. Get the previously used browser window
18. Navigate to Control Panel > Users and Organizations
19. Click on the user to edit the details
20. Verify that the old e-mail address is displayed here

I was able to reproduce this issue on master GIT: 1c22b1e56c5fe9b7ba1f58633eea3f28afd37d86