-
Type:
Bug
-
Status: Closed
-
Resolution: Fixed
-
Affects Version/s: 6.1.X EE, 6.2.X EE, 7.0.0 M3
-
Fix Version/s: 6.2.2 CE GA3 , 6.2.X EE, 7.0.0 M2
-
Branch Version/s:6.2.x
-
Backported to Branch:Committed
-
Story Points:9
-
Fix Priority:3
-
Git Pull Request:
Steps to reproduce
- Login as admin
- Go to Control Panel -> Roles
- Create a custom role named User Group Viewer
- Define Permissions on the new role
- Portal - General
- Add - Go to Control Panel
- Portal - Users and Organizations - User
- Add - View
- Portal - Users and Organizations - User Groups
- Add - Assign Members
- Add - View
- Control Panel:Portal - User Groups
- Add - Access in Control Panel
- Add - View
- Note that View Members is not an option though it should be added (this should exist after the fix)
- Portal - General
- Add a User Group "Test User Group" with at least one user.
- Create a new user and assign the User Group Viewer role to them.
- Login as the new user
- Go to Control Panel -> User Groups
- Verify that the user can see the list of Users in the "Test User Group" and manage them.
- Now, go to the corresponding User Group JSON API - http://localhost:8080/api/jsonws?signature=/user/get-user-group-users-1-userGroupId.
- Supply the userGroupId (discovering by viewing the User Group and examining the HTML form, or by doing an SQL query).
- Click Invoke.
Result
EXPECTED: The list of users assigned to the User Group should be displayed.
ACTUAL: PrincipalException is thrown.
- Discovered while testing
-
LPS-49828 The list of users assigned to the User Group can not be displayed and throw a tomcat exception
- Closed
- is duplicated by
-
LPS-47678 Viewing List of Users throws PrincipalException
- Closed
-
LPS-48276 com.liferay.portal.NoSuchResourceActionException: com.liferay.portal.model.UserGroup#VIEW_MEMBERS
- Closed
- is related to
-
LPS-20332 JSON Service accessible information
- Closed
- relates
-
LPE-12381 UserGroup model missing VIEW_MEMBERS permission
-
- Closed
-