Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-44691

Guest is able to download Wiki attachment in other Site by URL

    Details

    • Story Points:
      3

      Description

      Steps to reproduce:
      1. Login as "test" user.
      2. Create a new site named "test Site".
      3. Add a new page to test Site named "test Page".
      4. Add Wiki portlet to the test Page.
      5. Upload an attachment to Wiki with "Viewable by Site Members".
      6. Get the URL of the attachment you upload and login out.

      (By click Copy Link Location of drop-down list)
      7. Input this URL in browser with guest Role.

      Expected result:
      The page should redirect Login page or permission error page.

      Actual result:
      The guest could download this attachment.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              haoliang.wu Haoliang Wu (Inactive)
              Reporter:
              haoliang.wu Haoliang Wu (Inactive)
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                7 years, 23 weeks, 2 days ago

                  Packages

                  Version Package
                  7.0.0 M3