Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-44592

A site administrator cannot edit layouts if custom fields for layout exists

    Details

      Description

      If custom fields for layouts exist, any site adminsitrator need update permissions for these custom fields. Otherwise the following PrincipalException is thrown:

      2014-02-26 09:48:19,016 ERROR [http-bio-8180-exec-2][render_portlet_jsp:132] null
      com.liferay.portal.security.auth.PrincipalException
              at com.liferay.portlet.expando.service.permission.ExpandoColumnPermissionImpl.check(ExpandoColumnPermissionImpl.java:36)
              at com.liferay.portlet.expando.service.permission.ExpandoColumnPermissionUtil.check(ExpandoColumnPermissionUtil.java:33)
              at com.liferay.portlet.expando.service.impl.ExpandoValueServiceImpl.addValue(ExpandoValueServiceImpl.java:51)
              at com.liferay.portlet.expando.service.impl.ExpandoValueServiceImpl.addValues(ExpandoValueServiceImpl.java:83)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:115)
              at com.liferay.portal.spring.transaction.DefaultTransactionExecutor.execute(DefaultTransactionExecutor.java:62)
              at com.liferay.portal.spring.transaction.TransactionInterceptor.invoke(TransactionInterceptor.java:51)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
              at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(ChainableMethodAdvice.java:56)
              at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(ServiceBeanMethodInvocation.java:111)
      

      A site administrator should be able to change the values of custom fields that belongs to a layout without the permission to change the defintion of the custom fileds itself.

      You can use the following steps to reproduce the issue:

      1. Startup a vanilla 6.2 EE portal and login as omniadmin
      2. Create a custom field for layouts and give 'guest' view permissions for that field
      3. Create a new user and make him a site administrator of the 'Liferay' site
      4. Impersonate that new user
      5. Goto Admin -> Site administration -> Pages and create a new page
      6. Select that new page in the tree, change the name and press Save
      7. The mentioned exception is thrown.

        Attachments

          Activity

            People

            • Assignee:
              john.co John Co
              Reporter:
              frickeo Olaf Fricke
              Participants of an Issue:
              Recent user:
              Esther Sanz
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                5 years, 24 weeks, 3 days ago

                Packages

                Version Package
                6.2.10 EE GA1